0000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:48 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5450, &(0x7f0000000000)) 12:38:48 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x5411, &(0x7f0000000000)) 12:38:48 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:38:48 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) prctl$PR_SVE_SET_VL(0x32, 0x315f3) 12:38:48 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5451, &(0x7f0000000000)) 12:38:48 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5451, &(0x7f0000000000)) 12:38:48 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5452, &(0x7f0000000000)) 12:38:48 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:38:48 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x541c, &(0x7f0000000000)) 12:38:48 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) 12:38:48 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5452, &(0x7f0000000000)) [ 1092.090943][T11096] ion_mmap: failure mapping buffer to userspace 12:38:49 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xdd030000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:49 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5460, &(0x7f0000000000)) 12:38:49 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 12:38:49 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x5421, &(0x7f0000000000)) 12:38:49 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5460, &(0x7f0000000000)) 12:38:49 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x14000) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) pwrite64(r0, &(0x7f0000000080)="06056d967dcbd9e94d90965138658892c84b43b1f857f44c5712a29e4c79e3f63490ad5d9a9b35f93de203db19f2fe20148990751a75308027c27f08628553e6f68267e2e1a9e735bf59d72f68992c8227f793bc4df76ddf58d2c082a7ea11c600c6cdb6f744dcebed047e04f6ff197742960c7d185a2ba878b5dbefd44424560934ee8b8a0975a355a490cb5f41d0215fa6f628f853bbd75a1ea264fb1fc4e2c41f9c020d247760a72991532dfcd0f453644382397401e71f55ca497ae32e7a17652c42adda45225616d6c59c44", 0xffffffffffffff19, 0x8001) 12:38:49 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x6364, &(0x7f0000000000)) 12:38:49 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x6364, &(0x7f0000000000)) 12:38:49 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x5450, &(0x7f0000000000)) 12:38:49 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 12:38:49 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x8904, &(0x7f0000000000)) 12:38:49 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x8904, &(0x7f0000000000)) 12:38:50 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfefdffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:50 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x40) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x58, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x2, @remote, 0x401}, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x1d}, 0x9c}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000140)=0x10) ioctl(r1, 0x40084149, &(0x7f0000000000)) 12:38:50 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) 12:38:50 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x5451, &(0x7f0000000000)) 12:38:50 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) 12:38:50 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 12:38:50 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x8933, &(0x7f0000000000)) [ 1093.601216][T11756] ion_mmap: failure mapping buffer to userspace 12:38:50 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x8933, &(0x7f0000000000)) 12:38:50 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x5452, &(0x7f0000000000)) 12:38:50 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xae01, &(0x7f0000000000)) 12:38:50 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x2, 0x200000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000300)={0x8, 0x0, [{0xb, 0x0, 0xdb, 0x10000, 0x6}, {0xc0000019, 0x7, 0xa68b, 0x80000001, 0xffff0000}, {0x2, 0x6, 0x2, 0x9, 0x1}, {0x7a1d1eb89a6c0a35, 0x80000000, 0x0, 0x1, 0xffffffff}, {0x80000000, 0x10000, 0x3, 0x6, 0x8}, {0xd, 0x7d, 0x90, 0x8, 0xffffffff}, {0xd, 0x0, 0xffff, 0x3, 0x5}, {0x6, 0xff, 0x9, 0xfed}]}) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, 0xffffffffffffffff, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400, 0x0) connect$llc(r5, &(0x7f0000000080)={0x1a, 0x0, 0x5, 0x4, 0x4, 0x4, @dev={[], 0xe}}, 0x10) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r4}, 0xc) syz_open_procfs(r4, &(0x7f0000000000)='attr/current\x00') ioctl(r0, 0x40084149, &(0x7f0000000000)) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x1) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 12:38:50 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280), 0x2) 12:38:51 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:51 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x9208, &(0x7f0000000000)) 12:38:51 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x5460, &(0x7f0000000000)) 12:38:51 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xae41, &(0x7f0000000000)) 12:38:51 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x101400) r1 = io_uring_setup(0x4a1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000340)=0x5, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000000)={{0x0, 0x0, @identifier="e61c02bb5ee04f4877a8c094f518a53d"}}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/136, 0x0, 0x2000, 0x6f}, 0x18) ioctl(r0, 0x40084149, &(0x7f0000000280)="46663d12df9f058c0151f6f994c88852e630011d7df1324f83797cbf67117862599a1431330acb08270167d97421ddaf7cbaf928ffbc17173cbc460215a5725355f1a9615ee287933590c76dcaed0f2bdf7c167c20961fd0998318a8dbc5cfe3f94c8be901a3788356a96767060722ae1bb43a800035a98fa94b51aa8eb3b17802e0449609ada30cb0ba7d904afd79bc45be39f7f25e7d5e895c") accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) 12:38:51 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280), 0x2) 12:38:51 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xae01, &(0x7f0000000000)) 12:38:51 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x6364, &(0x7f0000000000)) 12:38:51 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xae80, &(0x7f0000000000)) 12:38:51 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280), 0x2) 12:38:51 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x208000000) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) r10 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r10, 0x6, 0x0, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000200)={r10, 0x0, 0xcc4, 0xffffffffffffffe0, 0x8}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r9, 0x0) mq_notify(r9, &(0x7f00000001c0)={0x0, 0xf, 0x2, @thr={&(0x7f0000000380)="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", &(0x7f0000000100)="6a18a519522695f5e6e764fd8e7167d4f8530046aa9144d9014a02aff5d37368d0c4ab270ca68d8fed78eef3561efffb34946ec9a70e929a9521a523baf19f7059f4f8"}}) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r13 = dup(r12) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r13, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r14}, 0x14) 12:38:51 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xae41, &(0x7f0000000000)) [ 1094.939217][T12738] ion_mmap: failure mapping buffer to userspace [ 1094.969366][T12738] ion_mmap: failure mapping buffer to userspace [ 1095.028436][T12738] ion_mmap: failure mapping buffer to userspace [ 1095.035797][T12738] ion_mmap: failure mapping buffer to userspace 12:38:52 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:52 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x8904, &(0x7f0000000000)) 12:38:52 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044102, &(0x7f0000000000)) 12:38:52 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xae80, &(0x7f0000000000)) 12:38:52 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000000)=""/160, &(0x7f00000000c0)=0xa0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r3, &(0x7f0000000100)="cda55ce9e92638fa5fd442b6a865316deb2e6d2e7ccda3bbe7725a086ead0f13ab0c058c76a133c2645a4d9f15062c5ef81c673c8094dfac347148d9330525fc22bc40fb54acc28b34b56de6d99b8190baa80a09d79d4d7a362b3f54869ad466488330782e63aba9e2df2beb9f8600fda036d667c1e13569b156cafb957611ca1628da08d57f0a351b0bc647a70a30d5cbbb00df877dca40853a5a33c1c4f2512a3021149a02f530c48073a03d518c29256d30dbc9b8700aeefbf6462734bce9c7fcdd44a419a19a01921a13ca7b", &(0x7f0000000200)=""/49}, 0x20) 12:38:52 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 12:38:52 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044102, &(0x7f0000000000)) 12:38:52 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) [ 1095.479842][T12980] ion_mmap: failure mapping buffer to userspace 12:38:52 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) 12:38:52 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044110, &(0x7f0000000000)) 12:38:52 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:38:52 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 1095.875135][T13415] ion_mmap: failure mapping buffer to userspace 12:38:52 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:52 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 12:38:52 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x891a, &(0x7f0000000000)) 12:38:52 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044105, &(0x7f0000000000)) 12:38:52 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044111, &(0x7f0000000000)) 12:38:52 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) accept4$inet(r3, 0x0, &(0x7f0000000300), 0x400) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @netrom}, [@netrom, @null, @netrom, @remote, @default, @bcast, @bcast, @bcast]}, &(0x7f00000003c0)=0x48) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000200)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) r7 = creat(&(0x7f0000000400)='./file0\x00', 0x20) ioctl$VIDIOC_G_AUDOUT(r7, 0x80345631, &(0x7f0000000000)) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x63b116498e30fb15, 0x0) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0x7, 0xc, 0x3f, 0x4}, {0x3f, 0xec, 0x0, 0x9}, {0xfffd, 0xff, 0x1, 0x9}, {0x101, 0x20, 0x1, 0x1}]}, 0x10) r9 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) ioctl$SIOCAX25GETINFO(r12, 0x89ed, &(0x7f0000000280)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r12, 0x0) ioctl$UI_SET_SNDBIT(r12, 0x4004556a, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r9, 0xc080661a, &(0x7f00000000c0)={{0x4, 0x0, @descriptor="7961f3842a7b02c8"}}) r13 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r13, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r15 = dup(r14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r15, 0x0) ioctl$UI_SET_SWBIT(r15, 0x4004556d, 0xa) r16 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r16, 0x6, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x40084149, &(0x7f0000000000)) 12:38:53 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044145, &(0x7f0000000000)) [ 1096.103284][T13529] ion_mmap: failure mapping buffer to userspace [ 1096.136018][T13529] ion_mmap: failure mapping buffer to userspace 12:38:53 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044106, &(0x7f0000000000)) [ 1096.214936][T13529] ion_mmap: failure mapping buffer to userspace 12:38:53 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x8933, &(0x7f0000000000)) 12:38:53 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) [ 1096.262067][T13529] ion_mmap: failure mapping buffer to userspace 12:38:53 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044160, &(0x7f0000000000)) 12:38:53 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:53 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044107, &(0x7f0000000000)) 12:38:53 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) accept4(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80, 0x800) setxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64EXEC\x00', &(0x7f00000001c0)='/dev/ion\x00', 0x9, 0x2) fcntl$addseals(r6, 0x409, 0x4) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000000)) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x711000, 0x0) r8 = socket(0x40000000015, 0x805, 0x0) recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000280)={r5, 0x83, 0x4, "0b9eda5d8e23a41454f4bb7dfd4398d7a8c4690794a20184c22326cbce6880ec9f4faf8eef21dccff002d9ad19fa552c80151766338e079f3168c13ef8b3febd68795deda7035d050aa5378c07384ad0a1784e18f3b80a78d458a9fdf99f5ba43e7f4896877645f434551b33836a93dbf1194620e252ebd6ab749c75cf603067339887f47291949b2a"}) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x3f, 0x414e00) 12:38:53 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044108, &(0x7f0000000000)) [ 1096.545479][T13760] ion_mmap: failure mapping buffer to userspace 12:38:53 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40045431, &(0x7f0000000000)) 12:38:53 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x9208, &(0x7f0000000000)) 12:38:53 executing program 0 (fault-call:5 fault-nth:0): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1096.633389][T13867] ion_mmap: failure mapping buffer to userspace 12:38:53 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044110, &(0x7f0000000000)) 12:38:53 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pum3#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = syz_init_net_socket$llc(0x1a, 0x7, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr="707d79ad9a988083f72f4954a7931e11", 0x825, 0x2, 0x1, 0x1, 0x8, 0x7ff}, &(0x7f00000000c0)=0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') read$usbmon(0xffffffffffffffff, &(0x7f0000000340)=""/48, 0x30) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0xffffff91, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r3, 0x801, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, '0\x9f\x01\x99V\xf5\xb8\xd4\xc9u\x89\x1c\x8eS\x80\xcf\x83\x8f\xd2\xb0\xc2\xeb\b\x13\x00\x05TD\xe9\xfe\x81C\x1a\xc1V;O\xf7sr\xe1B\xb3\xf1\xe9\xe1\xeen\xc7<\x95\x10\xdaS\xd6\xdb&\xcdu\x17r\xbd\xf9\x16\xdcP\xb6\x8e\x10\xa4\xef\xa6\xbe2Y\xe0\x8a\xc2\xe7\xcd\x0f\xcc8\xba\xbd\x1e\xbeU\x01\x17\x9db\x8aE}1b,\x00\xed\x05\xa2\xe3\x97\xf9z\x82;K\x10[\x85Ro\x82\xf9$[\x9cm\xa8\x85\xd5\xaav\xa4\x18\v\xe6\xb7\"%\xe3\xfa\xa8e?;\xf5\x89\x15|'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa000100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x50, 0xfffffffa, 0x100, 0x7}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10004800}, 0x4000084) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r4}, 0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$peekuser(0x3, r5, 0x6) r6 = syz_open_procfs(r4, &(0x7f0000000000)='net/rt_acct\x00') setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x0, 0x2}, 0x10) 12:38:53 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x400454ca, &(0x7f0000000000)) 12:38:53 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40044102, &(0x7f0000000000)) 12:38:53 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40049409, &(0x7f0000000000)) 12:38:54 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:54 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:38:54 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044111, &(0x7f0000000000)) 12:38:54 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x2000}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000080)={0x2, 0x1, [{0x40, 0x0, 0x1}, {0x7, 0x0, 0x400}]}) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:38:54 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 12:38:54 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:38:54 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044112, &(0x7f0000000000)) [ 1097.255102][T14316] ion_mmap: failure mapping buffer to userspace 12:38:54 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000000)={0xffffffffffff9520, 0x9}) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x5, 0x1, 0x0, 0x5}, 0x6) 12:38:54 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x80c, r1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000080)={{0x0, 0x0, @identifier="1688b581e3521685c22bed3d96d09351"}}) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f00000000c0)={0x2, "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"}, 0x401, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000500)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}) msgrcv(r3, &(0x7f0000000100)={0x0, ""/134}, 0x8e, 0x5, 0x800) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:38:54 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044145, &(0x7f0000000000)) 12:38:54 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:38:54 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:38:54 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:54 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0xeea3a2974e179538) timerfd_create(0x8, 0x80000) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:38:54 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40086607, &(0x7f0000000000)) 12:38:54 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044160, &(0x7f0000000000)) 12:38:54 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000000}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000080)={r7, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x23}, 0x7}}}, &(0x7f0000000140)=0x1a) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r8, 0x1}, 0x8) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r11, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000240)=0x1, 0xffffffffffffff7c) 12:38:54 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40044145, &(0x7f0000000000)) 12:38:54 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40184150, &(0x7f0000000000)) 12:38:54 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) creat(&(0x7f0000000000)='./file0\x00', 0x20) 12:38:54 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x400454ca, &(0x7f0000000000)) [ 1098.091472][T15063] ion_mmap: failure mapping buffer to userspace 12:38:55 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40044160, &(0x7f0000000000)) [ 1098.157938][T15063] ion_mmap: failure mapping buffer to userspace 12:38:55 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40049409, &(0x7f0000000000)) 12:38:55 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40184152, &(0x7f0000000000)) 12:38:55 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:55 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r3}, 0xc) sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x1) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:38:55 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x400454ca, &(0x7f0000000000)) 12:38:55 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40100) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:38:55 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 12:38:55 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40186366, &(0x7f0000000000)) 12:38:55 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000000)={0x4, "fdb538c1a27806143f9fa2372e52fb0c1f19e2288397ce1bf759a6aa6c95a5d6", 0x2, 0x3, 0x5, 0x1000, 0x20000, 0x2}) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:38:55 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4020940d, &(0x7f0000000000)) 12:38:55 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:38:55 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40049409, &(0x7f0000000000)) 12:38:55 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r1, r2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000240)={'veth0_to_bond\x00', {0x2, 0x4e20, @multicast2}}) socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x5, &(0x7f0000001340)=[{&(0x7f0000000100)="968c42ac22ee523d4a1f09ab6455dcf586417c9f2eded6e5346fa12257bc1a98e5421aa634b010c9bd74d96e3e5c98c9758e55607c983d41ef400874de784253bb631907bd1f7057740067093a19e1d42a997c1076a4013c09b0f55136ecaee788b5444353e463a980911e834a96339d11f8edd4caf58858c5", 0x79, 0xfffffffffffffffc}, {&(0x7f0000000180)="18299e0f57d5b2219281bd25fd3de882f01ad527e88943ff7c96c9e1b09529dd6e2845f77c17", 0x26, 0x950}, {&(0x7f00000002c0)="798a7bb795b9e24be72b9eedde3f47266a7990bc29ba78540dc9fa06c3d045242241d176d49fbe903949b439d15e4a00246f441351060c2ab1e2cc7c8cca53f57f175119fb8162175f9e18de5532921eb6d550b1352e59b8b1a68faf7d66bff68b81d2fb2d65a30e0699aa44395aaa6110ce95d53c03000928e8e1e7848bc2656c07038526ea138780db8250cf0a28c59caf8d0bed4da620469b56d6c0d012a5eb9df565586c4c6d955938d0ee24f6b732fc498f4e925ceb33414ccb0188c0feef577fe833da5ccf322867c710325d8bd2638f0c6cf46d700194e3601d803f7ffb1239bf469d2f029b66015f3577eae9b818d2e347eba71b7519409edbe9d051f5a8391d9195e2a31a1fcafc3e20afe6f8e2c962c1bf0ef4b6054d6346d071e5ab0969c986ca03b0e9b51d4cf202e3e7a145b96547ae1372f96c1afec119d179a117cfc6653b2167ce08ae6e6089884fa9993fd484847f88149cbc9b0d98d3cfe795d5dfdb900739450ed403c9090e41a052d61df76c452bf90cc727ed16fa1f559aa6f2590cc42f1e143519d8898d4774e4c573a48a8408c353301707d27717ac699de09ad7182fccdcabf38839669fe897c0e3b796b76b7641be8dace3ab3734d12a276533c7cc8c569808e59a6d0218958b2ff9fc98d0a9a066c35fd9a7ebe032df274aaee3ae7975735ca2713ca39802cf582f9e122f69a4a01a400aa28366c98e77e583f55710c74f2d4cc271859638fb1d813b1674c19e69612fdb31a8d3ccadbeea1a841256463acc6c41f78a0f4918c09f38ec9531a7db1a8adb84d302776da1ee8aae8f09c34ecb93ebf63fa1e60e4bde0d3dedd2dae57cb5e72801da2451d58d67d066b3b38a9bdb54bf3d487752ff9953e51502401498d30f2d308272c8abbdb5fd7e74ae46998538161e8e9aadf8f866377511eb91c2e32b7e0c5ec6fec0f506a2e4a6dc32854a99f12eecfd1ad30ff38fcad65b8c295a4830f120bb93ed485ba4bd052186f7e75644bb06caa6672b663cefb56d3d1d93a8ffda091c1bb21a0d8318ac2bf035cd879f449b6d3ecd75f0ce2949cf4b342cb51727408e6728c57b0ba889a1748f3f37c1d480af58dc0a426f28985d9251b50dc161dc15212ff8dd0a489c296579938d66040b63d81ab2578a85a739a7584cacc0f29c49085f5ece3a87fc3206119174c53debd45ab48d96a623a8496129b4643cece7db03a0e1c0b0580c9cd6239c65cd20e4a38712949c5b876b0117d16c4c3a6a47b241d8c99c04ceca208c079ab7f7ce763cd70f5ad027f7eb8ead08b256b1b8355d60123319ce057ec059f14b6c7b28a69e9a8345748eb78163773f1e1d68d8c4c2dcf563172dd5d8aa5f55326889d144f7d88a5a8e879ecacd48740ee1759a55adbc0073ef955b04ea8715a720ef74becf90bf3d9f15476cdd42f808459e4bae394ed8a48e1f9a05f4c2d36d935500bf01711fbe7de781ea482f2173ea6ff6a5aad7be10d10efb7f316578eb2210daf768451b2b90aeb3e902ecc4533b794737eb8b23c8960504fb1b954aca894f59f56ca237fd70fea42b9d4d471b34f72b067a4c3f3882edb6ebf876aeec26e9d225e3f884dbf73472f676fd06ffce0da1ed9162712c19afb1cea6cd831263d64ab36073e010b5323575a63a16e21f8bf946e3dec69a085f30ba395a41f3a996529e44a83e207007a0e0633c0ed8736d554df77328ea16db426a0bff5394dd5bb15016c17649492c2f15ed43336560990c430ca2963f570dfb4d1066ceac2400043403a5b567aa64a74695ac6b41252d4e3abd9085c6df84bb239f628c92fa748b48c90c5ecc3458f5f6911e1c1b9e8575bb52eeba7a633aeda2703f1778b8a675c04c1203244dc1c369bc4ef921ebfd1af6121a5f28aea85bdeda38ba4cf28014b475b8001396c04fd3464fc2ffe1b090e75c9468b308188746a02d8c7edd0878db5e575681a7ab86137e4a2cbcad88c6e84612f062e640d09c5bf0919366d21804c6ab15c9b79f56eb75ff1a2fd3567293bbc0d1ae4b3d2f687cb8cc8aa75c77cea0986b5c402c087a1c630ea52f957e2da2e58affd1c9133cb787d973a69451f9d40a08c4469d474381dd6b9fce48a36391ee8b134e17f750a1f4ddeb5c2e0f491b1cfc66664ef88afa1819245ddd36619516d8cf35b0e267a087f8d7bd4ed4edd540d6fa5496051f9bdf80aafad3384d25be7075fa0a31a056e75085a570c96c94dd4849010104baebe44df9ed52fc237d4d85f2baa8c6aef1d1f519105fbbe986d257ff3ef6153821d241ffeb3e2e4d034e5d8f3231c644961abd5554e17091597c53e59b8a03cf75c1a076edd4ae23b21d672890a32ab879f6364fcc877f2f2d623e8011992ad3882043cd0dad09048fe974abcfbb9a7280bfc9a37e2c4bde36f3bd42acef68cdb5c3d30082d363f11ae0d0ed4af71700f1cb50358f02bb612627c0823444bf8a3abd86a7814781e35b45372173f86bed1105efcf7618fb04d671fe4146848d9d8bb8d7fc765574f327e2b705c5970932e43c0cc2bbb07c7b0ad33649d6d59046a4af5f6b45139bcc60fd2aecd59701111eee735e05ac234e0e9c08b9a22a1f1fe38a4cb01eb2b3d60f2a1ca056fd4e1521b99172f9f286ffc833b4305761ef5b5a5d131b475f99787a0c983783fa19b49aae643b747786f75a611b91e828285862b3365bdbca9cc38013f6b61f892d730f8c39581d6394fa35b542b5e9540de6077217214ce67e924a8d8aed296c78040b426d354d22627fbc90fc0a6b1e8fe1c143bfaa540f14a8739ea7c65b343508fa4241b109faaec14970627898d10b954a1d87fdbe56eb0174168aa6c205e01b7acb51ed7a994c488f710fefc0cae3e0ec2b35c325e8acb7c4a8204a7e75ec095557437f59ed23158b923ef731cd122595f3e23c5839dd1e6094d30812ea1247cd7d220500970c6fd669c1718a1cdb83ee8a8d42a6a810b53d9aaf57d0997ac113c075a8df2efbcff20b9083ef4f88492e3adeee4f30531b15a102eae039c990e25334d06a1b4c6fb95006edcd8919b4931b585f0eacc4acb6cad7159b1ac87e3fb338dccba53731a0c95cf8b7244418585c8527aa19861248baa8fc5db002ffb8fd8c288007d00564a28cc8e33ea499d74c4258737c7065ce19202f3c326325fb7e99148cc4a06d24c68343505e04aaca9ab92f85b71d61dfb099f31bc289848c806d54853e861863b3979b40ecd8693cbe985e9a849edc31031ddfab5a3c63a0b6cfb4f071c7e3ab81eacd39e642a2cc2958c552bcdf3df65b8089ef49ce03f0e529723e139b04462116074dd2744c055425a34d827a68b50e8a3569f609ec88de59035ba2ace6273cdbf5db5e360579eabdebfd542123b1a910561bf8816d853afd999ecbab5eef4cebd9bf71806d3f42bf7ae405e7ad6ce43ddb85cf9a38a206795d0c32fbd349bf837940bb39ab088c64578e7f7b475bbc69b3f5063a65d2e9cf7f1930184f45fdebff5e4d0b5d5ccb18d3881a804b11fdd910c2fdf23f473c88b6cffa74cac7e9ab0857648ac5d932da74de298720811a7ca3cd7dd1133703f2d6921ab152172166834729a990f6a4a1b93b03d0d0a5eea0c007b8f1e3aba9f4e681fd035a6d2e0e89fd3a3bfea65f6023c304193b81534745026eef3de40edb61c0007e28ae58d3185afadf182178e3e7c82a15101bd0c8d90c2deeef1856419f3d99ca09dac5fd4a004cd7f618bea17fec0759708f4786596bc8678c5dbc6a17d9216aacb5f0a142232d1e1761687656d37cea0cf3c255fec4d2b94deb6147bf11f175be162e55c7f7605289c230481f061ce7386df9165412ba7d4c6c7e3544858a4f6e52ec4059027d5069a0b1d81faf6d4c2ef148e7cb3928ddeeb0919c83efd5893a9b18eaa799dcb1855aa09c976394a72b959eff47221fe3c979110ea619165a28e9dd1234c811962a70bd2b9cef192cfa0dbf1dc3334928618d83cd22c10c09357232b784feac52c830ee026763f163d1748d5d4abb6160377c3f73ede863713d01059697a30619b9d79d3d6019dd625dd9484befdbe47f6c998ecd69254e4279c3b26c08c6e4972aadb1b5dc24db75fb0df7a4a8a43db077ace77292f0b4eb05f27915bf40ae6a34b5b582bcd3b85e60083679908bf2300ffd8adab5696e80312d0ac9a2d0381ebea2100595418b5a2bcca064bebe014ddb671c34a3c1b3030f7449eef2b349bff6372a693398a7ad001763425b5284ead5a49d4b77ea5bcc3b7adc21a73db9951c316f0b8089d782f61ed9f46f763414548cd4fda8c95e68f0ea19173f035ccbec56dd699d26955db6e45391083b037769143f3d44cd076972f7f8bf7c103fa6842da657553d42571a334b427a81f1eb9a04b8a5d162d7bb2abb2096b4af45263a6956b452166f84f2587ea96415751951bdc973d07bca30797f3fcb9219847476103b47086df61fe867637373c1b7c842d3a19736da2736e2291c80a2e3e03b57d60d0b359609ef6d5839be172e2feb4f42901742bd52e00db9dc4fd48b6b0b5287e172a3df7f7e9c02f5e4d6d0bf283715e4b0432e0c9534f0caeb650b95f86699099b21ab1b249257faa25aba1bd51db3a1414254035363f1b9a66688709c4b3e1af31ef3d567bffecfdbe579f607817e792e1c72fe96992474a1ebd0c8bdd685d4f404c4b197d5e9016d29f980a8376a8b21ef277503b0a225ad94858b6c171aec5eedb219355abadec4f8a4ee2e5715ca29462ac67cf2331df2dc563276463aa04f08660a0250c8ba68b8d4930fa04b77fcce6871976ed06bb27275ac9f8a0fe86663eaa8c43e399d03fedc41e601f9dd5e0814762c911a1fe77220147ff931d509fb273df9ab6f87673b034417b79749fbf3990847f172efd1611d48e9c3ed80f130201fb0ba5504cc2ab80bd7a4e0554a98f222f8414e6efeaaba67e9d5e8cbc1d41fa308a32b957390a2bb0ca54e0b9b8bd69620160b6cbae208244f8bd3365e15fbb3635c9a6b4a3158b98099d618d05d8c740695c9c871ac1e98b5aa92840e70a8cc2a633989335fed1da424f2ba78b6b8c8c00b1ed8f32172b977e061d3beba96d5761b14e480ff18706110b4666349487e55b037dc8502b23a0a5fc6204bb21eadbd9bcc278d69116a87021b38481967cefbed69e0f96b159f7f657db5152263c6277cc26273ed75ec16b4c94c2d346a531abc36f819143e82c614a850339b4b6b905fdd5d9969630bae83b1d6a76cd2e367b4cb053c16802a7e800e4b9b11631efb9f6f1c53e7d6379aa78d60506dfb50992ff92097e5af2d81e7e0275db78f110a60a5c2e2bf6183aabc7680029bfc558632bfac375770dd12e3b259413295c5037950ca84e812f474921cea781b67dcc01d38e93fd59c630b087a49bbb0dc0b10088bae9e426b46cfcb8e42c73c7c3d001b2d25ee3ef4e6843d2e8edb23d2dc5a1806c133ad3c48d62b81a31612beea3967d5ba4a0970b4bc9f2ba884571eb03d547f12c2fff9babb88d8f53dbdb1b546e10f6d135d32ce410dd70f3d0dcbfea4e5efd709f3ebbdd7e9f09fa43d986776c9a16ff6f978e20331a0283adf4ea0aed59afbf1bd026cd9dcded1975e62c75ec47dd039ef9cda52e92301df0d76d434306e33be10a990cacaf80b1a0483fb8ccc0a218ec99476c1a990f3c43b15c08fd2ccfc1f7327962e7bc53e30722dbba2257f8d3402d3e17cdb92807b2ad9f501f6b926e73a9b8895aa2cad4ddb3bdcb67668222ba231fcb761130e1b993b1896", 0x1000}, {&(0x7f00000001c0)="08ec5dc5e1aed2d54d5f77895859a9541cb8964f17e6e084e12cb0a0b590f9018bd249c91ab1baf2f36684c0a43cd28cd3a961e0b812c52246d3d21feba3c3f04e93b7fc0611cc2546071cf1bee098ae644d0de666e589db18806b42cd007bd6f334c74fc5f5d58c09c2bee2f87cad629e39bdaf", 0x74, 0x1800}, {&(0x7f00000012c0)="0f6ad9f3b8970472825da350e5b120fda3f70ccba0fd2984b60b1f632aeb0b394a5a23dd6d216c1a46dc72c29d10689fd3b028f548800e2e7dcaab784e2f7e0f04b5aa2a8bf6bd272e8e307cc6cae6105ef6eeaad7ccf9da7bdebe1b808219f6970e82652eb23aec4e0d40aaccfcf5", 0x6f, 0xd3}], 0x50008, &(0x7f00000013c0)={[{@errors_continue='errors=continue'}, {@disable_sparse_no='disable_sparse=no'}, {@errors_remount='errors=remount-ro'}, {@errors_recover='errors=recover'}], [{@pcr={'pcr', 0x3d, 0x2c}}, {@obj_role={'obj_role'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x57, 0x37, 0x7e, 0x0, 0x65, 0x0, 0x36], 0x2d, [0x33, 0x52, 0x0, 0x34], 0x2d, [0x61, 0x31, 0x31, 0x37], 0x2d, [0x34, 0x34, 0x63, 0x35], 0x2d, [0x52, 0x53, 0x30, 0x35, 0x37, 0x68, 0x65, 0x30]}}}]}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1098.935427][T15833] ion_mmap: failure mapping buffer to userspace 12:38:55 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4020ae46, &(0x7f0000000000)) 12:38:56 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:56 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40086607, &(0x7f0000000000)) 12:38:56 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 12:38:56 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$getenv(0x4201, r1, 0x543, &(0x7f0000000040)) 12:38:56 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4090ae82, &(0x7f0000000000)) 12:38:56 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x18) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) r3 = dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r6, @ANYBLOB="080028bd7000fedbdf250a00000008000400030000004400000008000b007369700008000b0073697000080001000c00000008000500040000000804080007000000080004004e21000008000b0073697000080009007f0000000c0001000800860073656400080006000900000014000300080004000700000008000800030000000800040073ffffff08000500030000005000020008000400ffffffff08000500ffffff7f08000d0000000000080009000008000014000100fe880000000000000000000000000001080005000900000008000900950800000800060000040000"], 0xe8}, 0x1, 0x0, 0x0, 0x2}, 0x40845) r7 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000080)=0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:38:56 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4008ae89, &(0x7f0000000000)) 12:38:56 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80044100, &(0x7f0000000000)) 12:38:56 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40184150, &(0x7f0000000000)) 12:38:56 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4008ae90, &(0x7f0000000000)) 12:38:56 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r1, r2, r0], 0x3) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) getsockopt$inet_dccp_buf(r5, 0x21, 0xe, &(0x7f0000000000)=""/112, &(0x7f0000000080)=0x70) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000000c0)=""/185, &(0x7f00000001c0)=0xb9) 12:38:56 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) [ 1100.091151][T16614] ion_mmap: failure mapping buffer to userspace 12:38:57 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:57 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80045430, &(0x7f0000000000)) 12:38:57 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40184150, &(0x7f0000000000)) 12:38:57 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40184152, &(0x7f0000000000)) 12:38:57 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:38:57 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x400040, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x102e82, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="65a900580000f30fc77506c74424003c010000c744240200800000ff2c246436f3f2460f01bb00900000c4431979ed00410f0964450f01cac481945fd066bad00466b8f5ff66ef450f01c4", 0x4b}], 0x1, 0x0, &(0x7f0000000180), 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:38:57 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40184152, &(0x7f0000000000)) 12:38:57 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x800454d2, &(0x7f0000000000)) 12:38:57 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000280), 0x0) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) io_uring_setup(0xeba, &(0x7f00000001c0)={0x0, 0x0, 0xc, 0x1, 0x66}) connect$caif(r3, &(0x7f0000000180), 0x18) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) ioctl(r0, 0x1, &(0x7f00000000c0)="d4326acad239cde4b8c0a8f42f3b79696dbc942431f0725b801bf9c6f43471f73c62c22c579f0d2cad23a8baa9890088aca2c7f0d8cf4bf7bf707e4b05a45d2f5b713f2ea2b4743083ebb590c39e09678a0c9398933b887ae87b7ccd6fa27941d26903aa281c485fdb5882aeb90525bee03c3e000000000000000000000000006b0da994000000") openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x704101, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r9, 0x0) sendmmsg(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x4, 0x3, 0x1, 0x0, {0xa, 0x4e21, 0x8fa9, @local, 0x6}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000300)}, {&(0x7f0000000340)="1551fa5c074f948e51f7d079f228c42bdb3940601811eb73b14d4583b224bd280ffa", 0x22}, {&(0x7f0000000380)="caaae0d46b1b284972417dc2c41b5163de7447d74bd08ba8a71a5429688e2a3fbbdf8988b946a81ab2560633075b4511d71f99af41f245b404d218ccb56fb197647c3713078d3e1dd4cc5d36dec1671b4d75aca07da823f8a71bbfccfe0ead3d5403d283d8e3beb44577983bdb34be5e50c12badc0840ee452272bf7c5ff1457e31f4d18f23659d99b84ecd1f25d23b5cc75e9b4aea04beadd85fca0dbba9f2c72aac939b32d90377bdbc99973405759c5c08cc2a1aee286cb189d7c161b7714d1195d8e6700a688827c1698fd", 0xcd}, {&(0x7f0000000480)="b5fb943fa49e05bbcf135fdb12916e11105ea964ea8099b3739bf8f42803c91b25ab203d922fdf18b50f7476510e58115a53951b3f4b4597baee31d41741ae1a8dfbb780585ad19004af411b5f82bfe6cb0897f7df5f7e0f8b199e3aed7bca0cb3f0d9872e52865a8071e360acd0e66f9a1deb313c92cd7cd0090228578c1399ca244b00bd62576baf666acfea7d88d0a914021d5cee27a3d0b737336ffda617b509b4c91ea591be5dc1556c0d7364b40de1bbb725389bb55d8351c71b97517e", 0xc0}, {&(0x7f0000000540)="e99623fe6cc7d10e8d67cc16f89a62ac4ebb463dc8f5d1fa03ae7aa475e6ef353a94a3fb4c13bbfd4e0df3e2a5a6fcf7152946fd8b7bda4a5e920ff800ce46ebdc552df476dadf70500f559357691452db127e72508a8a6115dbe19d95dd87cc5027446f8c511356b9afb676cce0bbeb784c9988603b2cd81cb5385a67fa8179dfe50791318502a372429d4d4210fa601c441a6fd1b924210e39ee2c4665dd2f7f5faca2852cad2ff0354a8219a14242d158a845ae1eac4c1da00ce9f75a0dce3977c045f23af918fc6fd659de43abf9b61ce5acc9ad2c292feb3be06645f0ec4eeee897cebe25e19fc1993d62f63e926e10c7c0441564f4", 0xf8}, {&(0x7f0000000640)="843cd3a791fcaa6bec9f88754f0636cc2eb6fa39f1ff76d441d2382507ed4ecee8636e46022af6de3fe5e4b59df8115bb8f979b9720d1d535740c3acf6d883cb513266d2a9b899372a4fb3a7d10f5ea666db20", 0x53}], 0x6}}, {{&(0x7f0000000740)=@rc={0x1f, {0x4, 0x1, 0x8, 0x40, 0x6, 0xf8}, 0x86}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)="f906103b8d6d7e8d272f1f5478d8a8ee372d4d2b815710e1e08c9014ad9c9aa0282b5e033ea43904bb4ad53fe4190034a0a7ff3ca50f411afff860162124a257f3fe66a8c4c27fd50137c0fbbe92229d2bf81e434aef290e85bc5800e06ccd2f3d1df1e7dafb2c5211ee76b079ee4789b1aa22ab6edce7cbad6df722e85c60ce1b8ba6f153d0c6c0c0962141b5f8c4a12daec21f59bfd8ce8f77e7bda88a9da7934966f9da453aae62ce40f039a2f4f16ad79f927870645f191d82109d1be90cf6b8726d022d8391b3", 0xc9}], 0x1, &(0x7f0000000900)=[{0x100, 0x10a, 0xfffffeff, "34ed87d3046eeca6b02468b91806f401111ace600954182ec42ba5c179a08447ba265e21d08ad9b775f1f4ff75e1542379048fa6656ababcdcacb6378482a8d324ba9b2ec3373afd302e1b716c34650ed4036af31decaaf6bb82c81891804c832e9b60ca452fdc153e3dddc4715f695e6f85b22a77de510e6acb4763b03acc6e8998fc2797afd8d6866018c5c4cf0e1516eddd0284df0fcd8b6001e13a18706c81bf30d59bfd8177def188899d5b477850f224d0184c95189da5473395a11f68054440ed011664ad16a51c2c28f9508fd46922b6c0860d7dec28aaa5d4fc56940e98ed1d62d2e02d4b3de48264bf5247"}, {0x30, 0x117, 0x8, "69ac949c935874f22618f675df57d0245406a51e3439ddd376fd22"}, {0x58, 0x10b, 0xfff, "e452f368f7a3e7172899ecc4a4966387a00a13bfc99c346f6e6bad7182fea87ab9c83b9c3ded850e0f1389e13c1bdffd746d43ffd295e0640b4e37d04a48131563fe30"}], 0x188}}, {{&(0x7f0000000ac0)=@ll={0x11, 0x9, 0x0, 0x1, 0x3f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b40)="d95aedcdd740d7581ea658b4e13d61fb8edd11d5cf85e70523b1e170d5a5af9b", 0x20}, {&(0x7f0000000b80)="7a9d25073b2c8e9ea51b3fd3bb42c0a349d6cf9e29761b9697cbb85a3fd8671349726f40947f466a09b26ba256290103d3109f425dcc59f00c55367e0ce7d44a8f83f0c42a6ed402a5d1260e440abf11dc65eb838b4ff7acc06a306cbf3fd3d49d964dd5364c256e3972555c2979b5a71fdd97a38e19ef7d14df74aeac219a7c009aca9dee1fce4164dc5a7a4b0a341df5e859627a86a9a00a5123", 0x9b}, {&(0x7f0000000c40)="973d25fcccbf55a6dc7198300236adb92fbbe153a089d5066e233513b02c4fcd854872b2ec794504cdc5663ec44b592de4c40885bdae5f08a8dcc8bb66dab6d04aa04273ce39744a174df265d91556246901523791fdb305d5dedc37891186b6290bd40d0a8317333f224ea43ab4839f101eb966481cc3bdf4a7302567c20156a38be978b3e5dc6653df08f73416c9c58b918a27c47eaa5fc6a91a447eda2cef26289a82e875c8bde41fb5dc644c95fac5d7ce6f93be508b70b63cbd42928f043a94acd9e663617cd7814a1bb1a8bcb263a3ece92b6673db945904da91be626ebaa3a93541", 0xe5}, {&(0x7f0000000d40)="351ca60d2f03821544503d87a8488a17c973156133ee88e3f8517fc7c887aeb86b2c05c9a36b6ea026ccbce0a772f4700f8805", 0x33}], 0x4, &(0x7f0000000dc0)=[{0x88, 0x101, 0x80000000, "c95447ea0a2343826a7d57a54eac2370707eba8e8f3e80d82dff28a5c687a294a06c52ca6157da5e5f0b1002a9e3b5c4be7464829010eda49e9025170bc2185ebf1952690efb246c0ba7a2eae8238177f399ec4ecae79d40c33901251ede0d0f88c22211ae80c88b806c780b082ae3d864fad455"}, {0x68, 0x29, 0x1, "b77a8a58a67a680900fbf7206aed98799f54f45a8c00f2c0963f75f376ceebdf2a15d17c91fdd450a8846b7c770fd97c126e4c0276f18123c5ac165c2abfe5b9459e0c707de8e863728db348779f111424"}], 0xf0}}], 0x3, 0x4) [ 1100.804811][T17143] ion_mmap: failure mapping buffer to userspace 12:38:57 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40186366, &(0x7f0000000000)) 12:38:57 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40186366, &(0x7f0000000000)) 12:38:57 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80084121, &(0x7f0000000000)) [ 1100.848359][T17143] ion_mmap: failure mapping buffer to userspace [ 1100.864009][T17143] ion_mmap: failure mapping buffer to userspace 12:38:58 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xdd03000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:58 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) finit_module(r4, &(0x7f00000001c0)='\x00', 0x0) r5 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) recvfrom$llc(r5, &(0x7f0000000080)=""/162, 0xa2, 0x800000c4, &(0x7f0000000140)={0x1a, 0x30e, 0x6, 0x6, 0x40, 0x7, @local}, 0x10) 12:38:58 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80086301, &(0x7f0000000000)) 12:38:58 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 12:38:58 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4020940d, &(0x7f0000000000)) 12:38:58 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x4020940d, &(0x7f0000000000)) 12:38:58 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x4dc0000) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000040)={0x2, 0x722d}) 12:38:58 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184132, &(0x7f0000000000)) 12:38:58 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4020ae46, &(0x7f0000000000)) [ 1101.448040][T17385] ion_mmap: failure mapping buffer to userspace 12:38:58 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x80044100, &(0x7f0000000000)) 12:38:58 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184151, &(0x7f0000000000)) 12:38:58 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4090ae82, &(0x7f0000000000)) 12:38:58 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfefdffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:58 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xd, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0xa, 0x1, 0x14a}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:38:58 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000280)={{0x4, 0x3, 0x8, 0x5, '\x00', 0xfffffffc}, 0x0, [0x1ff, 0x9386, 0x1ff, 0x80, 0x101, 0xffffffff, 0x6060fd18, 0xa51, 0x4, 0x9, 0x0, 0x61bf845, 0x2, 0x7f, 0xfffffffffffff801, 0x33d, 0x101, 0x100000000, 0xff, 0x80000001, 0x37f, 0x0, 0x9, 0x200, 0x10000, 0xcea0, 0x7f, 0x401, 0x8001, 0x8, 0xfb62, 0x3, 0x7fffffff, 0xd0a9, 0x3, 0x100000000, 0x1000, 0x10000, 0x7fff, 0x3ff, 0x200, 0x8, 0x55, 0x656, 0x4, 0x44fa, 0x81, 0x2, 0x200, 0x1f, 0x1, 0x8bc8, 0x1, 0x401, 0x0, 0x8, 0x9, 0x3, 0x5827, 0x9, 0x7fffffff, 0x5, 0x1ff, 0xb8, 0x4, 0x7f, 0x0, 0x5, 0x2, 0x8, 0x844f, 0x100, 0x4, 0xcb, 0x0, 0x9b2c, 0x3, 0x2, 0x2, 0x1, 0x6, 0x7, 0x1, 0x6, 0x1, 0x10001, 0x2, 0xc5, 0x50e, 0x745, 0x7, 0x1, 0x2, 0x78, 0x2, 0x9, 0x400, 0x1, 0x4, 0x1, 0x100000001, 0x7f, 0x6, 0x1, 0xa6c, 0x3, 0x100000000, 0x1, 0x5, 0x5, 0x9, 0xb04, 0x2, 0x8, 0x9, 0x1, 0xc742, 0x7, 0xfffffffffffff16b, 0x2, 0x5, 0x80000001, 0x0, 0x7fff, 0xcee, 0x6, 0x6, 0x6]}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8001, @mcast2, 0xfffffff8}, @in6={0xa, 0x4e22, 0x8b, @local, 0x6}, @in6={0xa, 0x4e20, 0x800, @loopback, 0x6}], 0x54) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x40084149, &(0x7f0000000000)) 12:38:58 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184153, &(0x7f0000000000)) 12:38:58 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x800443d2, &(0x7f0000000000)) 12:38:58 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4138ae84, &(0x7f0000000000)) 12:38:58 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80984120, &(0x7f0000000000)) [ 1102.020474][T17837] ion_mmap: failure mapping buffer to userspace 12:38:58 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80044100, &(0x7f0000000000)) 12:38:59 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x80045105, &(0x7f0000000000)) 12:38:59 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) getpeername$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000000)={0x1, 0x7}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x40084149, &(0x7f0000000000)) 12:38:59 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) syz_open_dev$sg(0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') 12:38:59 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x800443d2, &(0x7f0000000000)) [ 1102.281106][T18156] ion_mmap: failure mapping buffer to userspace [ 1102.547901][T18241] ion_mmap: failure mapping buffer to userspace [ 1102.559250][T18241] ion_mmap: failure mapping buffer to userspace 12:38:59 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x800454d2, &(0x7f0000000000)) 12:38:59 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x81204101, &(0x7f0000000000)) 12:38:59 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x800454d2, &(0x7f0000000000)) 12:38:59 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl(r0, 0x40084149, &(0x7f0000000100)="77ed21a67854b163e056f23f29ec93d22e54d52dd5400b756d51f547c4a584698e4e4483d70b141e42f5ed229f4eada3ab5941c31854fc5df21a197db35f35207a583386fd27427cf9806aa7129beb750d2ee8c6") sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44808}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x1b, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 12:38:59 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:38:59 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080)={r4}, 0x8) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:38:59 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000000)) 12:38:59 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80084121, &(0x7f0000000000)) 12:38:59 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)="71a545c96ef44b841c3660431a2b40619555aee514ee110bc214a44021d7d77e50e2f3a2e73105f2e9f7e304411121ecc1ecc9f585c2ba430240a74b46bc67075692b5cc87967113ac1da8dc5384c157e30805750caee56b21f1c001530bacc5f08807245700a48e5d8248d243458c5129af50f23158e099340f71884eee7d3e53fb3afd3ee778487133166a6d500c871547add9269ff2b0e99c88094cf7dc4b009f148f0c3b27303b34bac809fb81560335da48a2ff64985de80cc0b3eefa5d49f1d2042423e40455a97df68e47368768d79ef5bd121b5580e971204aef5f8245861702cb5c0b61b87030fcc12e") 12:39:00 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000000)) 12:39:00 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x80084121, &(0x7f0000000000)) 12:39:00 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x4}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000080)={{0x3, 0x0, @identifier="009253de8ec184dc20ccfffe3e60e64f"}}) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:00 executing program 4: clone3(&(0x7f0000000280)={0x90000400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000003c0), 0x10, 0x0, &(0x7f00000000c0)=""/205, 0xcd, &(0x7f0000000340)=""/118}, 0x40) r0 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x80) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000300)={0x6, 0x9}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x40084149, &(0x7f0000000000)) 12:39:00 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80086301, &(0x7f0000000000)) 12:39:00 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000000000)) 12:39:00 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0189436, &(0x7f0000000000)) 12:39:00 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:00 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x80085617, &(0x7f0000000000)) 12:39:00 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f00000000c0)='./file0\x00', 0x80000000, 0x7, &(0x7f0000000580)=[{&(0x7f0000000100)="8c06e248a1fdc1148df63a9bcc144e06", 0x10, 0x7ff}, {&(0x7f0000000140)="e37989f103cf226842cb8ed11d31bc4a6a4aa047237a8bb7408e4edded49cdff9a5463487334764205414995c9c7e4de0b4f3297582b", 0x36, 0x1}, {&(0x7f0000000180)="ad07ae4733d548ed88402ba9d24414a52de26fb2cbfeaccb3d2473ba62ea60acf5b3ae0c743b4658cd00a27871763c7bd6f28e60a23d752719bd5de142742089ea8dafa63654d3e4fb7ee9365828ab68d9759b813f0058e8b28d5f7fcdeb5f848307c64f54e1f56e83eec9a6dfb57e3664012982733e57a1f4b16218432821a1cd260024c70bc7efe225d6ca60ed42e58da8afb4ec7fec05d60d51ec89794157a71bf0885fa5cad2e95146f60248b6c71b2162becb11ffc29f0965c012056f9ae72e95404a595ba9a345adc30e9e652fc07ae88bbe660d493a1a101dfa0b309e7633c21446e6a0c244873156a467806ad7f1d80e99f914926209", 0xfa, 0x10000}, {&(0x7f00000002c0)="73ce360d21f8295a8729d972f12fd8561424bffe1b490d9c547da07b7b39b0461e7d18f22e509692a0508cbd14c58930609cdbb2b626614805ec80aa0140b93c07bcafca699ad5291d354de7531f816919c2871190af96a593eb09e1ef6253a83a8392f6aa0d2ba9679492194ae5f9eddcf930f9cf668faa3266f3d73178ecba1e8c", 0x82, 0x2}, {&(0x7f0000000380)="54bda877fc998c7a27f557341cf31f526069cd02954f30a06989a00a23f399c8c7fe6b70660fe30188afc0ca653c2fd4b78624d7931a1fa11eb1601d14053759abc4d2f95f4f831fc48b154892a805", 0x4f, 0x9}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000500)="f86e6973664a56ab694dbab3382a6f3c40b45ce73a90f2b99e9fec82473f13328a8563326d599feb0277d1b17b3936839dbb09af22e444d54e49d1e429166a44eea1d4c57d74826375a924f17936ab5ffce84ed04a7313ee34dffa9761765f877ff3eb5f7c886e9851f9b9d3bc7ed878b1f028f5fff2a8a95f5a", 0x7a}], 0x40000, &(0x7f0000000780)={[{@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0xae00000000000}}, {@fault_injection={'fault_injection', 0x3d, 0x7}}, {@nouser_xattr='nouser_xattr'}, {@user_xattr='user_xattr'}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_measure='dont_measure'}, {@euid_gt={'euid>', r3}}]}) io_setup(0x0, 0x0) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r4, r5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:00 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x400000004008414b, &(0x7f0000000000)) 12:39:00 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184132, &(0x7f0000000000)) 12:39:00 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc020660b, &(0x7f0000000000)) 12:39:00 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184151, &(0x7f0000000000)) [ 1103.850434][T19345] ion_mmap: failure mapping buffer to userspace 12:39:00 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x80086301, &(0x7f0000000000)) 12:39:00 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0x0, {0x1, 0x6, 0x5, 0x9}, {0xc3f8, 0x3, 0x1ff, 0x16e}, {0xa89d, 0x8}}) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:00 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884113, &(0x7f0000000000)) 12:39:01 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000100)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='memory.low\x00', 0x2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007208000001800000000000000000000003000000000000400900000000000000ff0000000000000000000000000000000000000000000000000000000000000007000000000000000500000000000000ff0300000000000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000054c9f152f12469ed864700"/512]) 12:39:01 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184153, &(0x7f0000000000)) 12:39:01 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:01 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000000)) 12:39:01 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10f222, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x140000, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x1, 0x1, 0xa00000, 0x3, 0x3, 0x6, 0xffffffe0, 0x7ab0, 0x7], 0x9, 0xffffffff, 0x4, 0x8ef, 0x2, 0xf03e, {0x4, 0x0, 0x93e, 0x3, 0x401, 0xf8, 0x3, 0x7ff, 0x101, 0x1, 0x8, 0x0, 0xfffffffc, 0x7f, "daba65444297ef958158924d7223278a50c24c7e78ee52384127019bfbc8093e"}}) ioctl$void(r0, 0x5451) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xf6, 0x100) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/62, 0x3e}], 0x3, 0xfffffffffffffd3f) ioctl(r2, 0x40084149, &(0x7f0000000000)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000180)={0x7fffffff, 0xc000000000000000, 0x100, 0x8000}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000200)) 12:39:01 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x80184132, &(0x7f0000000000)) 12:39:01 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80984120, &(0x7f0000000000)) 12:39:01 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) r3 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x204200, 0x0) dup3(r5, r1, 0x100000) socket$can_raw(0x1d, 0x3, 0x1) write$uinput_user_dev(r3, &(0x7f00000002c0)={'syz0\x00', {0x1ff, 0x4, 0x5, 0x7}, 0x2c, [0x10000, 0x9, 0x3, 0x6, 0x8, 0x3, 0x6, 0xfffffffa, 0xffffff04, 0x5, 0x6040c948, 0x0, 0x400, 0x6, 0x9, 0x8, 0x9e, 0x5, 0x2dd, 0x0, 0x7, 0xffffff7f, 0x3, 0x5d91, 0x3, 0x0, 0x200, 0x6, 0xf40, 0x7, 0x4, 0x80000000, 0x200, 0x602a, 0x3c3a, 0x9, 0xa803, 0x1, 0x4, 0x6, 0x7, 0x2, 0x401, 0x7, 0x3, 0x3, 0x5, 0x1ff, 0x7f, 0x1, 0x80000001, 0x3, 0x6, 0x970f, 0x3, 0x3, 0x1, 0x400, 0x2, 0x5, 0x80, 0x523c, 0x5, 0xb32], [0x401, 0x81, 0xe73, 0x0, 0x1f, 0x7f52, 0xa7c, 0x1000, 0x76, 0x3ff, 0x81, 0x0, 0x80000000, 0x3ff, 0x9, 0x3, 0x4, 0x24, 0x9, 0xffff7941, 0x1f, 0x10000, 0xfba, 0x4bb, 0x798, 0x5, 0x7, 0xffff, 0x2, 0xdb, 0x8, 0x0, 0x0, 0x3, 0x9, 0xfffffff8, 0x2, 0x289, 0x0, 0x1, 0xa1b22ae0, 0x7, 0xffff, 0x8000, 0xffff, 0x7, 0x7, 0x524c2069, 0x398, 0x80, 0x5, 0x7, 0x70, 0x1abf, 0x26f1, 0x3, 0x3, 0x2, 0x9, 0x1000, 0x401, 0x6, 0xfffffff8, 0x7], [0x10000, 0xfffffffc, 0x7, 0x7, 0x5, 0x2fde, 0x2, 0x6, 0x7bff, 0x80000001, 0xfffffff8, 0x0, 0x2, 0x5, 0x1ff, 0xbb06, 0xbbf7, 0x20, 0xc8, 0x3f, 0x0, 0x9, 0xffffff51, 0x8001, 0x1, 0x1, 0x10000, 0x3f, 0x10001, 0x1, 0x8001, 0x800, 0x100, 0x8, 0xfb8, 0x1, 0x7ec4, 0x2, 0x9, 0x0, 0x92, 0x7f, 0x2a, 0x2, 0x1, 0x4, 0xff, 0x400, 0x2, 0x3, 0x7aa, 0x7, 0x80, 0xff, 0x9, 0xd9, 0xffff, 0x4, 0xc1, 0x3, 0x7, 0xfffffffe, 0x4, 0x2], [0x75, 0x7, 0xfffffffb, 0x7fffffff, 0xe7000000, 0x9, 0x7, 0x1f, 0x7, 0x1, 0x4, 0x8, 0x9, 0x3, 0x0, 0x80, 0x40, 0xfffffff7, 0x5, 0x1ff, 0x5, 0x3, 0x9, 0x0, 0x2, 0x1d35, 0x8, 0x2a, 0xff, 0xfffffff9, 0x7, 0xffff, 0x4, 0x1, 0xff, 0x0, 0x400, 0x8, 0x4000, 0x0, 0x3, 0x8000, 0x1, 0x9, 0x6, 0x1000, 0x809, 0x3f, 0x8, 0x5fd04765, 0x0, 0x5, 0x9, 0x0, 0x4, 0x7, 0x3, 0x7, 0x20, 0x1, 0x5, 0x7fffffff, 0x9, 0x40]}, 0x45c) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1104.831831][T19991] ion_mmap: failure mapping buffer to userspace [ 1104.844232][T19990] Unknown ioctl -1066900319 12:39:01 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0984124, &(0x7f0000000000)) 12:39:01 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x80184151, &(0x7f0000000000)) 12:39:01 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x8108551b, &(0x7f0000000000)) 12:39:01 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000000000)) 12:39:01 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x81204101, &(0x7f0000000000)) 12:39:01 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x80184153, &(0x7f0000000000)) 12:39:02 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:02 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1}) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe4c008c82ac4c214, 0x10, r0, 0x80000000) ioctl$KVM_PPC_ALLOCATE_HTAB(r4, 0xc004aea7, &(0x7f0000000000)=0x4f) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in=@empty}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) ioctl(r5, 0x79e2, &(0x7f0000000000)) 12:39:02 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc1004111, &(0x7f0000000000)) 12:39:02 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x8138ae83, &(0x7f0000000000)) 12:39:02 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) write$P9_RRENAME(r2, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r3, r4, 0x0) r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r5) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:02 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x80345621, &(0x7f0000000000)) 12:39:02 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 12:39:02 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000000)) [ 1105.785172][T20650] ion_mmap: failure mapping buffer to userspace 12:39:02 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604111, &(0x7f0000000000)) 12:39:02 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000140)=[0x5, 0x3], 0x2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x81, 0x12) 12:39:02 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x80984120, &(0x7f0000000000)) 12:39:02 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000000)) [ 1106.160116][T20948] ion_mmap: failure mapping buffer to userspace 12:39:03 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:03 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) r1 = socket$inet6(0xa, 0x3, 0x20000000021) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r3 = geteuid() r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r2, r3}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x1, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in=@multicast1, 0x34ff, 0x7, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x9, 0x80) ioctl(r5, 0x40044103, &(0x7f0000000000)) 12:39:03 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc008ae05, &(0x7f0000000000)) 12:39:03 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4008414a, &(0x7f0000000000)) 12:39:03 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x8108551b, &(0x7f0000000000)) 12:39:03 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000037c0)={0x5}, 0x4) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000003600)=[{&(0x7f0000000080)={0x27, 0x1, 0x0, 0x4, 0x3f, 0x80, "6c79c525aa264930a188bfbd909e6b0beab5f55b21d019ec5d611674254aabe260af56a7504cd65d32a36713acdccb067219140cfbcb7d4c83fd03dc173d91", 0x26}, 0x60, &(0x7f0000000700)=[{&(0x7f0000000100)="6ad3cacb0128aa05b31c30c3f3df53195d392fb509a5ef78728694692e632d6556a1e2dc4a9c2cd011c1487385841d1917ea9a0b4b634860122179498638c2", 0x3f}, {&(0x7f0000000140)="e56eccbec7f443032d0d11f6859e6572cee38ad767433b4c8092b7fe43b5ca78705e0c637eeb6d4542f22c976b3afeeb1e", 0x31}, {&(0x7f0000000180)="1f84d97c6032a05cb96998dc5a3c2ba90612e44df5be19773ccc77f7d501e868da44e24e9d1b372c34bea35c9f81ec7e2bc260f03f3071c55a9e67d5cdd628fd82c27ec5bd4a1db4feab42f6155e2a47e99d2032fd81d0a60b8bce7e71114fc8ec57af15287001093d6762fe858545c51c30affdf193b22717de7fbd14d9", 0x7e}, {&(0x7f00000002c0)="f321cfbf64404b0ad429b44706696c7a6c573e5ab9206644f1797c591cb43e8c59c885c8e9c496ae6a91e29162ba919e5c400579537a6b607583db687b0cfbeb55dac3e4ef38631c607bc274f70ec0cf34e368a92f4fe5dd911975072ff900c1198ae85250bba92474022ae255c7e0239597d16be4de2ba70ac593d649d3d66a54777e463d5cfab13a4aad0e4c3cd1b02c6645442a73e873df3aa951449efac412d5475fd39e602c34a0a87b44b6c50f508f5af87a28aa755e4fd735e0c84fda2389680a96cbeeb7f1f89e", 0xcb}, {&(0x7f00000003c0)="e8575a9d775dab69404da5ccb4880e16806db0bdc1615739a1f987241dd14db7ac084e707e9dd5b7dee39340179baba05e17df5f56b0f91720d5f1a42e3d2dbecfdf8c2b5f0b4d273f7516f19f4bb47f2e912593a16ffc42e023d58fe48844d1a99aae2ae271264ada0ad3b53cc4f1121139efa91763abf7e27e0d524fe2db952108e621571068ec3c3f349d0c88e545e4391758182d646739254865e4410858a3067536baac452f0ec381ae32dfebfbb659951b2c3b99480c90feaba86f21e6ffa77c15c0f1cbc17a14c924e4b95aaf85", 0xd1}, {&(0x7f0000000200)="df8eca623656a5101f171e0366ef0816035571c923ff91a76f8b061b1e084a9d10ecb0786c6040d7bf354243463a4769cb5a362e3629b6dd1637e3c2f16c30d6fda9fd0822aae58126f1b4b81d", 0x4d}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000005c0)="281de57b02e48fd26b8fae7d3067985e851edbfaab0e19fa3ed4", 0x1a}, {&(0x7f0000000600)="80459588c280784aec5e26c061d703f0aae0d93551107663b6db9bb5d64d819c2fd5ae94146a4fcab76c951614f569198973b8e85ce19cd58f0f254eae84150b71c861270b50131c82856de66369cf0ea13f9d93c136a800652c0894e79bbced4089c12de290280d0208339a9220e3e4e531c5b0142eee80b9834d03d29fe19226b16b24ee4ae7b12e912930a6abb689bcb0fe40779882b6d463bcefb99d24b876d94f629d666f13789c147f21ad5496122d595b7616d6882c545c20a7b32539b6349dae821ede7046349b75bf0a40d4cfcc57a23dd66c1e21ce42cfef08c029b172", 0xe2}], 0x9, &(0x7f00000007c0)={0xc8, 0x10d, 0xa01d, "03e58a533c201204a6f06ef59e85476aedcf4f42da8b527ea5005af3870f7f903145012fe1b822ac946804a8124b5a763a1064883a2d40cd127f78c7b9b2722c7fac9c3715354cde5d49ce3288ba183cf433b6d34f0c54892ddf03407600a87f62372af7ed9a0d631df50f2f8a47dd40c5bf5233f4e5c6d7306dbf292d1a3f2a34eb2f087ce01a0906a996fbec953b765504536299e0d4ba7a251090a02b567905dd54768d5483685433e8d5ed9f75575a14"}, 0xc8, 0x2400c855}, {&(0x7f00000008c0)={0x27, 0x1, 0x1, 0x5, 0x52, 0x9, "f835f2beebc15e4169ac22e3abaa0cd4352f34e66291b2fc6262c1e196cb1aab3c2a53b60f33751876b0befeea3edadc47dc42f8e798a6272b8885fc2221a5", 0x1c}, 0x60, &(0x7f0000000dc0)=[{&(0x7f0000000940)="faad912c2f8634ebe58c288d549c921839fac41e49edf84b63ef5377c2120eb07e5e264ec7025ec823f6453d0825b7a342daf933237fcd131f3527b67617d0c996abc062", 0x44}, {&(0x7f00000009c0)="41c55df0eebe48567fd2344daf201b9fff157609f45eb2e6ef3729eff90829aa269c12f4b7a1102e67930fdaf04eb79cb7e38ede13ea1c4abb86beac8ad073248807f2d8308477313ea179e12ff74226b4c6e317b17614d615a3faf89bef27f2491ed7a69fd9c6587111c5c5fdb66fe0a8e2da896fa3c3a5299c2de5b524ab5b107ad41bb90fbf4a1abd84704aae5593b628c529bcbd38f76c544600994afb6a346d2b4c145f401cc8ae2110e3510103276d76f4832ac2d38e3fc7", 0xbb}, {&(0x7f0000000a80)="a6a542dcf536cb864b2385ed9005af72427e1a22503f2b73dfefce384bfe6a0fb8e396d0ab5a41461254e83cd0dccb4f21f5e6d8a38677830954995b64878d9c2727df5f79ab62c6daa00af6d678d3e106ce75f338896f9a5b7f6cb41f12abf8ee4e27ba2eb3fd28148535fc8cb21dd90c6a2026449157efcb081c02a073f8e65ee627fec1cfa4d33d4f3fa04c96ddf88f9d52a3461d0c1bb480ad1fbb83e7", 0x9f}, {&(0x7f0000000b40)="134a01596cb6ca766ff677b473c000b793747550ac7d2e3de6c6942e19319e45ce485832e483b649feaa1e68713df0c50e5fe82bb0592553c1f3b9e12050", 0x3e}, {&(0x7f0000000b80)="9c148b2964e45b38e1a23255ecb2871a29a1e02421e9a0b4fc83a7d918435b2101ded94090d1a82c1038fdc98d8a68038445a158ae32f52f5a23c03a95d4d4311784b2000d09ab0a7a747552211eeb59ae475b183f30502fc584ad1ec437ba9c0e032c0b73a52afaa1e7343e2a1eda6ba371842b54071e9ab88803a85915f1b3011bc5de0c2c73b966783d5c99f039b217", 0x91}, {&(0x7f0000000c40)="1036c5039322db7a1f38d58d166b819a7ca76e4af7fbd49677b472065c257746bba306e6eb61af23e4b3d062af9334db54723353e16d6ba303798d548a53f6b81e9cbaae99e671bc9c6a2654a6692df1bdab95d0f5a0857dd0cd56295d266b1c01ce71cfbd56a838e56279cd013718b0288b64f53b", 0x75}, {&(0x7f0000000cc0)="627734fd75b3c5023d3afafe32da3d217ddefba5f2cf41baea7a5bb17ac1815d49f9ec3efc8b4d7d0336fa4559f5ed2274e99be2d89fffb117f84db2b4cb6e6e90298bfcf6404170390576ff517a0dc04d8b535885fb5bba595cf9ff51d567fe20c75f2812028656ce47346ac177b6d3e4cf60b660d93c0b76788d0c2bbe3875ebd7301404404738bdfcfaac0465e24c147c860a5d724feb87641f01d470ee2a9c141ead319de205a3d040caae7f8871be9f93d17f07873e215caefdbc64349129b328c49a3902cf37d4dee772f418639252a147823d511ecc", 0xd9}], 0x7, &(0x7f0000000e40)={0x88, 0x107, 0x3, "69996bdcb7f554eb2cca3e5a510d121c5334a0c882b41c141e433465a83884b1bebbc267a18b7effcf207cccb4aaf076e74dfd213572701b427bbee827602146a9dbb2fc8fc734962e70d1334c35a464c1672b133af7faca044f58d66aba406c95ebbeeec7bb2811816aa555943d57a183"}, 0x88}, {&(0x7f0000000f00)={0x27, 0x0, 0x0, 0x4, 0x3f, 0x7f, "4ac0084899b6415442690674217ab7046b00d63552b98b8f1cd894e486818fb26257b12db05da956aacdcae1b2e2bdb38f980a37430332db4640f76786bf0c", 0xb}, 0x60, &(0x7f00000010c0)=[{&(0x7f0000000f80)="8d4460b050b154cb04b85628b3615591a765d916c722839e94a1b91ad23cc32b0fbf9345ff10204ebd5179637386e26137f873cc77195499e564b049fa98a699fb1af11c62bf3cf4f515d2f5873f18866343d6e8a3ea68488918d94834386a7ef856c2cb26ab8052b9245b024b719fa51cf3fb0dfa4d8d8c08f831e3b577e33b60f514556f4e3623c430dcd783a8df4f937031dfa44dd86d7a984c3a200af8ffac8cb80356f9792fbae4ec", 0xab}, {&(0x7f0000001040)="4d22bdcc3a90e1b52ef92eab84fbb349e48b1e5cb39e5989f7d6bdfe88da267b59b86857ef2e3b048fbe585b30ae74e5ec16d7e6baed80af7ac180c33037b4779ddf388c5869", 0x46}], 0x2, 0x0, 0x0, 0x4000000}, {&(0x7f0000001100)={0x27, 0x0, 0x1, 0x1, 0x3, 0xc0, "1cb6beafb3203c5801a194e3915ff45da85da1cc7c5d7f9db318316d85816e0e097ff411dd3c7853241454e3ea3d9e8fda336cf1f39522509a64f1fe321769", 0x2d}, 0x60, &(0x7f0000001380)=[{&(0x7f0000001180)="adb838462faec3d041a91c1675171a1f1cbf11b4d018d6efc1a2c400fc53505c8a3f09577fdcc6834bdd95dbc7f909325921f23593b65388406350125c269d9383c6218ea2bcf4f026f3f9b0d35489b39ecb8af19e5d4850b2fece80f2807b1097100adbbf28add9363b52c1502c19dffd0c59de6a6dc32b622287af734edbee1124db4b99ae14ef56d54b6d426b4c15fcbc7d0d1e8d80b86e20c821ad7cdb3e126b780d614668650410281cb63530125b5919fd657aa3bbe8cffb23e8f2ca43d7e4a9", 0xc3}, {&(0x7f0000001280)="4656b9eb64408bdde8d5daf8e5b46a3505bc33a73ddfb5c214dcfbcae11e5fbbd4c0169692a0068569e68a4f17b556fdb70a85954e3c23d6281d0df2aaafbf6c575220c62107c4ac2307faa62c05be49025db5a65965100ebeb31b36b02d179054cbe4d675b9883c6bd6c0cd16f1fa69450e0d63b7dd100063882aafe4bd5c3f36a64265bf525dcec642b076c12f89f04981f81e25dc654b38c51494e0e061ec946c15e3dba5049a60cba30742e97f0d011b53cf878de25b24198b89c45d3563e6f2e6470edc18b99cfdacdd5f6b2c4f", 0xd0}], 0x2, &(0x7f00000013c0)={0x68, 0x113, 0x1, "6f1c67a88556766da9a34828d694a76a5aa74865d627be6041d7919c2147ea4114077e15f4653cacff33d75f90a97b643d12579f5337a524fbe44e3431bc22fc1ea4ea629addec9e1365788ace0a348d74241ac4e9af9679"}, 0x68, 0x20000000}, {&(0x7f0000001440)={0x27, 0x0, 0x0, 0x4, 0x80, 0x9, "66ef03d4625f157fba35430c7e427b44358944baad0ba131085d2a99cedd1f55145f5cf025675a38a42fb4514201fe969f946f3ff45fa2ac4de6b6e5930391", 0x2c}, 0x60, &(0x7f00000015c0)=[{&(0x7f00000014c0)="359af47f6a54842548b0f837db550ed9e3d8f954f7", 0x15}, {&(0x7f0000001500)="5fc1c645904cf9e8aa4f86ec8d7d3a7dbf581488ec265636596a02b54d1fc4ce6b0127213f020117b22d9baa3feea3bf4a0d7ab0f9375544ed9c23c4396ea4b24519cff63e0c6210219203aa7b1f5444207e7441415787c35b7281b34ea1cd57afd7c06b8ea90cf1923e509b492e79a0093d326a1b08feb5c0c0e253c9e176ac9bd56a8329eec0bf95786de554a73894048b5a9b751d29516fbcdd26dcbb10bd6c2e97acd3d5f6d69daa0091", 0xac}], 0x2, &(0x7f0000001600)={0x108, 0x112, 0x3, "14f8cf921f760e16a7a47681ccb8c79afd301e38c3aaa52b15b3eedc72e0cdf26bd7286a1f0c894a432eac4cb1c2736fed7b91b60a8c1a27ed7b3adfa97631847b46a8b233868b345260404c02c02c83936c14642bb8b7219e5a2b0c549db0b0c6ba50ea75b82d1f3b1b974b2f2e8b1589b739c9f8fd9685fdf4f271a2382126f31778d36f5382839fabfa0e1c0f1b30eaf137838fdc75e69cc527d11292dbea9d04ed27c406a919a155e25a34279e95a0742c1eb1fa7f2cc3dc269d79acab6638b2c9a0727d86e8bc71e5b8c19176a75809e9b8e7714bd054e43b41aae74e019727148f2c3ee84c9b83a04f00b2ca2884471c6ed058204e"}, 0x108, 0x84}, {&(0x7f0000001740)={0x27, 0x1, 0x1, 0x5, 0xff, 0x3f, "d3b1726b163db1cb0b0c6d2335c82ca1ddc7700c9633d7bb12aaacc757241f929297d5226b707c1dfb50da505e64ab7591fa8924f6680fd0ef006ce27e0a1e", 0x1e}, 0x60, &(0x7f0000002b40)=[{&(0x7f00000017c0)="cc650209bc4f81154c9c5f307b39f77c1442fa1cbbca3cf4e65377da41b3fdcd4e56c1e797e327f378cb3497e2d6632ae8ff08e4462e6d9a89d5a8630bb71d0c7b863924f17ba5ff846871b6ddce818a5df800a22a7a3d75c8ea2eebfe669f7ac35e94d35d088f153cd0f63621deef16d663437cce22278c2391ea24db7a4e0df870949ad18fae818208ca10c4e1a68875259b06fb6a0f9dafcf26902f5b94f06a8c300b872860c8f1710823f8ebad43bda9fa40e04c7e13009f58a545924ef023c7014197c6124ed2b65765a7e3415e1a9c5ebbee4dc8a7f044e9a956809d4efbbc3c9228048c17bc1f8b04b8f699855dbf6d608ca89a05", 0xf8}, {&(0x7f00000018c0)="6581389b46a51b863b9a0dde606b2cc7009f346612eb383c2a74db5b0a5f90cb0b7c2dfc6aec02be8cd3c657571bd4ceb2b9ea292f52c99d699acb69b228cb2b74e4e5978fae7c6b1d4871e725bc272fd36f5f55cdbc41418a0f6633d21ebf8408010dfc0d9fe7af396b2377d4fbc6df215ca09e", 0x74}, {&(0x7f0000001940)="750ca6cc5c1198dc7cf0443ded0b47c1557aff5eff9d73bf5611f5ee0c29f7967581c29696589a245eac6af809441e159ac824ac658eca72ac4c2da8074057a33ffaacfaa5e6b0aee2eddbb97d23ea16b2e4f9c8becae4548493e6ef799df2baee15d0c305fb9b6d39f7b4a8950b879ee37a29bea5e8f5c008b7933af99740b6a91ac57756f4e2adad5ba9fdff82bfbc4cf0fe2afc9e87b979dcc5b29bcccf78cdf9a6b14a902b76393423d5fc93b4c800ad370a0e33", 0xb6}, {&(0x7f0000001a00)="77d2d4511bfc7e9993ae3e36d3751725a902184fd4a4e3c3268d9133788218cb975763f0b5e6cbdeb55103b1fe39ceeaf059b4582232bf4bfdd9", 0x3a}, {&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000002a40)="628e02f07e4f01267dfb17d7435fa0929dcdd63cd1af2ba6729753cb43aaaa3a17d228122763b6e776670c5611d9d63c4267950674c1e34a81e24e0e928a181d5acd4ccfa1620c54e6402c44938a1e70bfbf8893da2023d793649276d5cec0e59de8d9bd94a5714f0fa32cb1eec0a53e462045a0e4b1c75695150d2fc7b4217527831b74503ae15037a082bc611f3d2fb6995729d14f112ba11dfb6aeb6763e485c93d48cdd0a9c8a0e31e7b208f3bb911e4d9a118276f4e48942bdff16ccb6fff860e9792a5167b5b2efeff49b290d0492df793f74216b76c41da4f931897f24030c11c0973d2605230874eb176d8bd0ae1f74d4aa592bb", 0xf8}], 0x6, &(0x7f0000002bc0)={0xf0, 0x29, 0x1, "758053004e224480e4098ba78be4cb34f022cdd9c7365622d83ce087e3310d12aee82ff4b3c51698a41b90a257c99c08702b4b4ddc6e9fd40fdc2fa8cd75025fb4ddee7e7d864f25009bbc23053370cf19286294fd2adb66f67909e71c2a97a51dd4fc36c7135bfa7f798dda8f35b7a908340e5700f6b79d1e5514a56a2d4aa85ccb9ea4d1afec1b31931851792d482044e9a6a29354a3ff2787e0e138a4f6f4068e670ad5c64927adde2fd3d8a44a1abad1de0ed1f36e68d13ed93a99b6481a78e360e34b1b8b5d81cdb443f7603d6ee156c23ffdb5354975a0afc50054a6d3"}, 0xf0, 0x60}, {&(0x7f0000002cc0)={0x27, 0x1, 0x1, 0x3e302bdbaa3f71ee, 0x7, 0x0, "2f4bb87022c90075fb6f5b29dfb383db7e8245cf3fd385a1b9edf21bb943df2d35d1e889de02ebdd5b82a08586991f2a8f6f377fd57e0ec1fec2c659bc5c87", 0x36}, 0x60, &(0x7f0000003000)=[{&(0x7f0000002d40)="083d56fab757931eb10824ef1e1b4fe08f15011ec6970ca6b4f3666854487b6fcd1bde9ea52ab3a5adb748df0cbf1b84be0c4dc877f592570d0034bf6a4016208620bd7ea64ab1721ec6fde983503e8de2c099368a46f8a0a0c137d1152a65fb6e673c1ef56ec3ccbcb162debf2c20eeb1fea45d29767c1f5bde562dcb403af6f9594b5211a342dbc713d48da9c3a6fadf7f719668b3d0665e577d78235fa4b6a468a8800ddb3e61b887f58250456164889299e1d5d9fe0963b4911e24130bc5fc8d6589b4239e4b3e7eb95ba68c77cb8a27dffc356c4ecb73c7d3ca", 0xdc}, {&(0x7f0000002e40)="5a33f509d7f7c42712184bfa0c5eb0bbd5d00dd44b96034c7a197722c8b353b9b17f693a6d5b13113617a23fb45ae9a983ff4cbe3b0342fe1f027d3c1411ecf41617e538da5ba61fefd7c2061551843d2e34e3b383ba35cd0a6e49bfb80a570df8f25de15ca5a69d5fcc1060e89c58bf", 0x70}, {&(0x7f0000002ec0)="45be1a626db7a68f951611e6e43cb8be2790b0932d15cb386755a512612d0fca61bc9783495302745a6b13cd8321e4689cc3b23e1ce74da687b3f96ae50ca5e5757ce52af5bc090f33197650653a4e837f991e4994090a554c84068b6a797ced8f565e3daf170602a2b0532e533258f6fa6a1fae1498bfaccf0a0285f757e087eae656696796ab7ced9bb269cb7480bf70549de5314e201a9a2142dc3fdd98c89b8131d4b372bfcdcb97a422552ef3915373918e8228691f74c68530bc1c3716b2929ca6cc8259e1a2b5b0ca45d263b2d09ab98588cd", 0xd6}, {&(0x7f0000002fc0)="decd", 0x2}], 0x4, &(0x7f0000003040)={0x100, 0x312, 0xffffff7f, "5780b7cd1e67b44fe59ab482fa37bd0ceaf791d235c7d1fcd0fd15ae811fbfca7eb43260c67351badded27bc39e20832a1bc9d21812e49ed6906e64a28f70a4a53672a2e52422d313113b844952ae88165f1f4108a6c2c62631bc7979c148306f9b769b4de47fae8ba09df16e934ca422661af6b87d9e1b80b85c5220a6cc969e161dc741c0530fd5324e19cce707616da9a4a3c7bf0b02cdafc8a99452fa98009965e5963abf4f256d8076d4b90a69e92bd80e792e3454048a95d70356cfab54f1cdd0687ddc08c72284d9097e6ddfa3d98d990f5b9a99d9f66b53bf10b00133d49412795cff943af060607"}, 0x100, 0xa000}, {&(0x7f0000003140)={0x27, 0x1, 0x2, 0x0, 0x2, 0x1, "bd41aec5b812d9fdc044e03a5534149037d33f13cd849cfbdf90a02776dd598a94389446ac11a40e47f240db4fb612fc70243cb3559740ca035ebe372744a0", 0x5}, 0x60, &(0x7f0000003540)=[{&(0x7f00000031c0)="a4304272217d7e344e43a3181d0a9d4ef0960622786a9d0c2bb46d3297cc73109996a34274a2080e750ce024d4f42f6095016dccc00662fe831c16fdcad404304820d525a9bf267f564e3edd9a80e7c493b22f738b74229c7756e6f2229849eb600ed1d497a7e60d883c6e9c66a34a3138dfd3bbf792d762285793ac043f1ed0e7d6419484f6d01dd19d87edaeefb20d9c168f69984cec385671152f52e3a7d61bf1dba15a6491dda9ff75c0608b2ee95a9d85", 0xb3}, {&(0x7f0000003280)="2864870da538c83a3b918db7b482815ae87b4711f37cb2700f260db9e7e42af059c8e12b5a9fdaad907f3747381fefa46523ef79eb52f2b8c7659e058416db834ea9003484984abb2bdd9edb9486aa4258b48d616e2540fbd37f7b762d136f362cff530e0e22cc4f6a64c24251e30fa027d7ef34e70eee35edf53fe2840d495bed31058057348bff2381a3c2329fe0794bf8296c9d7befbee48f9c758339407057c393d95437940435c50c", 0xab}, {&(0x7f0000003340)="7d6b8b0bd142980d54d203d0c441c7dc5a5ccaf07952a550fe4217673669dc27e0d92ea6d29e6d6d464f7c99c097021b910e8f154c7a1e90840d4815b99008e642a0ba37c9fc0fa7edd3ca3aba6132244ab7d5c649a4b5c4dc3d91b5c61b2af84c4b3cc04b6408e3d1a1cb314a375454e93795da86482430c5f398a4f606fc97eb30f8aac3765dfa6971ece9923c206bdc19dca5cbe442d15e86e471596e8f9fb0bce2f22fc53639a41f2dab7b6fcb51c7580810c6675e2f6a203529b38f0665e6af49f983f00aeeb36d76e1421bcce61ba4e6d3e893422e002e103dab52def431860f42c9464a5b92", 0xe9}, {&(0x7f0000003440)="c643d2c17599cfef5a64b5077d397288bfdfe7a4b7bfa5a50737f171423252255c12b013531b78b7c03e742fd9c8e39d6668843c7f636b40fd5a767a452ea3ac68a4369d2e42d8b2c2e8", 0x4a}, {&(0x7f00000034c0)="4b7fc5ba96bcabdbb88ee5638b57b8116bd2dcc7e804945a643c328dafef324036be2a498b36c9cc31c55e03b8401b67276eca959ad7228a24ad6417de110c22ef", 0x41}], 0x5, &(0x7f00000035c0)={0x20, 0x111, 0x5, "35d320780134bb857095e3d7694f"}, 0x20, 0x40}], 0x8, 0x4000) 12:39:03 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 1106.719428][T21238] ion_mmap: failure mapping buffer to userspace 12:39:03 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc00c642d, &(0x7f0000000000)) 12:39:03 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x8, 0x2000) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000440)={r5, 0x1, 0x2, @remote}, 0x10) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000000)={r7, 0x1, 0x6, @remote}, 0x10) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0xad8b, 0xfffff800, 0x199, 0x84, r3, 0x0, [], r7, r10, 0x5, 0x2}, 0x3c) 12:39:03 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x81204101, &(0x7f0000000000)) 12:39:03 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000080)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) r4 = dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=""/4096, 0x1000) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001e80)={'vxcan1\x00', 0x0}) connect$can_j1939(r4, &(0x7f0000001ec0)={0x1d, r8, 0x0, {0x90c58e2bc2c5d1f8, 0xff, 0x4}, 0xfd}, 0x18) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r9 = semget$private(0x0, 0x2, 0x50) semctl$GETVAL(r9, 0x2, 0xc, &(0x7f00000000c0)=""/55) 12:39:03 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000000000)) [ 1106.988231][T21678] ion_mmap: failure mapping buffer to userspace [ 1107.033543][T21678] device lo entered promiscuous mode [ 1107.072519][T21678] ion_mmap: failure mapping buffer to userspace [ 1107.086322][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1107.092119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1107.110422][T21670] device lo left promiscuous mode [ 1107.182310][T21734] ion_mmap: failure mapping buffer to userspace 12:39:04 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:04 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) pause() ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0xe9a340c, 0xff, 0xc1, 0x81, 0xfb, 0x0, 0x800000080, 0xb3f5c, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x800000000000000a, 0x402}, 0x4a, 0x6, 0x2, 0x5, 0x800, 0x3ff, 0x3d}) 12:39:04 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000000)) 12:39:04 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0189436, &(0x7f0000000000)) 12:39:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x9, 0x4) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) move_pages(r4, 0x3, &(0x7f0000000040)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl(r3, 0x40044103, &(0x7f0000000280)="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") r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev+Iof\x00', 0x20800, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r9, 0x0) setsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, &(0x7f0000000100)=0x95, 0x2) r10 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r10, 0x3115a0bb) 12:39:04 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x4}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2, 0x3], 0x80000000000000e6) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x8, {{0xa, 0x4e24, 0x3f, @local, 0x3}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x3, @rand_addr="f32d3bb6f12a4d00af454af18dbc16c9", 0xfffffffd}}]}, 0x110) 12:39:04 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc020660b, &(0x7f0000000000)) [ 1107.574078][T22003] ion_mmap: failure mapping buffer to userspace [ 1107.599441][T22003] ion_mmap: failure mapping buffer to userspace [ 1107.599820][T22000] ion_mmap: failure mapping buffer to userspace 12:39:04 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000000)) 12:39:04 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:04 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc040563e, &(0x7f0000000000)) 12:39:04 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80000001, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:04 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:05 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3dd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:05 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc0086421, &(0x7f0000000000)) 12:39:05 executing program 4: clone(0x200, &(0x7f0000000000)="be83f6975094b998be7a7f029c47d23523f74919abaa07dcd36fc65c3efe2f0a83013550b29c7c1421b8f0211ae0661a99ec6cd93f98c2c6dec4482129d9fcfe8f98813b63b780593a03433ccffe85982273902df784ae03e8ba795936c368236246f2410d4a4695bf340e1283bc9509f636f1d50046e1347de4487a17d97066e2619b055cb9b7d2048711cd1905", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="98f5f81d4d0bee797d068f1c18fe5cfbf507f0574f71c63b12bddc8aa924591ebbf9b31cc408a29215e2b2bc9e58bb19c130b97b13d32a78da9c79d9eed6dc1d464313ad24b2c4e263541658dd0f31d34ca1c057f4f477f9f35f33195dbf5e5946ff6c66b299a8f2ac3497fa5e9793043e29ce467d4c464ed8900a96d7f5c8dc1ba2a29db58854cbd06e7a4746") r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xa2, 0x80) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x8, 0x212400) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd7000ffdbdf25010000000000000007410000004c00180000000873797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f57d5774eb5b772485be4c2fca804fd1c2fa31f87a19ade26d859bf255416d96f6e1cc1e7f040f4fa7c2168973477db84c4e230d2cac097ae176b4232c8135611d71c60c1b6ce26472f5832b433b74e8e1bbd15e9e1d35925385bd5a3e362c9e1298aa6fe"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x8030) 12:39:05 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884113, &(0x7f0000000000)) 12:39:05 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x46080, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0xfff, 0x1, 0x463a}) 12:39:05 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x8000, &(0x7f00000002c0)={'trans=xen,', {[{@access_any='access=any'}, {@mmap='mmap'}, {@cache_loose='cache=loose'}, {@version_L='version=9p2000.L'}, {@aname={'aname', 0x3d, '/\\vmnet0cpuset-lo'}}, {@mmap='mmap'}, {@version_u='version=9p2000.u'}], [{@euid_gt={'euid>', 0xee00}}, {@euid_eq={'euid', 0x3d, r2}}, {@seclabel='seclabel'}, {@obj_role={'obj_role', 0x3d, '-vmnet1nodev/em1'}}, {@measure='measure'}, {@measure='measure'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}}) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:05 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000000)) 12:39:05 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc00c642d, &(0x7f0000000000)) 12:39:05 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x800000000003, 0x210002) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000300)={0x200, 0x800, 0x8000, 0xffffc95b, 0xff, 0x88, 0xfffffff8, 0x4000009, r6}, &(0x7f0000000340)=0x20) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x1, 0x0, 0x2a24e2c3f2f7a3a4, 0x1, {0x1, 0x4, 0x8a0, 0x9}}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000080)={r7, @in={{0x2, 0x4e23, @rand_addr=0x6}}}, 0x84) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) accept$nfc_llcp(r10, &(0x7f0000000280), &(0x7f0000000200)=0x60) 12:39:05 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/d\x80\xef\x9d 2\"\xca\xa1\xcdmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x40010, 0xffffffffffffffff, 0x91f66000) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7) 12:39:05 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x20000000021) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r4 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r3, r4}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r5, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100000000000000040003000000000008000c00", @ANYRES32=r6, @ANYBLOB="be090400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r8, @ANYBLOB="10000000000000002000070000000000"], 0x44, 0x0) write$FUSE_ATTR(r0, &(0x7f00000000c0)={0x78, 0x0, 0x8, {0x1000, 0x1, 0x0, {0x0, 0x2, 0x401, 0x15a7, 0x7, 0x1, 0x3, 0x6, 0x80000000, 0x12000000, 0xfff, r4, r7, 0x8, 0xd362}}}, 0x78) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r9 = io_uring_setup(0x4a0, &(0x7f0000000000)) r10 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r9, r10, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:05 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0984124, &(0x7f0000000000)) [ 1108.597148][T23201] ion_mmap: failure mapping buffer to userspace 12:39:05 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:05 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc0106426, &(0x7f0000000000)) 12:39:05 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000000000)) 12:39:05 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000080)={0x9, 0x5, 0x2}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x40044103, &(0x7f0000000000)="f182fb2ae712bc92e7d5cd8b8a75cc92747d2287b22d1e8b6284b4b1fade711fb812e500406993801b") 12:39:05 executing program 4: r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'user.', '/dev/snd/pcmC#D#c\x00'}, &(0x7f0000000040)=""/146, 0x92) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x40084149, &(0x7f0000000000)) 12:39:05 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc1004111, &(0x7f0000000000)) 12:39:05 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc0184900, &(0x7f0000000000)) 12:39:05 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x82200, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x6, 0xe2, 0x8}, 0x10}, 0x70) close(r2) 12:39:06 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0x2) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:06 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 12:39:06 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={0x1ff, 0x7c6, 0x1, 0x0, 0x0, [{r0, 0x0, 0x2}]}) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:06 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc0189436, &(0x7f0000000000)) 12:39:06 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:06 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604111, &(0x7f0000000000)) 12:39:06 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x101000, 0x0) io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0102000000000000000009000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r2, 0x120, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) io_uring_setup(0x727, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7f}) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x700800, 0x0) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, 0x0, 0x0) r7 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, 0x0, 0x0) r8 = io_uring_setup(0x4a0, &(0x7f0000000000)) r9 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, 0x0, 0xdc) dup3(r8, r7, 0x80000) socket$can_raw(0x1d, 0x3, 0x1) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x22162524a482f0e, 0x40000012, r12, 0x0) 12:39:06 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:06 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:06 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc020660b, &(0x7f0000000000)) 12:39:06 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='W\xe5\x84\x00') 12:39:06 executing program 1: 12:39:06 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x3, 0x441) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8080, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x7, 0x80000000}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0x0, 0x9, 0x5}, &(0x7f0000000140)=0x10) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x81800) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:06 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc0884113, &(0x7f0000000000)) 12:39:06 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'hwsim0\x00', @link_local}) r3 = dup(r2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x40000012, r0, 0xd4f0c000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000000)=""/123) ioctl(r0, 0x40044104, &(0x7f0000000000)) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x80000001) waitid$P_PIDFD(0x3, r6, &(0x7f00000000c0), 0xa597cab58fd3d116, &(0x7f0000000280)) 12:39:07 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000000)) 12:39:07 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80) ioctl(r0, 0x40044106, &(0x7f0000000040)) [ 1110.141229][T24865] ion_mmap: failure mapping buffer to userspace [ 1110.176518][T24575] ion_mmap: failure mapping buffer to userspace 12:39:07 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) tee(r0, r1, 0x3, 0x1) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_setup(0x80000001, &(0x7f0000000080)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:07 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:07 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x2400) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000040)={0x3ff, 0x101}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000080)=0x2, 0x4) ioctl(r1, 0x40044104, &(0x7f0000000000)) 12:39:07 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc0984124, &(0x7f0000000000)) 12:39:07 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:39:07 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) dup(r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000000040)) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:07 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000a0040000000000003801000000000000b8030000b8030000b803000004000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000180c200000e0000000000000000000000001c62020d8dc1fe970c0000000000000000000000000000ac141410ffffffff04000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000723def1306270000000000000000000000000000000000000000000000000000e0000002000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800"/1184], 0x4f0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U-', 0x6}, 0x28, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x80000, 0x0) ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f00000007c0)=""/158) r7 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x2, 0x101200) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000880)=0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, &(0x7f0000000280)=[0x1], 0x80000000000000c7) [ 1110.818654][T25753] ion_mmap: failure mapping buffer to userspace [ 1110.860948][T25836] ion_mmap: failure mapping buffer to userspace [ 1110.879451][T25752] ion_mmap: failure mapping buffer to userspace 12:39:07 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl(r0, 0x6, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0x8000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r5, 0xaec37000) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfb) 12:39:07 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4008414b, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x20000000000003, 0x300) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) accept4$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'\xf4\xa9\xba\xa2\x9e\xeb#\x18\x00', r5}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000440)={r6, 0x1, 0x2, @remote}, 0x10) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r9, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000200)={0xc7f, 0x5, 0x0, 0x7}, 0x8) r10 = socket(0x100000000011, 0x2, 0x0) bind(r10, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={r11, 0x1, 0x6, @remote}, 0x10) sendto(r0, &(0x7f0000000000)="1476950f41417c67eada9da9d564fd51c6b11f97280e19c93dd40899865a7be46e8a8239bd69de9ec9f86cdfdb695920999ddb26222e86ac6d808d89fa09a91572cc68e8b51e59b2884e0668a2d23af93eb5d5a8", 0x54, 0x44000404, &(0x7f0000000080)=@nfc_llcp={0x27, 0x1, 0x1, 0x4, 0x4, 0x9, "16ee37b0b4aab863fad69171263e443080907d521a0844d8966215649cd61c377710d0aaf0067370fa61b9dcaa2923fd17f86c0003399b3f471e455561e053", 0xa}, 0x80) r12 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r12, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r14 = dup(r13) setsockopt(0xffffffffffffffff, 0xfff, 0x81, &(0x7f0000000280)="e4e7b7d37e6d1af855054200be5152cf5a56a3c65fcdf63bcf14cac45b1b40a68f459d44d52fca46db415988625dbe1c9a61b27708607674a0f172486490fd477f94a7f898", 0x45) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r14, 0x0) ioctl$TIOCLINUX5(r14, 0x541c, &(0x7f00000001c0)={0x5, 0xffffffffffff34db, 0x101, 0x7502, 0x6}) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x6, 0x200000) 12:39:07 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000000000)) 12:39:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) r7 = dup3(r3, r6, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000080)=0x401) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000400)={0x11, @tick=0x5, 0x9, {0x2, 0x1f}, 0x81, 0x0, 0x3}) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:08 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/de\t\x00\x00\x00\'\xa11\xa36z\xa8\x9dg\x1d\x06', 0x1ff, 0x1) ioctl(r0, 0x40044104, &(0x7f0000000000)) [ 1111.125542][T26278] ion_mmap: failure mapping buffer to userspace [ 1111.150684][T26281] ion_mmap: failure mapping buffer to userspace [ 1111.179231][T26278] ion_mmap: failure mapping buffer to userspace [ 1111.187510][T26278] ion_mmap: failure mapping buffer to userspace 12:39:08 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x401, 0xc0000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x7, 0x7, 0x2, 0x5}, 0x6) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x4}}, 0x10) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 1111.220002][T26281] ion_mmap: failure mapping buffer to userspace 12:39:08 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r1, r2, 0x0) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000140)={0x8, "4bb7dabd191ea05cfa785e08df1f20a273a0e2f2d687de3e8ff6e6e3affa67f2", 0x1, 0x17a, 0x6f6acbc5, 0x4, 0x1}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="00fb200000000000000080b097f49f78743a386a7827cd6e0cdeef3bc4da7354051d2329761a2b738a27613b3229076bf296f6db6739ac24eb2243f714a4a4a29ad0c079458e9b31304521a3d6b6958212498fee2c72d318a0d3ed42d046ae67823653a3ef5ea3c9cbb64fb7886e08965f3813d2cb3464f68aae144c0c26000be969e63ef285fd6de7c5f22e97637565de89cadaa32042521a98efdd605f97917e06b6f12a750ff0952d68655c7e4000791466a7243dbc7aa2aef3403643d93e0da37d897c379d1370598b71b92664933b77362175f2d74fbeaf8e703e1a495b8d437f6c1b738093c5cf5c"], 0x40, 0x1) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f00000002c0)=""/246) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x2, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x8) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') 12:39:08 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc1004111, &(0x7f0000000000)) 12:39:08 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/\x9b\xabv/snd/pcmC#D#c\x00', 0x4000000000000, 0x202000) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:08 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x401, 0x1e0040f79a078412) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) write$rfkill(r6, &(0x7f00000000c0)={0x1, 0x8}, 0x8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x7a) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r7, 0x40084149, &(0x7f0000000000)) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$KVM_GET_TSC_KHZ(r10, 0xaea3) 12:39:08 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xdd03}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:08 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/de\xac/D#c\x02\x00', 0x6, 0x0) clock_settime(0x6, &(0x7f0000000000)) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:08 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl(r1, 0x40044104, &(0x7f0000000000)) [ 1111.769962][T26908] ion_mmap: failure mapping buffer to userspace [ 1111.792568][T26908] ion_mmap: failure mapping buffer to userspace [ 1111.824274][T26908] ion_mmap: failure mapping buffer to userspace 12:39:08 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x40044102, &(0x7f0000000000)) getrlimit(0xf, &(0x7f00000000c0)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x34) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) prctl$PR_GET_NO_NEW_PRIVS(0x27) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000100)) 12:39:08 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 12:39:08 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) [ 1111.893735][T27139] ion_mmap: failure mapping buffer to userspace [ 1111.902402][T26910] ion_mmap: failure mapping buffer to userspace [ 1111.912877][T27155] ion_mmap: failure mapping buffer to userspace [ 1112.060129][T27283] ion_mmap: failure mapping buffer to userspace [ 1112.100230][T27320] ion_mmap: failure mapping buffer to userspace 12:39:09 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) dup3(r0, r1, 0x80000) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1112.140650][T27320] ion_mmap: failure mapping buffer to userspace 12:39:09 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0xc2604111, &(0x7f0000000000)) 12:39:09 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x7a) 12:39:09 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000040)={{0x2, 0x0, @reserved="b6fb2d75c5731c2b6ab8d5c141606514930730905752e4a59a955bbf19be94d9"}}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x501800, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800030000000000"], 0x1c}, 0x1, 0x6c}, 0x0) 12:39:09 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffd, 0x80000) ioctl(r0, 0x40044103, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x200, 0x0, 0x3, 0x3}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={r1, 0xe1, "c2ecb71f7c2e58ed5abcccd2a5260ffab9b2e45e137aacb64bc7ce99c600e977cd0ea73475ce14898d161b840a25c43408386d33f490740b0c5b071570b25d9e25bd462a4176a1c0d7a00319dfb794769de4953f97f10127aadf621323d33f206d24fda4eb4e48ce84fefa362a757841b189500d96f719d5da38e3f5ce5597e7a6a7182cd13efe21441188487dcb3f894649194714346d682f7f6933acd865e5dfeb6eb87032ada06ad57ecffb8bb41d0582ff0ebfbec2aa5d758c20cc7b3132567fef2531a91b5224518c199c3ac73e83bd0d9632146215bb8904537c6baf8c48"}, &(0x7f0000000180)=0xe9) 12:39:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='\x00v\xf9\x8f\x16\xc3\x0e\xfc\x19', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000040)={0x55, 0x2, 0x9, {0x36d4, 0x600}, {0x1, 0x89}, @const={0x8, {0xfc01, 0x0, 0x1ff, 0xcce}}}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000080)={0x1, 0x70, 0x5, 0x7, 0x7f, 0x8, 0x0, 0x5, 0x42280, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x20, 0x8, 0x43, 0x8, 0x4, 0x6d, 0x400}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r3, 0x40084149, &(0x7f0000000000)) [ 1112.729366][T28121] ion_mmap: failure mapping buffer to userspace 12:39:09 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:09 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x470080, 0x0) 12:39:09 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x800) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:09 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r1}, 0xc) ptrace$peekuser(0x3, r1, 0x9) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) r3 = io_uring_setup(0x4a9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x14}) dup3(r2, r3, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r5}, 0xc) ptrace$pokeuser(0x6, r5, 0x3, 0x6) socket$can_raw(0x1d, 0x3, 0x1) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r8, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r11, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r11, 0x110, 0x5, &(0x7f0000000280)=[0x3, 0x404], 0x8b) syz_init_net_socket$x25(0x9, 0x5, 0x0) 12:39:09 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00', 0x3, 0x2e0000) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) preadv(r1, &(0x7f0000000040), 0x0, 0x5) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x410800) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:09 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev\x10\b\x00\x00\x00pc\x05C5\x00\x02c\x00', 0x0, 0xc3001) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x48000, 0x0) write(r1, 0xfffffffffffffffe, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)="e30d7daf8615660db6f3") 12:39:09 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/s\xf6Fk(0%\xe7\xe0D#c\x00', 0x1, 0xa2903b61e993ffbf) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 1113.082253][T28296] ion_mmap: failure mapping buffer to userspace [ 1113.110923][T28296] ion_mmap: failure mapping buffer to userspace 12:39:10 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = mq_open(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x880, 0xc9, &(0x7f0000000040)={0x9, 0x101, 0x97cd, 0xffffffff, 0x9, 0x2, 0x10000, 0x100000001}) mq_timedsend(r1, &(0x7f0000000080)="a516c606b657fbcac4f30588629364d9a2ce89ed5533431f093252a93a40b04c8bf977bc24065b9be916a60ed668934ded0ba7609d69a40db887840f3a8ba093e011d03035c3ae3dbd148972d19365ec96044eb759ae2f873f91d81cc781369c4f43d36c038503238a55c8228b1d783729da6cac5def9575db8eb1215ae7ad160c7e6514c5ad977251efb83716e6b73d41e3ae2a531583727f5ccb0ddea3a61d73080b7b78feee8a8c", 0xa9, 0x9, &(0x7f0000000140)={0x0, 0x989680}) 12:39:10 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x40000) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0xfff}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000002c0)=0x1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)=0xb6a0, 0x3) open(&(0x7f0000000140)='./file0\x00', 0x11b04, 0x40) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/139}], 0x1, 0x7ff) ioctl(0xffffffffffffffff, 0xac, &(0x7f0000000000)) 12:39:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0x8000) ioctl(r1, 0x40044103, &(0x7f0000000000)) r2 = semget$private(0x0, 0x1, 0x42) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:39:10 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488b00, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:10 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0x20000) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:10 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:10 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000000)) 12:39:10 executing program 3: r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x40800) fcntl$dupfd(r0, 0x406, r1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x40044103, &(0x7f0000000000)) 12:39:10 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev?\x02\x00\x00\x00\x00\x00\x00\x00\x00L\f\x00', 0x25, 0x880002) preadv(r0, &(0x7f0000001580)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000001280)=""/18, 0x12}, {&(0x7f00000012c0)=""/233, 0xe9}, {&(0x7f00000013c0)=""/237, 0xed}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, 0x8002) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:10 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40000012, r2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'caif0\x00', 0x200}) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r3 = io_uring_setup(0x37b, &(0x7f00000000c0)) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r3, r4, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000140)=0x8) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r10, 0x6430) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1113.830387][T28945] ion_mmap: failure mapping buffer to userspace [ 1113.833159][T28944] ion_mmap: failure mapping buffer to userspace 12:39:10 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000001640)=0x0) r5 = socket$inet6(0xa, 0x3, 0x20000000021) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r8 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r7, r8}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) stat(&(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000029c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6}}, &(0x7f0000002ac0)=0xe8) syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000200)='./file0\x00', 0x4, 0x9, &(0x7f0000002800)=[{&(0x7f0000000280)="f363e652d23ee4822d8bd3cf292f40738204e3b4bead2f8f471993506dd032c8feb58280f2a051286933e5cff24c89b979cbdd9b56fe7fcadc05b3a0593ef3c6c914279073084271825e5157a8a0684a162e46fe07cf29e11f7f8f4ecff4d2508b8cdf9392a6cbe4699cf2f5246ca97256117933173d9549e6697ab6d8a9af86c2f313ecddeb4957f02ceee71361ecf4993a1237dd62de7a42c2f1649a025e3564fd7d31f3fb19b7319dbc523dad4b76fdd99a6f1af4380eb4bde21f3d13f43f5824eda88eb9823503fd01ff3ed8b3c2e9439297", 0xd4}, {&(0x7f0000000380)="c9a420245f21618994088325dea3e2cb802c4f21883d7e4dce95c6e0b0be958895748c112c7f4aa2bea6ffadb097b606563828da291a02cd", 0x38, 0x4}, {&(0x7f00000003c0)="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", 0x1000, 0x5}, {&(0x7f0000001740)="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", 0x1000, 0x4}, {&(0x7f00000013c0)="c3aea1578d7680011b9e091c9f8ce77460f210f5b42d8c658056a11f93c286f058eb7d7c009d4a0deb6940c4a4c69bd23d14e163f5a46294b0da1bcb790c493e6d48bbbc77a271a1a5fda0d8d79574f5f588eeeefcdcd12c9639a252f5520aa008324f5596aafec40a08c66310cd808101f703af2432a18ee7c670c78f21d437f113", 0x82, 0x8}, {&(0x7f0000001480)="f598f91f686000d86591905fc56c4c18a9db4fac45e212acf9792cee3ffcf56943314627d87c1ba3bb22ee3c48952e1bd1c7514200d19679e01ca6dcdc38458bfe9fdfd5ff373b5534e9b63abb6e23fa976801362c62a49bde8efa828822df42e5e80511e026090a109da9a04217645afbffb19ae3171e17f16f81a6841f06de00d4afa737", 0x85, 0x3ff}, {&(0x7f0000001540)="cd5c15129a0f8273b310fe609a7c86d27a1df1778e2955383a7699cd5fa2f0336f3644126de2b0354ffa0affa9837d5060df55796afa804cebdd0b234ed27bc1368f64784dfbfed80a94ddbad543cce40866cab55c72fb4e099e3b12d3b5bc086e177cd3da7ac414b78ab8de9945c7c28b34cea75ebd410bb4", 0x79, 0x10000}, {&(0x7f00000015c0)="ae6d703be94722e39b83acf8e45964f30dfae1ae9c0dcba86edf3a0b1f9a56d4081b6f7732c5753e6318bfcf9312bffb2995992fccf1514257d6b86e60b49384869bc1773df471a47b67fb3f65c2156b0d53dc7a", 0x54, 0xfffffffffffffffb}, {&(0x7f0000002740)="13df2bf285cb03dd0aa1d8a2dc560849e235013f069ea39eb5dc3bc6c71b5b0473bdf6e1962ea1e8b375ae4aefb71cfa7c15079794f5788951d90fbe0b66dca32aa52c3ffa6677ce0bd9c5cb05ffc0c105a637d0925d2d8ddb20a900caa71a25edfc8e0cff0de62fe6020f9a7e63b1c4537cdcd4998117d9e27238fda5d26e02d031645e07ea481ef9eba6f51bb81371ffc9f4d8584177a1169652cb6c1cd43ea85c72664f99206a07", 0xa9, 0xdd}], 0x400f0, &(0x7f0000002b00)={[], [{@smackfsdef={'smackfsdef'}}, {@dont_hash='dont_hash'}, {@uid_eq={'uid', 0x3d, r4}}, {@subj_type={'subj_type', 0x3d, '}'}}, {@uid_eq={'uid', 0x3d, r8}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@uid_lt={'uid<', r10}}]}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000006000000fbfffffffffffffff60900000000000000f0ffffffffffff3f000000000000000000000000000000000000000000000000000000000000000008000006000000ffffff7f0000000005000000000000000900000000000000040000000000000000000000000000000000000000000000000000000000850e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff00"/384]) 12:39:10 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x329100) ioctl(r0, 0x40044104, &(0x7f0000000000)) [ 1113.889923][T28944] ion_mmap: failure mapping buffer to userspace 12:39:10 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r3}, 0xc) sched_getparam(r3, &(0x7f0000000080)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1114.075044][T29267] ion_mmap: failure mapping buffer to userspace 12:39:11 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x8a042) ioctl(r0, 0x40044103, &(0x7f0000000000)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000000)=0xe8) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, r4, 0x2}, 0xc) 12:39:11 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) r3 = socket$inet6(0xa, 0x3, 0x20000000021) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000006c0)={@empty}, &(0x7f0000000700)=0x14) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in=@local, 0x4e24, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, 0x0, r5}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r6, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x3}, [{0x8, 0xc, r7}, {0x8, 0x4}, {0x8, 0x4, r8}, {0x8, 0x6, r9}], {}, {0x20, 0x7}}, 0x44, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) r11 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r11, 0x6, 0x0, 0x0) r12 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x0, 0x80000) r13 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r13, 0x6, 0x0, 0x0) r14 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r14, 0x6, 0x0, 0x0) r15 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r15, 0x6, 0x0, 0x0) r16 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r16, 0x6, 0x0, 0x0) r17 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r17, 0x6, 0x0, 0x0) r18 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r18, 0x6, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) r20 = socket$inet6(0xa, 0x3, 0x20000000021) r21 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r20, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r23 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r21, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r22, r23}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2, 0x33}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0xb73f, 0x7fffffff}}, 0xe8) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="eb4df9b56b750be5b28fdf2bca36cca9573748188dce65176ef582ea493b2badf04049f1f88fbf798bfc64c16380ac3196afc5c3ffbd97135f7f792a58a88b95cd4cbd3073c8218bf3027a40f89481f24800088363661bb5b5ef6c0af1ac3b9b10d1bb514d1ae4b666505d311a855733dcf6e5802e34b20c33d9dd9c1959ca4bc9e4b82489e5e8691e5a9519b83447a652cee69d1fd51105d91644c418c817b2acb228226576b856828dfeb5fe2b4305ca3687d28dbb5e77a73628d7b10da9c06328dd9763e37c50d3c174a0e0ebdf9224feaebfbf0a0b1f7b57d9692c37a3ebe05598568863b6e84dff1e355d", 0xed}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r2, r5, r8}}}, @rights={{0x34, 0x1, 0x1, [r10, r11, r12, r13, r14, r15, r16, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r17, r18]}}, @cred={{0x1c, 0x1, 0x2, {r19, r23, r24}}}], 0x98, 0x4000142}, 0x4018001) 12:39:11 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x1af}], 0x1, 0x3) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:11 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000140)) io_uring_enter(r2, 0x1, 0x72, 0x3, &(0x7f0000000100)={0x80000000}, 0x8) [ 1114.321646][T29486] ion_mmap: failure mapping buffer to userspace 12:39:11 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:11 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/\x00', 0xfffffffffffffffe, 0x100) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x81, @default, @bpq0='bpq0\x00', 0x6, [@null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) getsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) fcntl$setlease(r1, 0x400, 0x1) 12:39:11 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x8080, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000680), &(0x7f00000006c0)=0xb) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2, 0x3], 0x2) 12:39:11 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x7f, @mcast2, 0x30000}}, 0x800, 0x400, 0x20, 0x5, 0x20}, &(0x7f0000000100)=0x98) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 1114.814274][T29941] ion_mmap: failure mapping buffer to userspace [ 1114.868139][T29940] ion_mmap: failure mapping buffer to userspace 12:39:11 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000040)) 12:39:11 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=0x30) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, 0x0, 0x0) readahead(r6, 0x8, 0x5) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000100)={0x4}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1115.110064][T30354] ion_mmap: failure mapping buffer to userspace 12:39:12 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x8001}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={r5, 0x1, 0x30, 0xee00}, &(0x7f0000000140)=0x18) fgetxattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7379737465872261fc7369785f61636c5f6163636573736d696d655f74797065776c616e31747275737465642500"], &(0x7f0000000040)=""/48, 0x30) 12:39:12 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/121, 0x79}], 0x1, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x40084149, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000440)={r3, 0x1, 0x2, @remote}, 0x10) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000000)={r5, 0x1, 0x6, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', r5}) 12:39:12 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x2, "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"}, 0x401, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001380)='/dev/snd/pcmC#D#p\x00', 0x5, 0x400081) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000013c0)={r5, 0x8, 0x30, 0x7, 0x9}, &(0x7f0000001400)=0x18) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/4096) ioctl(r0, 0x40044103, &(0x7f0000000000)) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r9, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, r9}) r11 = dup(r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r11, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r11, 0xc0104320, &(0x7f0000000000)={0x5, &(0x7f0000001280)="f0049b3a8df15520871e3654878cf3136d2f122afd5597f4e3e24d807103482b388ad3ff7e883f9ea97806566f0f44fd9d3bf468e2e859dbdae503a7ed4a67655c6ef50fe98b277f8b1f56e457d492733620592002c4d89a424bfe765613a1eb2e1592e26bd501207e777c7bf051c6bf2bfd01c683f1eb837cd4b5c0ed455030fa6e2b00a754861fdf84e734e5bf0b09501f805cf5ca5a4dfcd684039590a1f5c472ee6bf1646f2b5a579ef55b843105c6e4d7ee9f7b4f34fe0a4628a2c4c7c99e5f37b72aa101821edce3eff57f72f19ad2ef4a2ae2d7"}) 12:39:12 executing program 0: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000080)={0x40, 0x26, 0x6, 0x4, 0x7, [{0x5, 0x95, 0x7f, 0x0, 0x0, 0x80}, {0x7, 0xfffffffffffff6a3, 0x8001, 0x0, 0x0, 0x801}, {0x2, 0xb3d, 0x9980, 0x0, 0x0, 0x200}, {0xffffffffffffff7d, 0x100000001, 0x80000001, 0x0, 0x0, 0x1200}, {0x101, 0x10000, 0x48a9052d, 0x0, 0x0, 0x2a08}, {0x9, 0x40, 0x0, 0x0, 0x0, 0x5}, {0x1, 0x0, 0x7030, 0x0, 0x0, 0x2}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1115.347191][T30519] ion_mmap: failure mapping buffer to userspace [ 1115.358873][T30572] device lo entered promiscuous mode [ 1115.382085][T30556] device lo left promiscuous mode 12:39:12 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) prctl$PR_GET_DUMPABLE(0x3) 12:39:12 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x81, 0x20400) setrlimit(0x8, &(0x7f0000000080)={0x1000, 0x6}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x9, 0x9, 0x2, "3a4d722ec45604a9b6eedd46e58b9bf71f7dd36826fb84e3edba7e134ea80dda", 0x2c334652}) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)={0x2, "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"}, 0x401, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000500)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000001c0)=""/69) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f00000000c0)={0x5, 0x2, @start={0xef20}}) ioctl(r2, 0x40044104, &(0x7f0000000000)) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) 12:39:12 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:12 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f00000000c0)=0x1f) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r4, 0x0, 0xc965, r7}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) socketpair(0x0, 0x80000, 0x7, &(0x7f0000000040)) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 1115.750385][T31075] ion_mmap: failure mapping buffer to userspace 12:39:12 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x80000000402, 0x40a500) ioctl(r0, 0x40044103, &(0x7f00000001c0)="16c43b038ee22cee5647574e9c00"/28) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x101000) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000140)={0xbf, &(0x7f0000000080)="3731e61bbe673a95a27a1e7b3ad3563b470d630a0db4a0cd5db36821082f98f52dcc41e3fc47717eba780713d85847b3e644087bd53cad9fd4b6c156841f8dc48f6b93876dfac1c364324b53002e784bd20622d160a5bd5532216712f817c13cfe2c4addb0942b81113132bbeb788adb770d77c0d23ea08671bde843f2284c81495602e657fe9333ca90a0e927465d834dffd452e41f2b74b326ead9f9b36fe96d730d125f6fdc6e83cd677f985d4172cd1afaaf83997db53c7e14569cc177"}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000000)=""/41) [ 1115.865563][T31211] ion_mmap: failure mapping buffer to userspace 12:39:12 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x2d0840, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0xfdef}]) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) io_pgetevents(r4, 0x2, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f0000000140)={r5, r6+30000000}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x201, 0x0) getsockname$inet6(r7, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000300)=0x1c) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1115.906150][T31211] ion_mmap: failure mapping buffer to userspace 12:39:12 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x4d00) ioctl(r0, 0x9, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x100) [ 1115.959756][T31308] ion_mmap: failure mapping buffer to userspace 12:39:13 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0xd023094984607738) ioctl(r0, 0x1040044106, &(0x7f0000000000)) 12:39:13 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x41) 12:39:13 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1, 0x3b2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:13 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044105, &(0x7f0000000000)="b151b8efb9075dea42a10598f66bd309f33bdfab743e4c5855eca4322ba728ca2cc96af42ce822a479c1db5053737e402f428e4961b094ecada8792dc996edca7c2a0f29fa8adbaa5f75de4e5154ec7ecabdc2b4cd9bd78953aa695f6ebaca6b6987b0c8ffe7d715e1e3") r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xfff, 0x80641) write$nbd(r1, &(0x7f00000000c0)={0x67446698, 0x1, 0x3, 0x0, 0x2, "0b5fd3dd03a3d4ebd4a53a3f62c3ffce6708b37a67c67a115ef9af2800482cabfd6b5da78ab7dc9fe04fc3c35fdadae0b4d81a9414815ab9a19ee5fd4180fdd9bc8f3a3b7d323f31097d407ddcb687d0869f57058ddfb3886d49ece23d70bbfb89bd05382aa9b7db29f3fd04f446598ea0df117f44ebd239446c6876d5b3a3fa0f51f07226c6de7c9bac0415c45c048564cb1997d1301420c569bc31573baf8b3c61462b742778c77609b2f4eb41caf25e2bbf5c54fee973ce37ba0c9629fd4bf8beaa0de2e4b6cc1d2e7e02e7f1d743297058c907dbf85e7f6dde5f109f24506fd4886e"}, 0xf4) [ 1116.287670][T31633] ion_mmap: failure mapping buffer to userspace 12:39:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000100)) socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x680081, 0x0) setsockopt$inet6_dccp_int(r2, 0x21, 0x6, &(0x7f00000000c0)=0x800, 0x4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:13 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)={0x9, 0x3}) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:13 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000000040), 0xfffffffffffffdd3) dup(r1) ioctl(r0, 0x40044104, &(0x7f0000000000)) [ 1116.545718][T31780] ion_mmap: failure mapping buffer to userspace 12:39:13 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x6, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x0, 0x9, 0xb, 0x0, 0x1, 0x10}, @map={0x18, 0xb, 0x1, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x1f, 0x43, &(0x7f0000000100)=""/67, 0x41000, 0x2, [], 0x0, 0x0, r4, 0x8, &(0x7f0000000180)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x8, 0x7fffffff, 0x6}, 0x10}, 0x70) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000002c0)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:13 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffd, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0x8000) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x908, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2050}, 0x8000) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x5) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000080)=""/127) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f00000002c0)) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:13 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@remote={[], 0x0}, 0xb, 'team_slave_0\x00'}) 12:39:13 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@initdev, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r10) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x3}, [{0x8, 0xc, r9}, {0x8, 0x4}, {0x8, 0x4, r10}, {0x8, 0x6, r11}], {}, {0x20, 0x7}}, 0x44, 0x0) getgroups(0x1, &(0x7f0000000200)=[r10]) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x2000, &(0x7f0000000280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7fff}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@smackfsdef={'smackfsdef', 0x3d, 'securityem0f^['}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@permit_directio='permit_directio'}]}}) ioctl(r0, 0x40044104, &(0x7f0000000000)) [ 1116.881368][T32176] ion_mmap: failure mapping buffer to userspace [ 1116.900589][T32174] Unknown ioctl 35084 [ 1116.906971][T32175] ion_mmap: failure mapping buffer to userspace [ 1116.916119][T32176] ion_mmap: failure mapping buffer to userspace [ 1116.943881][T32177] ion_mmap: failure mapping buffer to userspace [ 1116.968838][T32289] ion_mmap: failure mapping buffer to userspace 12:39:13 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x220600) getsockopt(0xffffffffffffffff, 0x6c, 0x2, &(0x7f0000000000)=""/55, &(0x7f0000000040)=0x37) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 1116.991780][T32289] ion_mmap: failure mapping buffer to userspace 12:39:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x7) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:14 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x100, 0x0) fcntl$setstatus(r1, 0x4, 0x40000) 12:39:14 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 12:39:14 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000001c0)={r2, 0x1}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000000)={r2, 0x5}) [ 1117.198410][T32494] ion_mmap: failure mapping buffer to userspace 12:39:14 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000001c0)={0x18, r5, 0x78a8e6cd1b85014d, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x0) sendmsg$FOU_CMD_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa00}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24044002) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:14 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x6, 0x1f, 0x2}]}, 0x10) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:14 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:14 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:14 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000140)=0x1, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000100)=0x7fff) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000000)={0x10, 0x7, {0x55, 0x20, 0x6, {0x7, 0x7}, {0x4be0, 0xfffa}, @cond=[{0x8001, 0x400, 0x8, 0x40, 0x8000}, {0x0, 0xfffc, 0x2, 0x400, 0x37d, 0x8001}]}, {0x54, 0x2, 0x0, {0x9}, {0x7, 0xdc38}, @cond=[{0x7fff, 0xffff, 0x9, 0x800, 0x0, 0x8001}, {0x4, 0x5, 0x1, 0x624, 0x20, 0xb}]}}) 12:39:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000100)={'ip6erspan0\x00', {0x2, 0x4e22, @multicast2}}) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) r7 = ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) r8 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, 0x0, 0x0) r9 = io_uring_setup(0x4a0, &(0x7f0000000000)) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r12, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r12, 0x891b, &(0x7f0000000240)={'bond0\x00', {0x2, 0x4e23, @broadcast}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, 0x0, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x200}, {r3, 0x400}, {r7, 0x12}, {r8, 0x200}, {r9, 0x10}, {r0, 0x8}], 0x6, 0xc0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r13 = io_uring_setup(0x2af, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x328}) r14 = io_uring_setup(0x4a0, &(0x7f0000000080)={0x0, 0x0, 0x8}) dup3(r13, r14, 0x0) socket(0x8, 0x3, 0x8) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) connect(0xffffffffffffffff, &(0x7f00000001c0)=@llc={0x1a, 0x3, 0xfe, 0x4, 0x2, 0xe4, @broadcast}, 0x3e) 12:39:14 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80', {0x2, 0x4e24, @multicast1}}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/\andc\x1d\x00', 0x0, 0x311000) ioctl(r1, 0x40044103, &(0x7f0000000000)) 12:39:14 executing program 4: ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffe, 0x600) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 1117.852502][ T764] ion_mmap: failure mapping buffer to userspace [ 1117.879208][ T810] ion_mmap: failure mapping buffer to userspace [ 1117.879428][ T764] ion_mmap: failure mapping buffer to userspace 12:39:14 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:14 executing program 5: socket$isdn(0x22, 0x3, 0x23) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) socketpair(0x9, 0x4, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r4, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f00000000c0)={0x100, 0x200, 0x4, 0x8, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r11, @in6={{0xa, 0x4e20, 0x1, @empty, 0xff}}}, 0x84) ioctl$VIDIOC_S_PRIORITY(r7, 0x40045644, 0x1) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r3}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={r3, 0xf4e6, 0x2, [0x9, 0x6]}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 1117.938752][ T810] ion_mmap: failure mapping buffer to userspace 12:39:14 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x80) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x8) ioctl(r0, 0x40044103, &(0x7f0000000000)) write$P9_RREMOVE(r0, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7) [ 1117.999239][ T810] ion_mmap: failure mapping buffer to userspace 12:39:14 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1}) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) ioctl$RTC_AIE_OFF(r4, 0x7002) r5 = dup(r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) 12:39:15 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000001c0)={0x18, r2, 0x78a8e6cd1b85014d, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc00}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x4000048) [ 1118.177698][ T1152] ion_mmap: failure mapping buffer to userspace 12:39:15 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/\x1a\x89\x02\xdet\x9f\x9fc\xeb\xe9UEC!#c\x00', 0x0, 0x2802) ioctl(r0, 0x40044103, &(0x7f0000000000)) getpeername$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10) 12:39:15 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:15 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, r3, 0x7ac2a000) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x1, 0x0, 0x24, &(0x7f0000ffb000/0x4000)=nil, 0x81}) 12:39:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) r5 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000140)) 12:39:15 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7, 0x90000) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x8, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x208042, 0x0) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, 0x0, 0x0) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000500)={0x6, 0x0, 0x5, 0x0, 0x0, [{r3, 0x0, 0x9}, {r4, 0x0, 0x19}, {r0, 0x0, 0x1fc000}, {r5, 0x0, 0x9}, {r6, 0x0, 0x10000}]}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040)=0x3, 0x4) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r9, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r12, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r12, 0x40bc5311, &(0x7f0000000440)={0x7f, 0x0, 'client0\x00', 0xffffffff00000007, "90c9a552952fbd22", "59730f02fe07eee28a17af07c0aab4c45f2e624f157d2b8f45bc8c90ec6799e2", 0x7, 0x800}) sendmsg$inet(r9, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000280)="42d6ee502703ed8953bb461cd0d8b4597ec5bf16ab4f62e253f7e29899591d4668d6d0a7fd30fd143729d59a5e9a32c4476c1b62a45dd35c16639c25884a0cd8bc0630e7972054b3f399bc2fc35c59726c455ca4646cbfef7837323aefdf9c3166965a41c5c72876c74d2f30a15547bf2500682d95bc5975bd6e1cd280403f3b1ce5f38e30138e4669d75d567db49405ad5e78f5fa62a49716333fce7c4b48742a197d23d0a71029bb6a6a0959a1b886963a7280d4415baca4b7321367f613cb3ceb843b346bceaa00cd83c249536dcc633f0ea033cd9f626d3605c1fc2e654b", 0xe0}, {&(0x7f0000000380)="1904e0486bd1b2abe4089c6a1d6712ea87ac17e109351acf36f3e9f4d2c405a0c15157101aab35a0f8c10e629a6f8609675b2e73bd422084bff2b8f21a7f9c20a03770a5d270046d481469001183991487c9936c37a789df228a89076efbf7439426aa2f97dfcca97f12c8721c1a80f79ad6b97c43d98da4d5a41a8a217f8e222e3a64c0", 0x84}], 0x2}, 0x20001) r13 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r13, 0x40084149, &(0x7f0000000000)) 12:39:15 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4eaf, 0x80000) ioctl(r0, 0x40044103, &(0x7f0000000040)="46e3eb00cb44e115897ea5f075c32b37c60e") mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 12:39:15 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f00000000c0)={0x5, 0x1, 0x7}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000000)) ioctl(r0, 0x40044104, &(0x7f0000000000)) [ 1118.785075][ T1865] ion_mmap: failure mapping buffer to userspace [ 1118.823833][ T1915] ion_mmap: failure mapping buffer to userspace 12:39:15 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev\x03snd/pcmC#D#c\x00', 0xfffffffffffffff9, 0x10b040) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r2}, 0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, 0x0, 0x0) kcmp(r2, r3, 0x6, r4, r5) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r8, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x8, 0x101, 0x8001}, 0x7}, 0x20, 0x1, 0x0) ioctl$BLKPBSZGET(r8, 0x127b, &(0x7f0000000000)) [ 1118.879323][ T1941] ion_mmap: failure mapping buffer to userspace [ 1118.909065][ T1941] ion_mmap: failure mapping buffer to userspace 12:39:15 executing program 1: chmod(&(0x7f0000000000)='./file0\x00', 0x8ad2738a4dd0edc7) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000740)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x13c, 0x0, &(0x7f00000004c0)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/46, 0x2e, 0x2, 0x4}, @flat=@weak_handle={0x77682a85, 0x1008, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/11, 0xb, 0x2, 0x10}, @fda={0x66646185, 0x0, 0x0, 0x29}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x28, 0x48}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1081, 0x3}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/166, 0xa6, 0x2, 0x2c}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x2, 0x12}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @enter_looper, @register_looper, @dead_binder_done], 0xdd, 0x0, &(0x7f0000000600)="fd13e2acea0d7038c30b0ab4040c6567bd5a797c1201085c381ba32ef3ddcad286ac11afabb999210bdf69be84191446b234af78f135876475b504e401aa71c376ce9d9e714a0bf11356246068b19bd68dde6014ca759422c88cf5feff251a2d2c32f470ce8b331074645e2591056d35194d7293f36c933c6ac7a2e4a36d0dc1e1a45bf5353454e70df0d155c629700dad728fe87931ba6279612816fe57d103e0ea5f894bc35bf9d861dbed0a6d9e42111400adce7a639da8f060dd7d8f69366c65d800d634c0e9708eda547d994024dc7fe81ba8433d701dd038899e"}) ioctl(r2, 0x40044104, &(0x7f0000000000)) 12:39:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/#D#c\x00', 0x0, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl(r3, 0x40044103, &(0x7f0000000100)="8a1d4d21654b30c8028aa1c346ad97b4375f090000140000") 12:39:15 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)=""/147, 0x93}], 0x1, 0x6) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x408000, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000140)=0xd71f8430a50e3712) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 1119.039192][ T2165] ion_mmap: failure mapping buffer to userspace [ 1119.075311][ T2286] ion_mmap: failure mapping buffer to userspace 12:39:16 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 12:39:16 executing program 4: prctl$PR_SET_FPEMU(0xa, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:16 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x22000) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:16 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xbc, 0x20300) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r1, 0x40084149, &(0x7f0000000000)) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800) 12:39:16 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000002c0)={0x0, 0xfffffff8, 0x1, 0x4f69, 0x9, 0x1}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r1, r2, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x61a120) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000006000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000000180)="8a074b7035690a54e13ab13b8fff0d85a80732173f26b78f3b10fcf249d338e6ad8c1a0a56bb409fa2d983b90af253bbadff93ffcd4bbf57ab08bb3712de169a23e4b1907fa110a9b111d7e94e589a060c32648ee8b06db28ec3c4282e57171fc392a49adfaff91135f41b92c62d9befa4448cb44e34b175", 0x78, r4}, 0x68) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000002000/0x1000)=nil, 0x1000}) socket$can_raw(0x1d, 0x3, 0x1) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x4) bind$isdn(r5, &(0x7f0000000140)={0x22, 0x40, 0x9, 0x2, 0x7}, 0x6) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:16 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x140002) ioctl(r0, 0x40044103, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x4, 0x5, 0x400000, 0x1000, 0x7, {0x1, 0x5, 0x9, 0x6, 0x7, 0x1ff, 0x8, 0x2, 0x6, 0x2, 0x4, 0x1, 0x80, 0x81, "fb46c2dc6a6bced75e85a3f5e83dd71fb9413a4ab830db8b6a745d60f1eef5d3"}}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xc000, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) fanotify_mark(r7, 0x0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r8}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={r8, 0x7}, 0x8) fcntl$setlease(r1, 0x400, 0x1) 12:39:16 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x57, 0x2) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000000c0)) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:16 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xdd030000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:16 executing program 1: prctl$PR_GET_DUMPABLE(0x3) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x84a40) ioctl(r0, 0x40044104, &(0x7f0000000000)) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x101, "9ad9ed5eaa0c6116cac8673a75745f64f14b4db532400cd67a5cf477c0c879f4"}) 12:39:16 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0xfffffdcf}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x7edfaa37c3ee3267, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x2, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 12:39:16 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400002, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64\x00', &(0x7f0000000100)='/dev/sequencer2\x00', 0x10, 0x0) r2 = epoll_create(0x4) ioctl(r2, 0x81, &(0x7f0000000040)="3b9bf4ad51c8b32fd2c7051a8f94d2d5a59ac1ffef388174f297450ff91224bf251d8d90f61efa02b0143db11097801856207a40e24a85427a04443e9133ac84be7c7e23db8a5793dbc82a4553c37196762c6e") r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x40, 0x0) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x4, 0xbeb46a36d68b2de1) syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x9, 0x105001) r7 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, 0x0, 0x0) r8 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, 0x0, 0x0) r9 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, 0x0, 0x0) r10 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r10, 0x6, 0x0, 0x0) poll(&(0x7f0000000300)=[{r3, 0x1e8}, {r2, 0x400}, {r1, 0x100}, {r4, 0x101}, {r2, 0x1000}, {r10, 0x1059}, {r6, 0x4000}, {r9, 0x4}, {r7, 0x800}], 0x8e, 0x7fff) socket$pppoe(0x18, 0x1, 0x0) [ 1120.001092][ T3064] ion_mmap: failure mapping buffer to userspace 12:39:17 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000040)={0x8001, 0x5, 0x800, 'queue0\x00', 0x3}) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:17 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x3a}], 0x11a, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:17 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x1) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:17 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) read$FUSE(r0, &(0x7f0000000280), 0x1000) r4 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r4, 0x40044103, &(0x7f0000000000)) 12:39:17 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x43e, &(0x7f0000000080)={0x0, 0x0, 0x18, 0x1, 0x238}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:17 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000040)) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 1120.392838][ T3855] ion_mmap: failure mapping buffer to userspace [ 1120.475221][ T3953] ion_mmap: failure mapping buffer to userspace 12:39:17 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/138, 0x8a}], 0x1, 0x80) ioctl(r0, 0x40084149, &(0x7f0000000040)="ef451ee2601941aa048e6aa00fcccc1b8793a5bfe206736f4e575d80") 12:39:17 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x8000) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x6, 0x4) ioctl(r0, 0x40084149, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x3, 0x20000000021) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r8 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r7, r8}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) r9 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r9, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x3}, [{0x8, 0xc, r10}, {0x8, 0x4}, {0x8, 0x4, r11}, {0x8, 0x6, r12}], {}, {0x20, 0x7}}, 0x44, 0x0) r13 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r15) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r13, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x3}, [{0x8, 0xc, r14}, {0x8, 0x4}, {0x8, 0x4, r15}, {0x8, 0x6, r16}], {}, {0x20, 0x7}}, 0x44, 0x0) r17 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r17, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x3}, [{0x8, 0xc, r18}, {0x8, 0x4}, {0x8, 0x4, r19}, {0x8, 0x6, r20}], {}, {0x20, 0x7}}, 0x44, 0x0) r21 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r23) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r21, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x3}, [{0x8, 0xc, r22}, {0x8, 0x4}, {0x8, 0x4, r23}, {0x8, 0x6, r24}], {}, {0x20, 0x7}}, 0x44, 0x0) r25 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r27) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r25, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x3}, [{0x8, 0xc, r26}, {0x8, 0x4}, {0x8, 0x4, r27}, {0x8, 0x6, r28}], {}, {0x20, 0x7}}, 0x44, 0x0) getgroups(0xa, &(0x7f0000000080)=[r11, r15, r19, 0x0, 0xee01, r22, 0xee01, 0xffffffffffffffff, r28, 0xffffffffffffffff]) fchown(0xffffffffffffffff, r8, r29) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) r30 = dup3(r4, r2, 0x0) ioctl$SG_GET_VERSION_NUM(r30, 0x2282, &(0x7f0000000040)) 12:39:17 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:17 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:17 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) dup(r1) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x3, 0xe0000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000940)={0x0, 0x2}, &(0x7f0000000980)=0x8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r4}, 0x8) r5 = socket$inet(0x2, 0x5, 0x4) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000046c0)={0x0, 0xffffffff}, &(0x7f0000004700)=0x8) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) close(0xffffffffffffffff) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r11, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 12:39:17 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r6, 0x5}, 0x8) 12:39:17 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x4000}, {r1, 0x100}, {0xffffffffffffffff, 0x2062}, {r0, 0x9004}, {0xffffffffffffffff, 0x2002}, {r2, 0x40}, {r3, 0x8}, {r4, 0x40}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={0x100000001}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0xffffffffffffff70}], 0x1, 0x6) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x3, 0x3, 0xfd9b, 0xfc0000}) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 1120.894467][ T4577] ion_mmap: failure mapping buffer to userspace [ 1120.919826][ T4577] ion_mmap: failure mapping buffer to userspace 12:39:17 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80281, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000080)=""/244) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:17 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'vxcan1\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="3700ffff0400000006000000e0ffff1d07000000000400000000008000"/40]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80800, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000100)=0x1) r4 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/`nd/pcmF#D#c\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r8, 0x80685600, &(0x7f00000003c0)) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x8, 0x2000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) getpeername$inet(r7, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) r9 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, 0x0, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r12, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x20000, 0x0) ioctl$UI_DEV_SETUP(r13, 0x405c5503, &(0x7f0000000500)={{0xa977, 0x101, 0x7, 0x5}, 'syz1\x00', 0x20}) r14 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r14, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r16 = dup(r15) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, 0xffffffffffffffff, 0xf7155000) accept4$inet6(r16, 0x0, &(0x7f00000001c0), 0x800) r17 = accept4$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, &(0x7f00000002c0)=0x10, 0x80400) ioctl(r17, 0x40084149, &(0x7f0000000300)) [ 1121.064254][ T4935] ion_mmap: failure mapping buffer to userspace [ 1121.083047][ T4935] ion_mmap: failure mapping buffer to userspace 12:39:18 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe21ab69b3a527482, 0x40000012, r4, 0x0) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000080)=0x5) 12:39:18 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0xe9, &(0x7f0000000000)) 12:39:18 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffe, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) ioctl(r0, 0x7, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl(r1, 0xa6e, &(0x7f0000000040)="b2575354fa9c6ba0f9320a804683e103a0ecc913472eb90f4e11db90026cabc4529ceeceb842c36f85c817dcd3618f41a6baadc286d44aa3d6c80a4d8ccba88e9dba705507c648a25bc158e78dbd9c1f0cc31f8de5b3c8562fd2ed108f5a23c5966be40ececc99ab409241c01b98780e7ec24f6f252e6f1ff27fe184e53143339cc16068d9e731d5c4e2ea524252ba4aa7b83551a0fcf141e2093b6cd7974ed7399caa79d10304458bc29e48b32e1a1eaa94c9283b0d872691aa24c08d79cb0ee1f1fb80f720396b242722f7fddcf631cbdd") [ 1121.137177][ T4935] ion_mmap: failure mapping buffer to userspace [ 1121.210204][ T4971] ion_mmap: failure mapping buffer to userspace 12:39:18 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffc01, 0x20602) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x7, @empty, 0x6}}, 0x8, 0x1, 0x6, 0x200, 0xf8}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000140)={r4, @in={{0x2, 0x4e21, @loopback}}, 0x9, 0x2cd6, 0x4, 0x1, 0x7}, &(0x7f0000000200)=0x98) 12:39:18 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x40) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x19, 0x1, r0}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xffff8000, @dev={0xfe, 0x80, [], 0x20}, 0xffffffff}, {0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffc400}, 0xffffffffffffffff, 0x401}}, 0x48) ioctl(r0, 0x40084149, &(0x7f0000000000)) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, 0x0, 0x0) dup2(r4, r5) [ 1121.453833][ T5350] ion_mmap: failure mapping buffer to userspace [ 1121.503183][ T5411] ion_mmap: failure mapping buffer to userspace 12:39:18 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:18 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)=""/139, 0x8b}], 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa926, 0x4, 0x0, r4}) r6 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x4000000001c, &(0x7f00000001c0)={@remote, r11}, 0x14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r12, 0xee88e6805ffe885a}}, 0x10) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:18 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='m\x00\x00\x00\x00\x00 )\x00\x00\x13\x00', 0x0, 0x501001) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002280)={0x7, 0x0, [{0x0, 0x3e, &(0x7f0000000040)=""/62}, {0x10000, 0x0, 0xfffffffffffffffe}, {0x10000, 0xf, &(0x7f0000000080)=""/15}, {0x1, 0x1000, &(0x7f0000000280)=""/4096}, {0x9000, 0x91, &(0x7f00000000c0)=""/145}, {0x10000, 0x1000, &(0x7f0000001280)=""/4096}, {0x2, 0xb, &(0x7f0000000180)=""/11}]}) ioctl(r0, 0x9, &(0x7f0000000000)="9c2d7472bc7a5b56701700fbe55a67fab704") 12:39:18 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:18 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x18}, 0xc) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x30, r4, 0xc2873000) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x7138123012ed37a0) [ 1121.840128][ T5627] ion_mmap: failure mapping buffer to userspace [ 1121.857814][ T5626] ion_mmap: failure mapping buffer to userspace [ 1121.878490][ T5632] ion_mmap: failure mapping buffer to userspace 12:39:18 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:18 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) ioctl(r1, 0x9ab6, &(0x7f0000000000)="56b47fcdbe0d4e8865b6842a249e1b2ec6f90351a1e9f019f50572b84c06") 12:39:19 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r8}, 0xc) syz_open_procfs(r8, &(0x7f00000000c0)='gid_map\x00') r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r11, 0x0) pipe(&(0x7f00000001c0)) r12 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r12, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r14 = dup(r13) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r14, 0x0) ioctl$VIDIOC_DQEVENT(r14, 0x80885659, &(0x7f0000000340)={0x0, @ctrl}) ioctl(r0, 0x40044104, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) 12:39:19 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000040)={0x8, 0x1}) 12:39:19 executing program 5: mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@uname={'uname', 0x3d, 'trans=tcp,'}}, {@cache_none='cache=none'}]}}) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f0000000100)={{0x5, @addr=0x568791ce}, 0x8, 0x3, 0x2a46}) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 1122.204800][ T5953] ion_mmap: failure mapping buffer to userspace [ 1122.236435][ T5953] ion_mmap: failure mapping buffer to userspace [ 1122.244850][ T5955] ion_mmap: failure mapping buffer to userspace [ 1122.281008][ T5953] ion_mmap: failure mapping buffer to userspace [ 1122.324893][ T5953] ion_mmap: failure mapping buffer to userspace [ 1122.346922][ T6092] ion_mmap: failure mapping buffer to userspace [ 1122.375016][ T6164] ion_mmap: failure mapping buffer to userspace [ 1122.414346][ T6164] ion_mmap: failure mapping buffer to userspace [ 1122.444994][ T6164] ion_mmap: failure mapping buffer to userspace [ 1122.474002][ T5953] ion_mmap: failure mapping buffer to userspace 12:39:19 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x20000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={r3, 0xc5, "fc4a821bbe28357b555aef01dd06a51aca9de9dbf2a8b0fa14beaad1316d22118ad4c9bf88981e7e27dfc924f0c259f149eb5923e343f831083fbdde4b777b8239c8fba0bded8bf51bb4e332aa3020ca54c6a960ebde3e83f4fd1ae6f3fea114f04c4c1a170b3b80f01ce30ecf137b16b5064f90a8f953f77629af36e7b787ea55d52703c7a5e63a12f300d5e5077bb517bf3c14368c05e128e5211e07a62cfec75588f4ed2c526d73b3996250bdf7f50e51cadc94fe15e2f813ac58ddff0f047262727e58"}, &(0x7f0000000180)=0xcd) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r4, 0x2}, 0x8) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dI#c\x00', 0x10000000a4, 0x0) ioctl(r5, 0x40044103, &(0x7f0000000000)) 12:39:19 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x420000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000000)={0x6, "d1a0b588e592ddb7548283c15e23717521f88514995a73778d3280f0a36668d9", 0x1, 0x10, 0x40, 0x800, 0x4, 0x2, 0x80, 0xaa85}) [ 1122.601527][ T6353] ion_mmap: failure mapping buffer to userspace 12:39:19 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:19 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040)) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:19 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4, &(0x7f0000000280)="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") 12:39:19 executing program 3: ioctl(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) fdatasync(r0) 12:39:19 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x18c05, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 12:39:19 executing program 1: ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x8, 0x7d, 0x4, 0xfff, 0xb22, 0x72, 0x7f, 0x3b8, 0x1, 0x7ff, 0x4531286a, 0xffff7fff, 0x3, 0x0, 0xff, 0x4, 0x198, 0x6, 0x5, 0x3ff, 0x5, 0x7fff, 0x5, 0xc4, 0x80000, 0x1f, 0xfffffff9, 0x9, 0x4, 0x5, 0x0, 0x8]}) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xc, @pix={0x8, 0x2, 0x20493859, 0x4, 0x56, 0xff1a, 0x1f, 0x69e, 0x1, 0xb58323cf9bc2acd, 0x2, 0x2}}) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 12:39:19 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:20 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000080)=0x81, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f00000000c0)=""/58) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:20 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 12:39:20 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x20000000021) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r4 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r3, r4}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x3, &(0x7f0000000280)=[{&(0x7f0000000080)="d3a8f9583e923deab9baa2555e362b76e48207050cc810faf3f46000387610a38fd17f3abdb8088306cadfc9bd8c1d98e8c0ef34f9e7cbe2be5bb278c75d9bfa86ae0e71e017b282fefbaea8eec06370597441099d5b1c59ef1e4334501434b492c8e8c21c0527423f2c715ae4d009238841b32984fdf9f32941c5fb846e6d0b54b30f9561fb4c44585bcd484d586c879c5afabf5ead7d85d86e2a67772277286b53d73a1128462ebb3874771bbcade26b86edc58b623723ba21858be252114af2a61a2463fb", 0xc6, 0xff}, {&(0x7f0000000180)="3cc2a1fb318a30fed4581da209035bc9699687b806e6e1bc90155e999e8a37af4079e29936bcdbf2", 0x28, 0xfffffffffffffff6}, {&(0x7f00000001c0)="548ce9", 0x3, 0x4}], 0x4080, &(0x7f0000000300)=ANY=[@ANYBLOB="6c617a7974696d652c7377696474683d3078303030303030303030303030303030392c6e6f67727069642c696e6f646536342c6e6f6c617a7974696d652c7375626a5f747970653d25776c616e312c736d61636b66737472616e736d7574653d76626f786e6574315d2c6f626a5f747970653d2a2c646f6e745f6d6561737572652c686173682c7365636c6162656c2c646f6e745f686173682c6575e9643e", @ANYRESDEC=r4, @ANYBLOB=',permit_directio,\x00']) ioctl(r0, 0x40044104, &(0x7f0000000000)) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000200), &(0x7f0000000500)=0x4) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0', [{0x20, '/dev/snd/pcmC#D#c\x00'}, {0x20, '/dev/snd/pcmC#D#c\x00'}, {0x20, '/dev/snd/pcmC#D#c\x00'}, {}, {}], 0xa, "cf74b10c2b15b6d98ff51ed339c982d24e3a8f0e21532369c514bea8696305409327a6133175a03affc9ef1967792ab719681cff2ae0a88a972341f51a3c377802f007402618ac4aad2fb7616271539214d1b2e8a486134e08c846f714e23cd91e4ba921f2e2f7508709d599a2b873c500ea5c21cd7949dd2851770757c00f22459100969b224d9a46e7351b59ba76c01f2a8c"}, 0xd9) [ 1123.270446][ T7006] ion_mmap: failure mapping buffer to userspace [ 1123.289154][ T7009] ion_mmap: failure mapping buffer to userspace 12:39:20 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000000), 0x4) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) [ 1123.369169][ T7044] xfs: Unknown parameter 'subj_type' [ 1123.404467][ T7170] ion_mmap: failure mapping buffer to userspace [ 1123.423849][ T7189] xfs: Unknown parameter 'subj_type' 12:39:20 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/^\x00', 0xe1ff, 0x28000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) recvfrom(r3, &(0x7f0000000280)=""/4092, 0xfffffffffffffdf0, 0x12002, &(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x0, 0x5, 0x8, 0x3, "cf33e7e3a03c8df9eb902e588dadc4af07e49602f8be6fcdca958feefc5c2a7f0396aa6cb7b142f30cc768c1bc1f95d827fb55075ee93578a3b3d500", 0x4}, 0x80) ioctl(r0, 0x40044103, &(0x7f00000000c0)="5513a6f96d34c313e9a4cabebf606a5cd75b2ebc0045eabe47c92ba3f8a7cf0c34a7f6c70da66882ba698f43e2fde412ed1ede39650c0e036b7fbd3f00f9cf03fdb0050071287bf2ea1c65dde59a78a9d989298fba76851f39e71f14b7eaaac1f6a829976719988b78f216d2b01ed39f07f7db27d6d4450ef83ba9a3e2114d50e5308061235d019c5573954bb3430be995e40d761bae0f2bcab621920d21a39396aad53ae1dd82f5be16036d8da45c92ab013796145c8b2dd2634bca69228083b53dca3aa795acd9bfd98772c5feb8a754b349b98c4abd565b1d78250ec95079261c89b7613a3fe9bf127196ffa43b9636d006ec62a09a685cf80e1168c44d5a17c4398495ae0cbc9fb5449bbfeb71fa44436eafdde49d05ff904326781dd94818491db257a41301850a3631a3a7fd1d821019becc5c") [ 1123.593641][ T7423] ion_mmap: failure mapping buffer to userspace 12:39:20 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:20 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x40, 0x8000) ioctl(r0, 0x40084149, &(0x7f0000000080)="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") 12:39:20 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x3, 0xffffffe1}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x40044104, &(0x7f0000000000)) 12:39:20 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x2e, @multicast2, 0x4e22, 0x4, 'fo\x00', 0x12, 0x7f, 0x30}, 0x2c) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:20 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x409800, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x2000, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2, 0xb179f89280fe41ea, 0x0, 0x1a, 0x7, 0xad}, &(0x7f0000000080)=0x20) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 12:39:20 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x8001, &(0x7f0000000040)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0xa2100) 12:39:20 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000080)=@routing={0x89, 0x14, 0x0, 0x4, 0x0, [@mcast2, @rand_addr="a665ebe0abfc537628f7844bf420c8f1", @loopback, @empty, @empty, @mcast2, @remote, @rand_addr="1c81149b4a6d2fec54051b2f8132df2a", @rand_addr="6d1c62033bdf78fc3ab4c2b1aad2661b", @rand_addr="57ed3c960c405d8e4e3ada3387b48baa"]}, 0xa8) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x584, 0x3a3949d8b8e1ac6c) ioctl(r1, 0x40084149, &(0x7f0000000000)) 12:39:20 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$CAPI_CLR_FLAGS(r3, 0x80044325, &(0x7f0000000040)) 12:39:20 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x800000000000000, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000000)) [ 1124.135301][ T7850] ion_mmap: failure mapping buffer to userspace 12:39:21 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4, &(0x7f0000000000)="bc138577fcee7d4d7d91077384d66854867b81a817783edac9dcdca891fdd36ade6ce1054b57a25ccf3ae374fc89a74728465ed6e515fbf130f61bec4580d1e4146caf7d870bcef3d8ad0eb963254df4ca427aa0f7ff4282e768b21b38ca518f8de9") 12:39:21 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000140)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r7, 0x3}, &(0x7f0000000100)=0x8) [ 1124.209593][ T8034] ion_mmap: failure mapping buffer to userspace 12:39:21 executing program 4: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x100800) r1 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000440)={r2, 0x1, 0x2, @remote}, 0x10) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={r4, 0x1, 0x6, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'vxcan1\x00', r4}) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r8, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="5217dcb97622b9d0f49c18ce461977c3b0158b26f1d3f6a662516d98cca45a3a269be32a26854b4a6abae788d77ebf201b090f9ca290979923bcc71a4ed0f749ffb84b7863911fddfd822a3099add609bee4470a3b17b5899ab86d94a8ca622af866030d218713b06fd8ad015396fa31e3b91d6822e1850de5300a0784bf88cc47e04766c6400083b75daaca0538a08178179ea4c8d33fb02f2f039a281021964fab65f4d2efb2165aef699d40c6df45e2bcc380ddd4534e2e8ea2a86b43edd0232a892aae90ed53108fc310d2f1783ae2222effe6f46e44e4e828e947846a0fff2d7a1febf0f03b05a2b5815d5b8884bbfb", 0xf2}, {&(0x7f0000000380)="3d8a9d3a3731071cbb5f6e6094b09bcc1efd187de8cd9fd02871c93230ccc125850c7617232d2680af2efffc3a2c6ce28435429f2d64bda58aebf646ab5e62e83532d31b7c9f20a60569c9dbf638f7a37de15b297f1351b7abbc95ab3a7c4a6c00da6bb242ca55a663e539f04eb7a064efd405119cd0fba777c5551adbabbd152bbccf1801ddf13b2efe0c9e594b829fcaff75cb883e18ca259e48902307c86da9e05cfeab33410e6e7f5384cd1f2179a1", 0xb1}, {&(0x7f0000000440)="90920cdf7185be3e9eb5344568a7fd55d67fb3e9d49a7c5f97ebc7ba3e4d113751b2792efb9d6d254ec485bd3e80676fb0536694b3ca3c45d0a59ada7f1798e016fdd8f31584f99068775c07c8ceb52fabcfe2846fea080ed55bfe0acea215a152e418", 0x63}, {&(0x7f00000004c0)="37c0622c5fb38222d681d4be0e06889c4aa4e3ed07c20bce5667fd9bf0c99ec7f34fc7eca3880a18c0a8da130421cb25749ec469f205b7ba3e1bf97f0fb9b30e993746ebe313c9205183aa09ef1435", 0x4f}, {&(0x7f0000000540)="88f3f26c26d0ce08ca10116f1e27964e7b74a8735b9536567f349ca002b1ebf1fe05d24260752789ff89b56ffb4e1a16adf5ed123664223193a28de9c26f9d00db9b6b598c86dddf29dbccefe5783e37cbd75b392e2a5287d1253ad6429c7d2441abd6bc591816d603d8d349e4057e367dff0ea93f4c324142593639b7c8e54d6db58ac5bec138c4197b599f34354353e4756e6e193046c7e4b026e915abd3a5f65d494bb9df29a598490fa9", 0xac}], 0x5, &(0x7f0000000680)=[{0x58, 0x10b, 0x1, "fa4f5c98ed7362498cdaf0a0d6326545e490ff7fc37e6dd2e2d3fc314fb33e8fe7e27434aec721cae6d79379461e635d5b7160a94fe170f3181a2f8f54f4754d009cca19"}], 0x58}}, {{&(0x7f0000000a40)=@can={0x1d, r5}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000ac0)="334712ea1e44f83aa5ea84d865bf7f794292105d3b0a00f2d09b2ae1a4f3d13b20503411b9f0fe277905917c937a7ec773382bf6ea09249ac981404bc8d535a3bf1ccd92ae5c4f7755cc989b7bbed8d041835c88c38c8f58640543f02594caf629077781223d6e9f5a793016aa6b5da803ae72421f8b701d", 0x78}, {&(0x7f0000000b40)="611d17f07104f1404ddd30942dc5c44b2c6bc48884a3bef0254d6ea5d2c561752208604e9c4ae450476d71eb8f00d7c959fe12a670fb5049077ca1b631bdb475a211751d15703b3310480375f018bb21d40474d82f5b1381a04a2d62037aa82f4708ea8da64867001d9b7131fe560e45a6f802f1dba2743cb98344d856ae42e8c826574a672da9175d694b27912b9b00a3b1cdd60038c7a92649410541d18e24535ecf52f8d05652bf210ca8524e04172f0a8d182e878994bfbd29f6e52fd7c44b2811a79d3223b40591d099c8d0fed515469ab099e27ace35de707592afe28acdf4a651c4a8c8c5258891ac03f97e591dec6ea5d5a03e", 0xf7}, {&(0x7f0000000c40)="ecd65f62ee81f9f2aa6112404a46a806cb7154bc1355d805f763b941", 0xffffff0f}, {&(0x7f0000000c80)="e3a14e754c8c4715ad9d1d2186247b1c19b22cef9a88c31186a52f40bfa6e1be22f2393506694b7767eabd8c92f108d1a2ebce97c9e83c38eb37954750a1fd089244737ef6b2d9ba7e0a14f80985b21e683c6bf7b19fac5cfc79877a7df235bd159cb7a2876fd9257867128b12d7982cfcd0ddfaa2124465fe88aaa91f1147b59ba93fd7634b09154223213a2e2fc8", 0x8f}, {&(0x7f0000000d40)="6dd97c6d7429e3cbd1ceba04c51e16856f99ec14efac14b25de6811fb3cb59a375a72241614dee99d45d84524df39769211b0be020a8c05712e4e0f564ed79d6ab1a7c34baf08c74209357b825002f89847c9f235ffe11bea9c526d4501d781b135064f46a14747171d54b6b4031b22b663ad5fc5f1dae3b9b23d60fa208ec3319a341e528c3d3856d5ea5e3ac3fa9a90a91f5de79e8a6509b5947362704fb919293ae377ff5e3c593c03a0534275c1208f766c04a5a50dca99a3990eedb382772384242df447f078eb7b6faaa008c0e0f315826c2b4bc4a16d15ecd39a22e002bb87951c9d7381fd80edb", 0xeb}], 0x5, &(0x7f0000000ec0)=[{0x30, 0x101, 0x1, "9e1ae452228fb9109a579285200d8a1a527c4eafcf136ce9eee782ac"}, {0xa0, 0x105, 0xfffffff8, "4883c5a831bae8af068dff5abed8361032f923ea0a0a87a5390101079bafb73fbffb4cb70c83d27696574bac891cad2e7e187da9a18718c0df6df0eaa978460dd8dbd381b6526a8c29ec314fbb940e476e004328294093261b0ea3f8ff71d2014bf33739ab11a5b75fd47e9da544817962c5c885ccb21c69254916276a0934d155ad030f4ffb65564b263b97acbe44"}, {0x58, 0x1, 0x0, "d8d30b81ad3bf2ce67c40bbb995051b396ebab9220d27c879dbfc58a578de29d2915dc3216c4b2b9fdaab91c38485aeb8bd5783f8b5c9568353221c4c831c2f5ac6bffe32d"}, {0xa0, 0x10c, 0x2, "7063eebce25ab5d32d8e900a6b409f179e135c0200ce3850d8e09f872f08b0f69beaee0c6b7837fd47ea0b3581573350c191a0d7f3ead506ee2c9b362e70080f4fe220134e514b617e965e98c022c5f598d0857a75c9a3989b5895ea1dcb6ae392ad27f5afc78fcc7c71c8e77163671dea0f6d510386edb1bc16238589762e2cfa7992f646f3093b2267ff175a"}, {0x38, 0x10b, 0x100, "7c42fd3fbd3f9189b8a0ce4c6b38be55d14c276f4e0c23ff114c10e8ca365f042255e8ec45"}, {0x78, 0x116, 0x9, "59093dc06ad8478becd76cfa4e9b0c06952adfa4ed4d2b124ffccef98872bf6ebc4af3883304df98f545d20c9f4387ed27fce46aa1baacf755b6e770330b8a950894b18bce45a07c360b9d7eaabd93dc4665d1d3eab0bfa6a556ca56ad005a465f0939c649e3"}], 0x278}}, {{&(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e23, @empty}, 0x1, 0x2, 0x4, 0x4}}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000011c0)="d8204baa7b0cc6aea96352065cc14e59785e589403507f3cb4705212c64465e37d7c72a1abf8b7e2d2590f48a89b37227cdffa8b103609ad7f2b44c1f00399baefc36db2b6f392c74582bd449ece2400f73a27", 0x53}, {&(0x7f0000001240)="b4b28e0595cbe8c0601f53d7a3b6a0188153b6e15bed3d87c6eb8fc9e53e9fa8ff5d06a9652632bd8077e693e00cccf31da3062c5c7f1f81656f6c9f6ecef013b27b43b340994eff2f3d1b2e1b839892572114706b3aae60444af0237ede9d80450adb06dd4fac2502f717a5d50a47d0465c5afedeaf6a3054b02409291d0c48f4ee13a1e72ad59d488d4127cb99278975a54ee63cd1fac46bbb433edd13fabbb166f86ba5", 0xa5}, {&(0x7f0000001300)="7217321575ce2820723a169a3bf1eabaa5079865688b6f179d93a2b72d9da6580f34e7947b2aad4a5ccc02a36aa618aac673a600fc8ae1b11925da59b5c9c4b92ee6e1dcf1901b78cf579f274349022cc565c0f871540c49279962e45cadcc5fe1af77f3137019072a8b9696a0269188f621083510b4b058a41c5e1d8a959f15f5aa6d3fb8d839896be41f02d574c9d4cb7db6fabe1c8fd1799e1712f9a69e1a075b655222c7a816f8b28f96cd51af858ac27267cec0f194371311a7bb4b29d224dfa42c3f75f08b31a1870865830fe301e2", 0xd2}, {&(0x7f0000001400)="3d9c91b3ccddacbc4a3aa6e06cd7dd3f0c483de2dc964c6760a6650a6c184955eb355af33b13a404ac7fa1b583c13ac6fdf432862e30ab40b48896151c5b758935931a3cc56d3ef02a0d4144dee75ad5a09a5fdf24102d955b59fb8d1a73c6035f7e0f9694c1788148d39ae1c8395b7c296c3bfeae573e61d8ee9247820b510a88921bcc2d7dd99812cd507f9e850ca2ec60d3f7d1fdb4eab86f1bb95a0ecf8817c09844defce8a8676bf66b749e7ad6bbac673a76756e663230d737718967ca", 0xc0}], 0x4, &(0x7f0000001500)=[{0xd0, 0x0, 0x2, "4123ac750f2298be20d5569775c21afe968c04106d5dc886b82462b5120fa4dd99161d6fd872e8eef56d95f9d3f0beb3a98a6ade1ef0e8384aed2f9740905be876d08d8d30b935b9f93a2cdccca0154d0c46ac2f1ffab8258fd7e6b65fd6a3269b34ccee7d8c7b07ab7edfb20cc3eba5a74019637e3a3d62350dfbecda8a8d2dc1307fd006da7796c34bed5a5a61f268e81078e2e98f4df2c6f8586bf8a289cf413f5f2be8f3b5e57bfe497b0d3e552506176e77e41ea2f61afd"}], 0xd0}}, {{&(0x7f0000001600)=@caif=@dbg={0x25, 0x9, 0x7}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001680)="82cc73581703ed981204fe6799882a5190107e4fa0ee89fa35621c654681678ec112316912749b05b86dc68d14d02b372beb5fbd194e7bf7e541df9ad61252aec6f13dc850b3b277b9be37bbfba37d8323f7567291f2aafc1e1897e95e1c594bf43d0931ad12aacbcec77d8e460c7f02340ec89b2bf26163a36889d4083a1f61f96c0b0e12e234ed1d5ea9584dcbf2e0caf6d3fc7ba02f0e544517ad48bc5c29953be998168d69f4bd82b4a08caf67ca098530a390d1e7b509eeb0dbc56b9a900ad0db6d7eae826d1b62", 0xca}, {&(0x7f0000001780)="43809628013bcec946271cc01fcb6be43f2d58ffd0030ea219972a9585db2fc8897faac91cc2c2175fcc1562a96b4cd2a25bb1dccfc07c05ef20b6b24ee5cac321b7e3d7c311513f72d98e3271e32277c71e86ab", 0x54}, {&(0x7f0000001800)="c367f1e97844f8b127bf02b0615bf4faa36df1c471f36b74e553310326bd32e1c86a58038a010e0d17afaa657b1771dc4e5c559fd88cb508b9af8d35f23eb1b080617ac1bcb75c76e546c5c0b6eaa97dcf27e966783602f304b472b2330b463a2592bd2a73e59f74e46cfee5d95cfbc64f358fa9fc3ff7687922228a568d10d29207a4407bb10e9e656c1f123ba4e0c7322cabd8cd306aa3", 0x98}, {&(0x7f00000018c0)="619df943e44c1a3cc6d3fad7e825b29a32d19b2cc3e34f3b0f9dd597739f8f705c62c81689da10f2573cbad8f0fbbc26e4b7d6732aa9d6e585a72100e3db476932b68c08", 0x44}, {&(0x7f0000001940)="7930949ce6ce82e09d478c665ded3e366ff1bd8dc57b8d0f0f123e39b5793a50eabb77c2bfd6e86f20897f4e156dda03c61cd26cf9dd2c25097ebd9fb11900bbdb68a98f96628fe2a76bae8668ac7949898cab8f57f1d5", 0x57}, {&(0x7f00000019c0)="32ee7089df3bf468a3d7f44f91e4011d45708e519f0a5baf23d91ca3f74dd586d2e854bbf26b2ca1d33ec317c4", 0x2d}], 0x6, &(0x7f0000001a80)=[{0x48, 0x104, 0xe828, "1ac4d716254c7902ad496833fbf30bf6a54581ad00a2c43d04c258139a6dbbbeb7134f44d68ddadcf87aa04abeb1af15fd797066946fd6"}, {0x28, 0x0, 0x4, "939edca93ea6173c586e472ee43e91703b5236c4"}, {0xf8, 0x10c, 0x80000001, "bb1fa16f8ab713caa3085cc28d92431172b8e7309939510d821f4478ab391c71a81867d3db9cc0a38a5376331abf0da5371379077fc0616daadb432ea41616c81f59835cb787722e5ba2ae9bc267acd0d39a7f61c979cdd03e1215dc6905ea94833b6f036e9b9a003cda90591b128cb452f04340b0fbb9ca27d987fa6b17af6aada9e40951b890f3d4f41c8a4463fafd36e2c6e2f728e42f9e953eb3a86af534125bd17492cae2a314a47b609726319c96db48f273a8cfa186d51d3cb4a2992b9884325e80033ffec17ab58980b3807f6efdf9c2a6b5c34270b0a23dc36522c73085b6a1b9"}], 0x168}}], 0x4, 0x4000001) setsockopt$sock_timeval(r0, 0x1, 0x29, &(0x7f0000000140)={0x77359400}, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r9 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) ioctl(r9, 0x40084149, &(0x7f0000000000)) r10 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x1b6a, 0x118000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r10, 0x4008af23, &(0x7f00000001c0)={0x3, 0xfffffc00}) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r13 = dup(r12) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r13, 0x0) ioctl$SIOCAX25GETINFOOLD(r13, 0x89e9, &(0x7f0000000200)) [ 1124.354969][ T8153] ion_mmap: failure mapping buffer to userspace [ 1124.377903][ T8161] device lo entered promiscuous mode [ 1124.394295][ T8153] ion_mmap: failure mapping buffer to userspace [ 1124.418042][ T8161] ion_mmap: failure mapping buffer to userspace [ 1124.606295][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1124.612126][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1124.646522][ T8137] device lo left promiscuous mode 12:39:21 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:21 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:21 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:39:21 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r1, 0x40084149, &(0x7f0000000000)) 12:39:21 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084147, &(0x7f0000000280)="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") r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x30, r1, 0xde267000) 12:39:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x5, &(0x7f0000000000)) 12:39:21 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/L\x104i\xc5\x89q5\x00\x80\x04\n\x00\x00\x01\x00', 0x0, 0x151080) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:21 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x400000) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000080)=0x7f) [ 1125.057098][ T8641] dns_resolver: Unsupported server list version (0) 12:39:22 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)="a3664003520937fb8b153e84af067451c3c285ab4eddf07c68679d9e50eb001af0ca9276992d95cae1fe7212abe6df1e1b5def2102af34dd5e3ba79bcfc1b5a36facc09d8695") 12:39:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x40000012, r2, 0xffffe000) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="3b00000006000000000000000000000023e50400000000000000040000000000000012000000000000002f64762f736e642f70636d4323442363000097baf0e6d5e73ff4ab5fa1acebc4a4474370752b2e3ea5907f84132d085be5244f67e509b54828fdfdb4f893dd1d38604a1096be3646d61574a9d2e622605ed5737234d75bf01de0be57f337567728d3043ce2085c7822fa32aad2e5359c08ec6d3d73072a0debc8cd74e59b17315eabb1f3d1fa389dfc18575d48c7c77e823b9e"], 0x3b) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/sn_\x1apcmC#D#c\x00', 0x200000000002000, 0x8000) ioctl(r3, 0x40044104, &(0x7f0000000000)) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0x0, 0x4, 0x5eb}) 12:39:22 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) splice(r2, &(0x7f0000000040)=0x200, r3, &(0x7f00000000c0)=0x24a, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0xd) 12:39:22 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xb49440, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x1}) 12:39:22 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:22 executing program 4: ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x5, 0x5, 0x9}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000000)) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x40084149, &(0x7f0000000000)) 12:39:22 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={r4, 0x89}, &(0x7f0000000540)=0x8) r5 = socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="34d0fc1e4b94f79dafbf382814b0348435872d6224adfa6bf92c04e75f104f03aeadb7ce8c85babb322771dc9eb28f47d0e80b785be0d31926aaf9d253d0d9d09033680f7cff8eb6a15c3023af17511737ab1fc4", 0x54}, {&(0x7f0000000280)="2a2bd37f1445650a03c60bad1dbf57f988db33096f60e117062aa5f9636bf14b65e4a2754cb0b45773a7a373fce02c0087de32f134fed28457bf831bc7667e77871af382c578d8a31a9f6ea8a33847acfb8dbe9c9fc8f0febb498a841263a218a38904c31c92b784d2309211d491311aae09aa17c1ea037414436119c2d9062fc6e73ab4582c4d362fee85c731f012e1af", 0x91}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xd8, 0x4000}, 0x80) ioctl(r5, 0x40044105, &(0x7f00000000c0)="e3578801298a150f307033afef1fdbe499c7fa6df5cac9d45d4032e7f252ed9be423663017705eeef86b5441d44cc5a288d883ea2c98a8aceb130726b1625984598e0ce7633849fa6cf48ca9ffd0bc371ca4ab4e484be4c4b18042eb8ea28a23ced32dd19067b5695d88422a52527e09848e0b9b868fa3b9f95dd04629668aede8408dd127f66b45d98b0107dd0e8e7cba69eede88bbafcc3850d7b832d2123b423eb800d8c754a32085adf32b942bb67a8907db854634beba5caaa40f1236743c423cfe3d73a32fbc56d74e85a353ec50ec40591810b1bf6430") r6 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write(r6, &(0x7f0000000580)="79fd8892ebef1049b5ee8fa613f2fb3f7f8433f1670040f7853105cc3b6a2837552a5b78a63e2eadffaadfffd93b1359350f07cb83040946471f27fa557205b9a4b3e31af210fc35e4", 0x49) r7 = open(&(0x7f0000000000)='./file0\x00', 0x60800, 0xc0) ioctl$VIDIOC_G_EDID(r7, 0xc0285628, &(0x7f0000000080)={0x0, 0x4, 0x4, [], &(0x7f0000000040)=0xd3}) 12:39:22 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/\x00\x00\x00\x00snd/pcmC#D#c\x00', 0x1000, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:22 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x806000, 0x0) write$P9_RAUTH(r0, &(0x7f0000000440)={0x14, 0x67, 0x2, {0xd1, 0x4}}, 0x14) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000080)=0x9, 0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x7fff, 0x40183) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x800, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x7, 0x5}, 0x0, 0x0, &(0x7f0000000200)={0x1, 0x10, 0x8}, &(0x7f0000000280)=0x251, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x5}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r2, r3, 0x0, 0x5, &(0x7f0000000140)=':lo$\x00', r4}, 0x30) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) r8 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000440)={r9, 0x1, 0x2, @remote}, 0x10) r10 = socket(0x100000000011, 0x2, 0x0) bind(r10, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000000)={r11, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54f8c5c9000100000000", @ANYRES32=r11, @ANYBLOB="0000000000210300140014000000000000000000000000000000000020001a000400040004000a0004000a0004000c0c04008f0f0400000004000200"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl(r1, 0x40084149, &(0x7f0000000000)) [ 1125.831192][ T9167] ion_mmap: failure mapping buffer to userspace 12:39:22 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000000)=0x3) ioctl(r0, 0x20400440ff, &(0x7f0000000080)='\x00') [ 1125.888609][ T9171] ion_mmap: failure mapping buffer to userspace [ 1125.927435][ T9171] device lo entered promiscuous mode 12:39:22 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) fstat(r1, &(0x7f0000000000)) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 1125.965945][ T9170] device lo left promiscuous mode [ 1125.975328][ T9282] ion_mmap: failure mapping buffer to userspace 12:39:22 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 12:39:23 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/\x00\x00\x00\x00\x00\x00\x00\x03pc+\\L\xce#c\x00', 0x6, 0x903000) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:23 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) splice(r1, &(0x7f0000000040)=0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x9, 0x2) 12:39:23 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@getqdisc={0x2c, 0x26, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x6, 0xffe1}, {0xd, 0x9}, {0xfff2, 0xffe0}}, [{0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x40044103, &(0x7f0000000000)) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r5}, 0xc) fcntl$setownex(r3, 0xf, &(0x7f0000000000)={0x0, r5}) 12:39:23 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:23 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:23 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc0100) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r2}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, 0x2, 0x80000001}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000100)={0x80000001, r7, 0x10000, 0x6}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r8 = io_uring_setup(0x4a0, &(0x7f0000000000)) r9 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r8, r9, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:23 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x200004) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:23 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/der/snd/pcmC#D#c\x00', 0x3, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x16480, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x4000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x8) 12:39:23 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) 12:39:23 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x2c, @local, 0x4e23, 0x2, 'wrr\x00', 0x4, 0x1}, 0x2c) ioctl(r0, 0x40084149, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x160, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x817}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x68, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xad8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xec6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x2}, 0xc0c2) [ 1126.776635][T10141] ion_mmap: failure mapping buffer to userspace [ 1126.806685][T10152] ion_mmap: failure mapping buffer to userspace [ 1126.842045][T10214] ion_mmap: failure mapping buffer to userspace [ 1126.845875][T10152] ion_mmap: failure mapping buffer to userspace 12:39:23 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5437, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r6, 0x89e7, &(0x7f0000000400)={0x1}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) preadv(r3, &(0x7f0000001580)=[{&(0x7f0000000040)=""/250, 0xfa}, {&(0x7f0000000140)=""/141, 0x8d}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000001740)=""/4104, 0x1008}, {&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000001380), 0xffffff36}, {&(0x7f00000013c0)=""/48, 0x30}, {&(0x7f0000001400)=""/68, 0x44}, {&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f0000001500)=""/63, 0x3f}], 0xa, 0xe2) 12:39:23 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) clone3(&(0x7f0000000180)={0x80000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x0, 0x16, 0x0, &(0x7f0000000140)=""/62, 0x3e, &(0x7f0000000280)=""/4096}, 0x40) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x10401, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$radio(&(0x7f0000001980)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001a00)={@remote, 0x0}, &(0x7f0000001a40)=0x14) recvfrom$packet(r8, &(0x7f00000019c0)=""/61, 0x3d, 0x40006100, &(0x7f0000001a80)={0x11, 0x1a, r9, 0x1, 0x7, 0x6, @random="5db046acb705"}, 0x14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r12, 0x0) r13 = openat$vsock(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vsock\x00', 0x3c97ec9a6b8a7569, 0x0) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000001440)=@add_del={0x2, &(0x7f0000001400)='ip6tnl0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000012c0)={{{@in6=@local, @in6=@empty, 0x4e23, 0x0, 0x4e20, 0x2, 0xa, 0x80, 0x80, 0x3a, 0x0, 0xee00}, {0x7, 0x10001, 0xfffffffffffffffc, 0x10000, 0x1, 0x1, 0xfffffffffffff5f8, 0x1ffc00000000}, {0x7, 0x1, 0x5, 0x2}, 0x3f, 0x9, 0x4, 0x0, 0x2, 0xbd79ec1f6062e7c}, {{@in6=@remote, 0x4d5, 0x32}, 0xb332b58fc11982cb, @in=@broadcast, 0x3504, 0x0, 0x1, 0x98, 0x8, 0x80000001, 0x8}}, 0xe8) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000200)={0x0, 0x46461f7a, 0x1, 0xfff, 0x1, @stepwise={{0x6, 0x1}, {0xfffffffd, 0x401}, {0x2, 0x4}}}) kcmp(r1, r3, 0xc41ee05fa073f241, r4, r0) 12:39:23 executing program 3: ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="2b152dbef0f33748202d26c1c759d5a3d591a2b85288240cd6d1f4df774ad3c08c5918d1438dae464b5e5610c691a6c035c22cf15979dace6feb7203e3c729697a1d578ae092392bc60c99f5f9ccd5a1ae392f4513338fba1f647e6876112e79d88fb607875237591cc1fc43fca972271f8f0e0bee9424f7a125d9d45d365785d2b999f6f35f502509379f2a24e261633fa1499af77d4d978f8c3357d3696f20bf555e136dff60829aa2338ad781c800f0adc60c4c3d80bbc136ee40f6a06e29ce455bbe4d0f3517506afd2965100a276f932d4288cb415478ba1ad4352835a8d537278c115ade36ec81eedc") r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x140000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000140)={0x401, 0x8, 0x3, 0x100}) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 1126.965993][T10372] ion_mmap: failure mapping buffer to userspace 12:39:23 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) close(0xffffffffffffffff) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1127.090780][T10576] ion_mmap: failure mapping buffer to userspace 12:39:24 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:24 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000280)="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") 12:39:24 executing program 4: stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x4, &(0x7f0000000480)=[{&(0x7f0000000080)="feda5febee186102324059580a42f41b3c48fe7faabf0ac5bbb1f249a4ecefddf874e67011e285984a9459f6e9a1161365f5a4ff658dc433f7d2bf50301017d5430234f1eca7df8df73a6542d767ae9d4324f71f7008", 0x56, 0xcdd}, {&(0x7f0000000100)="4f5c4e41eb80cec94cba4dba0b0e334078d8ad3fd7a41018a5e19b99508dcaffdd8cb2374bf073c705d77d7ecd9384b6ec8a2ac1308397d31c84f811150a07588dba3e5f66ccde6bd84479c48b7ea28409cc49fdcbd04b6ae96594ded2cb7d0a6fd136d2e6da35fc8dc02ae32f7c3c69e7f7d698ee7a04387a9dd3d967d05f8ed08ae612b172fef21a74512b7ea374dc02cee372a56743e91c444aff82a16c42dfd2c96731372d42e9b593e4c9352660475d7b96fb5f01a060b2142287d8e38f7f49608b3ab18371c28f76a131c055c68dbb2836818977cc4e91dabd6131e66568", 0xe1, 0x1}, {&(0x7f0000000280)="5e40d14915df6a769069d79ff0bd7e84b486ac7bc22bbb416d12d30aec8b1913593c26afdfcf4f3dabd6a871543782286b21d8e205fcf3d4d8581db9227e6195694dd2de00cd8b6d4ad7a8654d5970b79fd4f9fefadff2bad93fbcf2042067175cdb623baef6ad8b0fb81cdbd361af48c8c71bbae5a0ccc1ffeced8073f87f61dca62093269b3744b13570dc9d2c599730d123650736f4b15788e9d3eae4d87913edfd102e5854e318285fba0146091c881f344b4d4c9501b02a08c249f7c1b4e1c990efc661263d90ce4c150c0d582d4a58bfd5f6155817c9cdee89d7b2739b7a4177a61f5f40363995093acfc0e672444d13c560", 0xf5, 0x8000}, {&(0x7f0000000380)="0a7368e89cac1121de52a5c50d81efe1a3d8ed03d27dcbe3366850f055c5b851c0b1c40edfb6bdb647f88a6c917dcaf751d4c44c85ca9ccfac47b19147b954d9d0cdbcc518c1831b0f58ca7d588346e7b15868289d02ee17a2ce6f7fc8940c2ce767f20417d065a87c35dfd15f2dfbecfafe50b321f79990d8fce75df9075ca12bfb03168226c919e0459aac2cc4248311254378407020f19a15d0636dbccd10f35f6eae50f0f88bede13c82491a5782b7f5fd0cfe121a35b0e19d5787c587dfb2e26101e4c0caefd19fcef928d3939561ab1a75a762bb446c960ec7a132f0410ae6ee743bef52327e3f0e9f66dd04dcebed384e1adf", 0xf6, 0x7}], 0xac80feacfc88f8c7, &(0x7f0000000580)={[{@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x83d3}}, {@user_xattr='user_xattr'}], [{@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@subj_user={'subj_user', 0x3d, '-}GPL'}}, {@fowner_gt={'fowner>', r0}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@permit_directio='permit_directio'}]}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x40084149, &(0x7f0000000000)) socket$inet6(0xa, 0x553e1df1a96d6913, 0x81) 12:39:24 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x1000000000, 0x23b2cce5a286bde) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0xc8a00, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:24 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000080)="9797436fb674f0d547af45a447d30939f8f01b0de9b798e01af96a2f2a3cf1f04a2b759ae331fa6181ab71d31b8d42399aa8d5d6f09a65ebb22fcbedfdbf3f8ece6ffbfe65ccbd19e19d5ecbdaf878e0d973d633c3e1645b8f2bee91e3263c5312a5ffb0b6583ec53a2a919458ebdcb5902348e235043c842e4ba9e158") setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x3da1, 0x4) 12:39:24 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x8000) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000040)) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:24 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r5}, 0xc) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={[], 0x3ff, 0x3, 0xffffffff, 0x100000001, 0x5, r5}) [ 1127.992591][T11495] ion_mmap: failure mapping buffer to userspace [ 1128.075386][T11628] ion_mmap: failure mapping buffer to userspace 12:39:26 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80000) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x772b60, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1}) eventfd2(0x101, 0x80000) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'veth0_to_bond\x00', 0x1}, 0x18) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x3, 0x4, 0x2051, 0x200, 0x4, 0xdc, 0x5, 0x8, 0x2006, 0x9, 0xc2, 0x8e1}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x140) 12:39:26 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x0, 0x101, 0xffffffffffffb289, &(0x7f00000000c0)=0x6}) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, 0x0, 0x0) r7 = dup3(r6, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x7, 0xd000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) dup3(r4, r5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:26 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x202000, 0x0) tee(r0, r1, 0x1, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r2, 0x40084149, &(0x7f0000000040)="6faf5f661450fecee753dbac8b999d6ed59a0146fccc7a8e1950eae3cb96f18ed7d570cf3da8a89a4b659474c3c483362d0636f33180ba5c594ca64fde9aae1c") 12:39:26 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r10, 0x6, 0x0, 0x0) pwritev(r10, &(0x7f00000001c0)=[{&(0x7f0000000380)="9702a1019e44c541d9be07cf2ad657b37bddca91fa3139918d2abdf7000e1899caee42efa0c8f3f88c5fcdc62202bf7bb2190b331587f805043ec2796a0c9e238873e3fc9e1bd229ec69401835bc314cd31bda86cf491d59c995246d6b9d1ffbfdb758e4ee8d4986e084aaf385a2e3a8f383f8cbae091957f8473bc798dcccd7da9a584366dd758db0ef2db08fa2de6ddb5dc2c68d890f26727a477621311b83", 0xa0}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000100)="a1dcb7a927f2cfee56acd365cd96a8dc826c3c4cce4ed7bda862554d9f483e48b980ef22c08333d20e206dd7760f00fad091ba05c6e79b491b126fce898c7d436f9e770b9c315bf1e8130aec99cac41d3997", 0x52}], 0x3, 0x1f) r11 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r11, 0x0) dup(r2) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000300)=""/121) ioctl(r1, 0x40044102, &(0x7f0000000080)="d557c8b901bf427c8c926d490f09592ace23cc76ecc519ba3141c918b8b1e158e93d609f541a688976d90dfd252acb1fb2f32875aeed74c97b307cce954f16b27b06efbb2dceef000000") 12:39:26 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000300)={r7, @in6={{0xa, 0x4e23, 0x7, @remote, 0x3}}}, 0x84) r8 = accept4$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80c00) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@empty, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r9, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x5, 0x6, 0x80000001}}, 0x28) 12:39:26 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:27 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 1130.070296][T11747] ion_mmap: failure mapping buffer to userspace [ 1130.085178][T11753] ion_mmap: failure mapping buffer to userspace [ 1130.091344][T11747] ion_mmap: failure mapping buffer to userspace [ 1130.148943][T11813] ion_mmap: failure mapping buffer to userspace 12:39:27 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:27 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/rnd/pcMC\'D#c\x00', 0x0, 0x20044) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@srh={0x14, 0x2, 0x4, 0x1, 0x3, 0x1c, 0x86c, [@local]}, 0x18) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:27 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x5cca41, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = clone3(&(0x7f00000004c0)={0x1000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), 0xe, 0x0, &(0x7f00000002c0)=""/207, 0xcf, &(0x7f00000003c0)=""/229}, 0x40) sched_getattr(r2, &(0x7f0000000500)={0x30}, 0x30, 0x0) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r1, r3, 0x0) epoll_create1(0x180000) read$usbfs(r0, &(0x7f00000000c0)=""/203, 0xcb) mq_unlink(&(0x7f0000000080)='trusted\'eth1md5sum\x00') socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1130.320272][T12258] ion_mmap: failure mapping buffer to userspace 12:39:27 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000000)) ioctl(r0, 0x1000, &(0x7f0000000000)) 12:39:27 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffb, 0x20000) ioctl(r0, 0x1, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1800) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000040)={0x5, 0x1f, 0x3, 'queue1\x00', 0x1}) 12:39:27 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:27 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) getuid() ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f00000000c0)=0x7f, 0x4) [ 1130.513579][T12644] ion_mmap: failure mapping buffer to userspace [ 1130.522624][T12644] ion_mmap: failure mapping buffer to userspace [ 1130.538009][T12640] ion_mmap: failure mapping buffer to userspace [ 1130.608586][T12741] ion_mmap: failure mapping buffer to userspace 12:39:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x10000, 0x0) accept4$tipc(r4, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r5}, 0xc) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r7}, 0xc) perf_event_open(0x0, r7, 0x40000008, 0xffffffffffffffff, 0xa) io_setup(0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000100)={0x2c, @loopback, 0x4e21, 0x3, 'fo\x00', 0x4, 0x7, 0x4c}, 0x2c) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r8 = io_uring_setup(0x4a0, &(0x7f0000000000)) r9 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r8, r9, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:27 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) getsockopt$inet_dccp_int(r0, 0x21, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:39:27 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000000)={0x29, @multicast1, 0x4e22, 0x4, 'nq\x00', 0x20, 0x0, 0x78}, 0x2c) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) getsockname(r6, &(0x7f00000000c0)=@nl=@proc, &(0x7f0000000040)=0x80) [ 1130.713367][T13124] ion_mmap: failure mapping buffer to userspace 12:39:27 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xdd03000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:27 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r5}, 0x8) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r5, 0xa2}, 0x8) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:27 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='r\rG{\x0el\xde\xc5\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @empty, 0x73d33ba0}}, 0x101, 0xffc1, 0x400, 0x1000, 0x5}, &(0x7f0000000000)=0x98) [ 1130.887378][T13144] ion_mmap: failure mapping buffer to userspace [ 1130.924820][T13144] ion_mmap: failure mapping buffer to userspace 12:39:27 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000001c00)=0x0) ptrace$getenv(0x4201, r7, 0x9, &(0x7f0000001c40)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000001bc0)=0x1e) sendmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000000)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="4a8c49b3b077b4523b10d7763857d2cde101f773e4a51d31be8e29e988248493b339", 0x22}, {&(0x7f00000000c0)="300e801e55adfc652b894a9951bd893a0a566f8524c1fec4e6ae387865592ca896592f21efc70394ad736ea3aa", 0x2d}], 0x2, &(0x7f0000000280)=[{0x60, 0x111, 0x9, "01862c27eacc277a96c7b7591a71b8b23c0e801419eb163fbe9d08541c033fb8d6a566406c3d05c735ef98c0ac213cf7e85255b57d0e231279e7aed92efa72d1734b55450fe22c6a49cd7c19"}, {0xf8, 0x11, 0x7, "17352e4f4927ac29fdc329ceb349296056657d1f64145ffb61d278e466b4d912b8e4265d4400175b581383fcef11278465f7b65efd879c1899b3d7a68f2dd1db774b0c2ca15719b6684094ef6e13699e873776cbbf81fab75403a65455343731af7fda1c465a51b7d4834b195a62f11275ffbdd33b003fe797fa22f03bd02398aae6f62d08c9db3f409e6cb6dd34916c737b401078e338194a314688ebcce6e8f78164916408cd2c9684c1e525957ae639c456989c2d487926961ab3da60a14b98185e78b78a4f4ff0d36e8413dfd9d33bfad03a81af61b5d222f92d587d600b4a"}, {0x78, 0x0, 0x80000001, "30d37a8a6dcaf3ba1438aa1074e7560563a7e1179f7268bf0434b40a37f04bf7401b3bab8c7f3d78b7b75b579b0c28f357dc7be4532913e100df428a7c15a3f1f5124d28a8ca34c6908add8ba50d77d12b46bc2dac839ade0c376656149d57d69b89686c69ff1a21"}, {0x110, 0xe840a3e114473cde, 0x2, "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"}], 0x2e0}}, {{&(0x7f0000000140)=@nl=@unspec, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="1a94f443721fa54898b1d93eba373df00f5d354a2b385790c5998db8592c8825800fa00dae4cad5e1bc2b89aca2f0b01aac8c822ad9a82c19053763fcf241f6daaae48da1c369ee4de4affbe7164a118811807c160105590a9cb563251e3a4ca4fe615a3f24123275db30a3fc4dd8f3135c31436371e35c143d9f493a29accf9df0dcb27b478e774b2e20b4057460dc6314aa61e56b3cc30b58fd6192871", 0x9e}, {&(0x7f0000001640)="269904e96adb3241dd8db0c2806eb4dce755be5212345e7566c9889b45c21888dc98aff8d9c0fd649514297b9960a85af0fb0652c4d497bb9816cb5d1e926a9e9a455c2eb9240d01ce06ed23a06526e085825f70d64673ec42bd8428b1a155e1ce9cb2f8ffb5e9900441155da15a292e7f3f9871ef847e4574d30db9cc47728b42868feb2977f85c6570b8b1c82b67b0ec6ee9bbd383f9d91b5d7488429be04bf84d517465021fcd0ffedd6fcaa1dd41ab366d437191b453a95d85b6169b65547cfd4f4f", 0xc4}], 0x3, &(0x7f0000001740)=[{0x50, 0x113, 0x6, "0b61bd2110a91c12014a9726cc1228d7e82973842dbe76acd609b6009c9c02c14bbbf630f5484cbf78a7d4394d3bfb796a040dd94acd9240c23b250f4aaf6e"}], 0x50}}, {{&(0x7f00000017c0)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000001840)=[{0xc8, 0x96, 0x1, "9e801d8829d1d6e9225f7925342d21b0b340448aa86a5ac87e43fb8049ace977fba8c25c99d944a9cebe5970a30be159cec1d0915982631343bea2270a622699666fccea823ca10975f503afee92f6080a823bc4cdca53932f009f1a135eceb9303bd68f5f7dfd4f69eabe7c3769bb7236eea98ce9b92a652de817bdf307abc28ac62988a7bc4b46670c9b761eaa1638f9b39fe1d0c34fa6f8a52cec2d1254e5db24f831a88ea27c4e27f897a49a6925f4b026ec9f80"}, {0x18, 0x10f, 0xf1e, "e58edde4c7cf9c"}, {0x48, 0x109, 0xfffffffa, "710c2198140f67c93f0735381feb518081e08109c64bfb400fa00304d37365f7f81e3c8337bfd10c5af7602e2ed3d130fe8dd1"}, {0x98, 0x118, 0x101, "645c13b476d221f994e9090905719356be06e0c19206df40436234c510aba09c1c963ddabdf83af3d04c66d155d4149466f13dfc2a0f1bc1b97400c0dec29d850f903d700f6219a31414727c8b69f2110a41b79550b32951bb68409c56e333d645480e01917e4760d661973ab1ce60981067ff9f393aa1e4046592ed4919b152ffa019b0b71fbd63"}, {0xe0, 0x6, 0x7, "9c6b036d2e6e880d5d4d322c985d33c85cb27b2b97c33881dc145c61f4977e53d424aa46c044f6376246621689336a3bb738081933db87a66ec269ea89919a16b1188356361f10e651097fcf46b864a858c8ab7c4b79bab7bc760dbbd40f01fab969f87a68b519581a6f080367200c2b77f7d5d7e1c71a9eb54a5f75b2b337d2ebe8ff000c2fcb060cf3bc38bb52f3671b136af37af501399be184fdba2408750e354249f7ceb8e6d4764e7339e16ca7e42c5005f9ac85b72b9f41fb4bc756e67960cf89884dd135c426"}], 0x2a0}}], 0x3, 0x10) 12:39:27 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x3, 0xffffffff, &(0x7f0000000080)=0x1fffc00000000000}) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r3, 0x9f, 0x9, 0x3, 0xff}) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r4, r5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x3, 0x2], 0x830a) 12:39:27 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x8800) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xcf2, 0x8000) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 1131.068156][T13517] ion_mmap: failure mapping buffer to userspace 12:39:28 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/sn \x00pcm#c\x10\x00', 0x0, 0x200) ioctl(r0, 0x40084148, &(0x7f0000000000)) 12:39:28 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x04', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 1131.149532][T13517] ion_mmap: failure mapping buffer to userspace [ 1131.203114][T13572] ion_mmap: failure mapping buffer to userspace 12:39:28 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev\x00\x02nd/pcmC#D#\xe3\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)) flistxattr(r0, &(0x7f00000000c0)=""/128, 0x80) 12:39:28 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x40044103, &(0x7f0000000000)) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0), 0x608840, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000000)={[{0x1, 0x81, 0x5, 0x9, 0x4f, 0x5, 0x21, 0x0, 0x3, 0x4, 0x4, 0x33, 0x10000}, {0x4, 0x8, 0x2, 0x2, 0x4, 0x0, 0x9, 0x1f, 0x6, 0x2, 0x1, 0x3, 0x7fffffff}, {0x8000, 0x42, 0x1, 0x8, 0x7, 0x8, 0x1, 0x7f, 0x4, 0xfd, 0x9, 0x9, 0x7}], 0x20}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000280)={0x401, 0x0, [], {0x0, @reserved}}) 12:39:28 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x3, @rand_addr="a2d8f606d1b7c45758c3bd8cc7dfbac0", 0x9}, {0xa, 0x4e20, 0x40, @loopback, 0x1}, 0x4, [0x6654, 0x1, 0xaa8, 0x2, 0x67, 0x498, 0x2, 0x200]}, 0x5c) 12:39:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7bc85c45b46a0cc9, 0x3, 0x4, "aba8c41a4a4603c38f6030d09d30c46763c243f1ef46ce42db4e7e435dba10c5ccd3035b888d6237cce3b62d34cc273f6c15f61277fd97314cdd2c3fe76cb494", "71322a6361c3838988354badf55e19bf08f3a733c5a06e9bc528c2600e2b4fb0", [0x20]}) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r3, r4, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1131.547903][T14098] ion_mmap: failure mapping buffer to userspace [ 1131.629438][T14167] ion_mmap: failure mapping buffer to userspace 12:39:28 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:28 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, r1) request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='ppp0system\x00', r1) 12:39:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_setup(0x4a0, &(0x7f0000000000)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x804010}, 0xc) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:28 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3, 0x1) ioctl$TUNSETOWNER(r5, 0x400454cc, 0xee01) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0xb, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) setsockopt$ax25_int(r7, 0x101, 0x6, &(0x7f0000000000)=0x10000, 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) socketpair(0x5, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000000280)={{0xe8, @empty, 0x4e20, 0x4, 'rr\x00', 0x2, 0x0, 0x1}, {@remote, 0x4e24, 0x2000, 0x800, 0x1, 0x6}}, 0x44) ioctl(r0, 0x40044103, &(0x7f0000000000)) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r11, 0x0) ioctl$VT_GETMODE(r11, 0x5601, &(0x7f0000000200)) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x443601, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x401, @empty, 0xffffffff}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @rand_addr=0xa7}, @in6={0xa, 0x4e20, 0x1, @empty, 0x3}], 0x68) 12:39:28 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x202002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x94, 0x88, &(0x7f00000000c0)="bd3ebf25ec0e740a9f0bfe562ac7cf40b93506228bd0ba529c6b5e2796dfb9e816887573974fa066dc338a5ba49889c45f5afc19ab8451e9f3e185ff4f27a2def67f73535d088523c38abab1c2a05c1234827d37669d34bf9eb2371654e2d92130b2e9203009494ac41506e3bf45c25bb53052140a74005878be9a95501d231d1c78121bf9922a19b1685ffea1dd9fa4bb5d5203", &(0x7f0000000180)=""/136, 0x5, 0x0, 0xd3, 0x58, &(0x7f0000000280)="81dd5439b87294359f444f86caea5122c5d110debbda7fffbdf36d69a757eff68f9cfc2beae749a3dbe9548f904777590c7ad78be3487c8cce887853ffded49cd52a3acfa91ef0d85b882863dbb7e8ad68aa224f288c9102b0efd4b71f97074895cced725107f4180973924e1546f6b1fd54a5606404c63317faf04c3c64ce193b7b383b844a40514fcf65bfbba685e449bb77e3a5a9735f57bba2c51426e2b3f9faaeaef9bef1d171f5436f41be623630fa43e8553e813483dc4aa948038cdec7607a0420e9c4e5108bff091ac2595ed32ba1", &(0x7f0000000380)="aabfcb84514059231d976aaafbf788a3bc633db19554eec90b904d7a8412fc4703a6b3a2ae74f223db1bf37f1682b1693d1395363f5de95b73f5bbce87b4b53814e7282db1153a85bbf6f2a9b7a13e55b02debc6cacd87e7"}, 0x40) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r1, 0x40084149, &(0x7f0000000000)) [ 1131.982781][T14561] x86/PAT: syz-executor.3:14561 map pfn RAM range req write-combining for [mem 0x5d9f0000-0x5d9f1fff], got write-back [ 1131.996569][T14519] ion_mmap: failure mapping buffer to userspace [ 1132.001915][T14561] ion_mmap: failure mapping buffer to userspace [ 1132.030954][T14561] ion_mmap: failure mapping buffer to userspace 12:39:29 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x29}) 12:39:29 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'lapb0\x00', {0x2, 0x4e21, @loopback}}) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) accept4(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80, 0xc3c335f6cbe67435) 12:39:29 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x101080) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 1132.212139][T14845] ion_mmap: failure mapping buffer to userspace 12:39:29 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:29 executing program 0: lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x37, 0x0, 0x7, "273b15ab6cfe3805d20a4c101ee53d43", "542e17a3e43985c271778ecc7d1b0c4b5f89bb69743745f29ad9b24b3fc79998889a"}, 0x37, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x2000, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_setup(0x4a0, &(0x7f0000000000)) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) dup3(r2, r1, 0x80000) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:29 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x800, 0x40000) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}) 12:39:29 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) ioctl(r0, 0x80000001, &(0x7f0000000000)="0f7527c263a8bde9ee6181014db21a43969df28ccac68764553722ee633d7637d54aad6fdc7808775c7e4d4092b6edfd1e96e77d84df8d5fda58037360356977a8b69e88ccf6e9be7e91bdeca316c1ee4e880de91f9273e5ee2bb39e6a04f3d9b7901d7999f711ed12ade6f35330746e33af90567e5cd7c6dbe907d8e7d8155bb283563cc1") 12:39:29 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:29 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:29 executing program 5: r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0xf603fe7a92321524, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x800, 0x4) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r2, 0x40084149, &(0x7f0000000000)) 12:39:29 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4006, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="ba543a6fdd76e4d12ffad02da77f7ccc843b3fb4cc7380089651fd52c29469a9905caa815ffdcaf5bcd7cd850825a9443eb5295e97376d245f9494585637b164a959d843ea6de35b7f54435ffd4b030aaf61d84d4ae90fb60dccd8a731d2a1bfd07e840791e705974f7b7c90426e9ab1f001cb720f1a8b5a758b7052089c922134c492757df22f27f6a98fca24fc4e4f9a8f2cc43df305471b232f07f7f57138e6e9f4b0263406a4da51eb0210538bf5b076bd8bcc8aa4e7", 0xb8}, {&(0x7f0000000100)="809b6432d905fc874768aa347c4954197098b7b6ca0086971ca25e7f738adddf3666d49ab960acae0339d6d66dc345a706ad1c6a77cf09cae6ef37b2130dfe781a199a2d212abf8790c6b8d1cdcfc65186d4c4eb04bb38ea3c8fd08cc05d3a06eb5dea96949561c498eacdfb2955dd9fe8665b839ae397d9849f852807bc1a4062b50800c2809e8a5f4f7658dc499b345048be7bee1d863e0982a980d681c33a", 0xa0}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="046e4c5df833c0f631a6a3e7bfcd4a9f2794d16d00cca3880801821d7c912e7909b8a9ee8b0d23322597551c3b802f1527fcb0c0fcbc5dacff20e5139e7514ac4abd11d39caec10ee59fbe2d3f7b938ff543a1d2c9c930d3b872115b294d154e809756f0503ba85e4ac16cc65b6fdcbdf17ba4c46d2e39c3916208850dc95a378d", 0x81}, {&(0x7f0000001340)="d9bb3f2e661cd37658c86da205338d0e0f21a77622e34a964ea4cf0c7f22c846275d58aa1d9709bbde0aa5e0de63461a5ad214763f3822249e3dea285edc50360b713fa1ea7e5b31ab205177eb34d79bff2bb274f84e079539fea8dad326f1c6dda8c3bbe7d4a6e9fa7cf1851f7168ceddf6c88b95433b6b963dfb0e9a7c87ced726c47611fb007a7e51283a939fe9b56feebedb4e0194d20a2fab5151fb4e6c3838e0b63c3b26adc149b3090cbad31d0db3b6b706f0b8e8f476437b614dae030b62cd9a47146f1308f5958ed2a014c4b86efdee618355a7e990fa0baef3590b72bb53b6d100af1ad2a9ba21f66a7b5f3021ade8533a998e", 0xf8}, {&(0x7f0000001440)="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", 0xff}], 0x6, 0x4) 12:39:29 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) io_setup(0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000002c0)="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") r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r2, r3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:29 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='\x0fmC#D+c\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x9b85, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:29 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) accept4$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x800) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) ioctl(r3, 0x0, &(0x7f0000000480)="1deb876b12d12fcfeb56a8b80384539b348406b21609aedd67c9c9af2dc6eee4b34545eebe3d9ff844c1196265493bf088657fc7c195bb7333348c20081fc200839c696b105bc9df2c03285b5f63065bd3117cdd9a5d2ffb794c0b7da4c633033eebbbf6ac766b19de5ff4b7589756a699f61e99733f676dea116194166881663bfd9e85a41e8ccfa2b862d1ad40d4a75930b02d8a40ffa1000000000000008a6b9fa30d9f964324d408e390d49555617ac1e45c1477ffbdf344b00b4222d97a3064cb6644e91b8f76b9e61d4f4e62cf119a3d89fe76de99") 12:39:29 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0xffffffffffffffff) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='/dev/snd/pcmC#D#c\x00') fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:29 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x410802) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 1133.098242][T16083] ion_mmap: failure mapping buffer to userspace 12:39:30 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={r7, 0x70, "916b89d8fb3b8888994d62281404793907d676582e34abbd5ee71c2f07ffe90094c1b7ce4776dc000b03bafa69d87732495d2f5445a17ddda5cd10ba437ef0b7a9536fdaec15a2f2f10725c4f020034ea3aa8d39c36f3d40e4a8c485b71e404f217242a84f9600a05348b46dc52ff791"}, &(0x7f0000000100)=0x78) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r8, 0x6d37, 0x40}, 0xc) 12:39:30 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0xf86009cd0c2141ed) ioctl(r0, 0x40044103, &(0x7f0000000000)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0x9, 0x4) 12:39:30 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000810}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x0, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x0, 0x6, 0x41b4821}, @IPVS_DEST_ATTR_PERSIST_CONNS, @IPVS_DEST_ATTR_U_THRESH={0x0, 0x5, 0x80}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0x85}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x801}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x0, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x7, 0x8, 0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4014800) ioctl(r0, 0x40084149, &(0x7f0000000000)) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r3, 0x10000000) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) [ 1133.290726][T16207] ion_mmap: failure mapping buffer to userspace [ 1133.429024][ T26] audit: type=1326 audit(1573216770.313:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16345 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0x0 12:39:30 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:30 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) ioctl(r0, 0x1d, &(0x7f00000000c0)="1d88e74bf48a7804487c56c097015b707a3806d4d3525800000000a85647c5a94ce6bff6645ef6e145a7c54a6dc2add424d51eedfcc162f3434b5799291083d0d3b98c71a3533e20a85000c0715a140469553e29eec10187dcb6c0cb452d00000000000000") 12:39:30 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x100000001, 0x200002) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f00000000c0)={{0x1, @name="8a0f2f428f71a2fa3ffabc1bc909e1fb9bb330d30ebadddf8445a0ae01b5ef12"}, 0x8, 0x9, 0x3f}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:30 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L+', 0xff}, 0x28, 0x1) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r2 = dup(r1) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0x7) 12:39:30 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) ioctl(r0, 0x400002000800000, &(0x7f00000000c0)="b60700000000000000") 12:39:30 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) io_uring_setup(0x4a0, &(0x7f0000000000)) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) dup3(r1, r0, 0x80000) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:31 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000000)={0x3, "18ac81b673f43629889b3b78d4e5e6d27139708cc01a75744a40b16795072b95", 0x4, 0x1}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x40084149, &(0x7f0000000000)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_destroy(r5) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x7, 0x2, 0x6, 0xff, 0xb19b, 0x401, 0x30, 0xa}}) [ 1134.235812][T17085] ion_mmap: failure mapping buffer to userspace 12:39:31 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) read$rfkill(r2, &(0x7f00000000c0), 0x8) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000100)) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0xa923, 0x4, 0x0, r5}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r7, 0x80045700, &(0x7f0000000040)) r8 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x2f, 0x0) ioctl(r8, 0x40084149, &(0x7f0000000000)) 12:39:31 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000580)={'nr\x0fjc\x00\xff\x03\x00\x00\x00 \x00', 0x10001}) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000700)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20040801) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0xc000) ioctl(r0, 0x40044104, &(0x7f0000000000)) [ 1134.419900][T17411] ion_mmap: failure mapping buffer to userspace [ 1134.432437][T17414] ion_mmap: failure mapping buffer to userspace 12:39:31 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) io_uring_setup(0x4a0, &(0x7f0000000000)) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = socket$rxrpc(0x21, 0x2, 0x2) dup3(r1, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:31 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) [ 1134.461823][T17411] ion_mmap: failure mapping buffer to userspace [ 1134.491937][T17424] ion_mmap: failure mapping buffer to userspace 12:39:31 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/d\xff\x01\x00mC#\x04#c\x00', 0x0, 0x181b80) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000000c0)={0x9, 0xbae, 0x101, 0x5, 0x7, 0x1}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f0000000380), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="e80100001e00000025bd7000ffdbdf2507000000c07ff09b1d60bf81c256844be94e114d92fb74e77daa7cd0a098e583e03b48302da76faa08000000990ca8eafe8571f3c481d1ced88d19651ae42291be80e35282e3643d2175f701816c1196c797761367f6ef", @ANYRES32=r6, @ANYBLOB="8002020080000000080025000100000008002e00040000001800120008000100707070000c00020008000100", @ANYRES32, @ANYBLOB="08001c00", @ANYRES32=r4, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x880}, 0x4000) r8 = dup(r7) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x4, 0x40, 0x80, 0x6, 0x9}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0xfffff000) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) write$FUSE_STATFS(r0, &(0x7f00000001c0)={0x60, 0x0, 0x5, {{0x850, 0x8, 0x4, 0xffc0000000000000, 0x7f, 0x1, 0x5, 0x3}}}, 0x60) [ 1134.597698][T17506] ion_mmap: failure mapping buffer to userspace [ 1134.630723][T17572] ion_mmap: failure mapping buffer to userspace 12:39:31 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:31 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8000, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x7, 0x1, 0x2, 0xfffff551, 0xb, 0x1, 0x5, 0x81, 0x3, 0xfffffffd, 0x8, 0x4}) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f00000000c0)="6b65a4e08cfe149e8c68a7e742ccf22e7750400a74973b3f754972c35b3487776542a040678d912d426b5970ce1b2aab8933bca7430107fa43") 12:39:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000280)={0x7, 0x1, [{0x2, 0x0, 0x73c9}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x1ff}, {0x3b72, 0x0, 0x1}, {0x2, 0x0, 0x90e5}, {0x10001, 0x0, 0x3ff}, {0x800, 0x0, 0x54}]}) r3 = accept(r2, &(0x7f0000000000)=@ethernet={0x0, @link_local}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x59, "8cd55961754076b325f4b92012a22163a8cfe5d8ef6278e51b38220f362b84851b6f5c7da9647de75858bcfeb0f640a605ba9f96fa84f1f691459dcd2699084722fdf849afe3e5df681f90ffff2c5ca5119ea72278ce53fd6e"}, &(0x7f0000000140)=0x61) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x2, 0x10, 0x9, 0x101}, &(0x7f00000001c0)=0x18) r5 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r5, 0x40044104, &(0x7f0000000000)) 12:39:31 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r2}, 0xc) sched_setscheduler(r2, 0x1, &(0x7f0000000000)) 12:39:31 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = dup3(r0, r1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/pid_for_children\x00') socket$can_raw(0x1d, 0x3, 0x1) ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000080)="e115afb3013a90ed163d0fc937667e84c9040d09276f008000001a2b67328b645d036c26ccb3529a50f5823c93ec5d235eb02db2bf2c7fe116a0285f73550d4385964bb0f89b78fa8e9d091f1b554b") openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000200)={0x0, {0x8001, 0x2}}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) write$9p(r6, &(0x7f0000000140)="e81b6cc4cdf08cf46a0b913fd1e34dd5a3413d2ded7a21c0bb07cafbeca36d55cf3bf8731cf1ecfae8de64fc229e2a551a8660a6a556b74eb03f029db7557916ad977046a9dc760e425cf9fa86e124c68a552170e44f7fc909853fa943bcd690bf025760de43db7419569d0487f9ed98c0ae76cbb3", 0x75) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:31 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)="ed57687f7f912177d770202d2e0f7652309283fcb842b95b0000dba8ec35b915174d95a021e642828707c8ad9b4024077bfb2ec27b84b9a7a86bddbdd45bdcb5fcd7c63175ec922c9cdf6c43c4c6c27d550ab587d52e6a9a4a76effa1e2dbde1b77905853a65100bfc2c2cdc2dcc7af47923960bead48db843a1e353cc2e1ae426de4be36a428e692fd696ff010000000000007983cce0c896563ff42e2052268d") [ 1134.863522][T18050] ion_mmap: failure mapping buffer to userspace [ 1134.932853][T18056] ion_mmap: failure mapping buffer to userspace [ 1134.994418][T18056] ion_mmap: failure mapping buffer to userspace 12:39:31 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:32 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) dup2(r0, r1) 12:39:32 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400302) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x5f15, 0x7d5, 0xff, 0x7, 0x5, 0x6}) fsetxattr$security_evm(r1, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "e37d03abd8103cd4eab5b4a5f322574d2e1d383c"}, 0x15, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@buf={0x5d, &(0x7f0000000180)="cab4a14a7700ba766c4d4222a016f6a4e9b373e19604ed67215c5503c62f0f9d7a28c4b427d393424cd8951ea88cf9e9543b1876a9bc145a89c35e3a6be39a08fe86fe9ea58c9349502db1984fa6878f7e799cbc49c6df9e0ae15605be"}) ioctl(r1, 0x40044103, &(0x7f0000000000)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x80000001, 0x4) 12:39:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x536a2edd453f32f9}) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r3, r4, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000440)='./file0\x00') mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x1) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000080)=@netrom={'\x00', 0x0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1135.290674][T18482] ion_mmap: failure mapping buffer to userspace 12:39:32 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x4, 0x4) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/249) 12:39:32 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/30, 0xc}, {&(0x7f0000000040)=""/101, 0x65}], 0x2, 0x3) ioctl(0xffffffffffffffff, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) sendmsg$kcm(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000280)="17cf3475c7ed537a8ef9863d980cf91512c2d17e50da0f7937ea0de8bbccdd156540ad390932a67a74d00706734060b0fad91590714f38d6051661a3bcfee423d667de9ad2feb46a9f9dfbd95aeb15bed794c4f308338bc90acfdc3a534ab1be794cda58a49c1d434383012c4dd0c07098e391e3e4442b796f055b608e385651bd0872dcc99dfce5aeae04af6832f6c77d7aad48e814fcc1f9c114aeac929485f87e5e17a63e73018f571c9e7525bfd930599a8ecd2ed008df0ea5cab2bf010b33915db943865969a0a3b7fa26b72c4162758b28a54474f5b4e89f665c71f42ba464b79a9f29c250bf468fef92052dc0c41906a304ce11835b046bc731a07f2adfbe5ba5e16a4d5c0f4d1652cbbc08ef6eb3f6534a813bc3fcd5ceda846a15cc822eb26098f046380318b182e1f5d0b03c3c0f387700cceec4e5caed17b9198d23618551797cc39c44b9f1216b408b113f3766facffe58704b48ef49b9544b949f0f87c8cbec7c6269e1faf76853d1c8ee43a80760be6a947ef72def859c97fc46222dbb31747a29084f913f2b82644a4fc242ee081955ac705f712e07d8b51b2fb45e67b8830fa5f7f0816aafad836659481a5529004a65cb2c51c2e0c4bba26c55fae41943e0d6242ec84bbab325739d0b6e38287ec6ba7d09caa90a69176adb9992f36a89ad50754adccaedc5e3542a4b31471f8c53db78c9530cb749c0f87f6c66890491917e9a7ea0e1973a44181f59fa648eeb48d5506ec376ed00aef57ab7b570223e6a030ac6fcb3a2d7f4ba6c15499930c4658efb77b54e0716e8224583f4427eb8a38bfb3b2b94f8b29445f29d3c77177be75568c089477d1a33a3e173ad2de72379e669d2868855b36a5e56708ed7a2db65b44d76cab5c4466837089b7db1390739df6585fda030e64c92d65bb29f0a694a7f4069f34d3e10a53bb22d5c14edbd83f54a6c38cb1a1c968cb0f3a8679b444d1a75d32ad5b4606cfcb234a0bff146448de8cc599f92a1355385fd39df2944bd4fdc808f57841105e27b0fe738d52563746882b932db003095e589e27b08674aa61289f8885c814adcd28862d886928ee3329567c8327723f1521afb33b8d59a708d3f4953a1984578aa7d123eebe854e9780769e92d1a41116b06df5ab596341eeca92c58259703981f24afe8c2f21525d58b66485334d7ad3b4c27f9108f3cfe9067035d3578dd73034d421de165d7f7a27e1355038609a257d7c7f7af23e676bc38ac0af26b7fed8c09d127c8e81369ccfef8abab95f7a47318d4f4b206f6fdc53073155a4a736ff35bad2c1bce068f38318b5e8ec921e57218282c13452dcf3d3ab5f21f65b0369b37bc745417a6b6fb6fcb922886285a405a3b017d5cdbc28416bcde3b2a9e7b76b3b96a53a36ec59f6dbfbbd9e85c54a4befdf0522bd1d4d4d9b0c00b901c5f4a43f19afe170c429694f3a736dfe7a324edde8cd9d0f859108457488dee1990464dfe147698acbf9f558a0406c60ce38418b53bbcb1a2d2f242b0745345841daafdf94ae362e7a968c8731a1d09eb2de4506ccf7516cd8def29971d92142d5719a1d52c8ba20dd67c31489a977a91fdccfeb2d1082a3a276565f50055b17c845a0c47e9361926f03cb8eb4ee1e625ec02d6a201eb2d770fe0824cffc294b73c28685a52ad5591f238f1c46bc7ee8f650d30d3c5a703246e50c1780979c26c03582046104f8d2c97a2c4c20ba58ac307a72a0f5f4fbacbf32dc5258fd990bd31f6be0c7509b73b414882b7edc488bc74d72853c4d49e22ae2f93bbfecb7f230e8100d2eaaed6201b410ca5cadca21ccc53f3ab8cde4c318215c169a808a2dc9ad8c5accfd31d5ee0266923eae9c2429f8e802c275934e8883f2ead0f150ca988f36b518b6020260a54ac758b7583db6aa68d7802b12e08fa326150cf9b68e5beb54628f36203f9002257f1ca95b6067f7115d48d0225129b15c584ea33ddf33b7ade3c9db95d13b32fcf4f231b97c3e78a3a66fc806a38129a691011e6e47f4410b2be65f300534c9a46cba0349941f28850616be1e95322593b4efae4a56193b3504db42a7efac6ed63177b8f8364c3da2017f5333603e8cf4eceb577247750107851d748632398f22571d024d0353049cab3be7bffb40071bb97113738f8b0d084546e93db2d5ae0baf14ac7ed659627a92ce630dca55e56f6fec5308cd8b8040f68ffa385022df1e053912f31fc1df513c62a2caee0e3f6e2475f14873eb85347ea80cac7f987f6ffe986f772604d46f15ca3b631f4fae4056c801c91e325ad97287719be709f8e260986af830c0aab93d301c45a5c0a847a9f7fb8ae474dcd70294b25aee5b1f0a0c98bb13fc177543019f94e5c2f06f5df43a268a0b46ee48484495e6713a1da0d832e1ad11263947d82337bc18e437532645eb561f15b945e7cec0defbfd053a2d6e67575a22e91652256df65a6602ce2646c2d0b07becf22094d0f592740a1bb9db09c9c117a26b3793c05bf73031a3e253364dc0d5d99a41c60130df2edf136275f00c69e05e0a349fc72b7497d1c58c36b0c34f0beb66db97c745d7347221802a44ff4937fe2136fb8b96f782ff316702d22ec63f2db0189d0e167f02865aed00ce7d1fb15e1a60cbf1eed75291ab2feb4061a81e24e19dc0a79d74d36078acf4823395d3618592307c34b408560f8cf11288c1de4cf5863a61e223b8373a8648942fa4dd5cdf99782800d3725e09dafdf975ac8b4e3a6bb7a19756684b26a6bb826430a5afb5d863577676246022add1f960090c8aabd70e43775c1b09a67fcf914bbe1627069eb7e12208ad596d78c0ac468b11c0dce03dcb3f218d5307b057f03f1f292f8361f8ab7486bc1aab2cc83951be1212ce5186d3d580c0e49e6df59cda5cf96adfa0ffe4a672f4b2940300b04625a51562e58737a6d7e36e033d453ee70f8cbdecd62edb278464396f0cd79c8c645a3f833eab71bdc076a5564e694fd581dacbd8ec005d0966861e4fdbf0744df81cb9936159f9a4b4855e30cfcc5a26bb1a88b7bff0ce61f35a32d064f00d4fbf162468058c78cc6793166b48afe4225a913f896828f55ff053266bb07791180b3a11db879624a79952d24c924a752f7a70ea5404972ac0e6f4b891eeb874a0969b8f223d5a0f3e806f06c0bb18ca2a30a3b5b7dbe343e947f462b3ae7b5a75b08aed29ab5112df7d27b7560633d4985e0054d27c85238e3f90db4731e6e20b85fd7167d7f7ef1cae946cf2de1e755a77f759faf19942ecb9c8240ae4494bbbe0163f42ae71ded0a3783edff27a681a690ecb7788437d921cdaa1944a0025ef62fc8ede81a7246d9b8e7ff34a06a16da406c577270ef768ee022a97a984b700ab5b651daefd412c2835a970b5dc0cee3e5626fe2328757e4c965aea77708fa9229681545f774695a6758bc2faa9ff4687bd475b538123705f66d47d6e1aceba5188414816763f745276be036c7ef4a0c96944729779750c0a2afe0227e2bc1d3d9f627814ac34af94477d559670fc0a83f8211162a99ec336e67e93b1dda18c087da94bf23dd577a17f3ee8fc429aff531d6a86a1d351f641cb219253ffa981239c4ab09a1e1c79f67ac78202c45b22a125a359cb2f7e55310ec71ac4c78e7e56f29320f935009f07c36e93da759509c2171cde0a9f93e78e0cd5a7a09eb0f32c39dbaba54382af1f7fd261ec4a4f3518828fe0d72d2bab29a6299cbb83685f7fb6d516fdfae48839c2a0889d465f13fa163b161d83a3c420dac9ac817612228343c90c756adf5d51ba99883fb6679f25d07357833aaecaf9efe488aa973663a0c73085f6c54ef3e704bd22e6bdf040852d513d58637fa5fa70b699f3d0cceccd82fca5dc912e3981586bcdce82096737b6571268e31e2809d717d25593b0bb20a86026adeb7606665d41b733a6000c2d37f71164f79dc5cac7daef609d5aa62974e8e21cd67afb592417c3dcc92f24020df04f57b4df037eaf1ca64a7764e1be3057e0a3da6e0ec447df82239ef1bf221cba6f144d2e58937a871d1f24fb4594af40c82f1d6f110f3562ebdb85371ef3810c5820c8c1c24feac71458de45c52289ea57e8b639ca4f869907ab30ddd046d9b1c6a030e7ae505ddd84d1d9024f2a3958d997ec64473c6fbacc26f9807b315ecb415ff2fcec37f34ee3985595ca9ba4bf050eb7983a5979d32e9f4bf4da7a663e6794fe3e3cf6119c66a7adbeababfa3af03aa99f97db93f17c65f0cefb42e4712fde520f6acfdc42e34e5e2b3c0db91ab699af88c4ad85aa128c54ea486877f3b3b7d15bc56d3adaafc2025061847e801d87a46be04c88cb376e553e141f7de7706b91d2752647264fb688e65cb3647614fb9c64735aec04a3173681e8e9df41ba9a429da4e532eb916fd51afa2ccb58acace9b4cfc7d263735fba245e62ff25f29b8113b0dc20c7b6eb85065aab4e4196664d42b83d077cc9e8a3f0f6ead5e3b587671b7ad916a16dcf29af34d2da0aab0bb0dfff71cee1b80a66e2c456470763792bd3e24412176b6ad7ecbcb51d0a7094d2a21c5c0a653b2dd78abe4d2b9586222a52c1e083169ea1f7ab74914f8d2c527986680f96aa39bcf6c1b8b1e7105883de6dc072a54082f28823424f1be0f69aadaf512569647299a5fd511c81109de1387a72a4820e54b9b2b88b0fa8fdfa8906c542ca2a5dc15dc252e58ee5abe870f74a6660f322cf183b420ba71c23c40189cb63dd9214f4c1cff02e131a76eef819b46e5a72ce6a36d7e1b2914a05ff960048f3f226fa1f376fd1383223dccda43aaf8f87a2b1d410ba505dc34bd142c9167c6ce4f3f4a4800aa90868ab9d995b3550b16759bdb7415d85bf2742c6979fe565dfc2a8a8d4fcc0e8d1418d491ef83a097379f8dc00ecf5bc7773971f2680d84cd327a6fde2e0a1e6e03db1653b396694e1f7132ebe19739cbd3837737e4c6bf4a258898ab1cf7fd7e25e43163d6d4a27d6b5ed2b7c12bf35fbf21ac0a844e825aa203d71677c72f354a10a6d30f99799d754644cfcc83f608905db861f458972c3fc87a0ada0be9d22f14e0092f8b733cb646690f56f1c6dfedfc9e5e682009f260a527f88cfd72694e0284bf21610f49b3010855352fcfbfdd72dd1109e70ee61e404855abf21205a2a850dcdc0f1d5b63eccd6cc1197c165a6b2315472002aec1852ea10294ece7fcbbacc4ce4ab8ba2b41b33ab3d66576c6cdeb08925bfa8abad6bfcd4fdc3467f8e78fd60da2d8a4b12ae3a08aa17bb05acaa39e608acf9d145ed6c3bbb01541f66a989bab794892903ff6dd977f70c922e7f47cb788c2ed1e973ed07520a6a87931bfd0ae557d6ddb8f9f759eb7eb4aacc58fe11ee4d399995a79525e2f5839c32f97e39d418ca79bc3798ec4f593fa861ab7af2139ba3f5e1b9af7ad452edbda49b51a849a85b6347031652a54c233e727e7a631c7f1f33620ea05dfc20d51fe5f01269b4efc101cb4ad56200e32975a0d12ed6afb56219f4a4931ef9405e187ee7cbb25908f382e3f2593f0d77bc3ff3288f86c48634afd08c9e348e647d505b529aa25bbc668bef3b11f25b6b4a758bef7eddc6b00f6934c900056b3d847a76e3cdb8a2ea1e032e7bc633bcdf75d7c99468937113218c721ccd71688b5fed397967de10b82c818407b17ce61b6f275b47fc52c124016e1cf893ede4110f754dbc1892f0d93d862ba73b2e54e7b991ca69b38ce04b37a98661cee41ac45ff6280577e64bf7b0b38271a8722b9f6d0723522", 0x1000}, {&(0x7f0000000100)="0ebe220ba2a899e26496d69c6d6b458b88dab190067b8fe711025f528199e044e5", 0x21}, {&(0x7f0000000140)="1c4e5c28d3e717188abd7ad3455c5108d8ab30d321cc72aa6986741ea89e14f4cb241e50437ca800e12187e398cc68e31a16b5e69d953e3f507114bcbcce01a949ff9edaaaaad7e03bb783e085199167181fd40ec635d1a31391cb2ead260de6ec3d1d982003a9dc7d184eebb4b4f89ba1c62f2573b6b9848045c39815bf207a3c68554dd29a05cc762298546c9505948d8ef0939f106af6addd9de3b9434d46e17dacbb48b2ae22784d0fe5cc6b5894093d1543b7d6c43fe454e42a984eaf2287c28e19b57480ac7ca8dba7", 0xcc}], 0x3, &(0x7f00000012c0)=[{0x20, 0x459a4fbd1c97a1c0, 0x4, "345d90690fead53837"}, {0x50, 0x10d, 0x615d, "2809ac877eca1824f30778a772ef617b9c358f8a341e2230ef5eb1c13ade42ba0648727fada7faa9a24e6cdfb7cb5b36da890ce5fc0a8d06c7"}, {0x108, 0x30b, 0x8, "e702dbc75be3c178dff45ad50c9973f13e330e7453610d91d2be866c7f75d4bb3a7b6cf8e2e260c494d3c9afe0c83fcadbbb3d0d4b502f7a10bccae814a50d53fe41cd915b3506fba53640a5d652d143fe450e2c3fd010d2cc8ec5e36bfc9f6a9ece77d5743768a4c593a1d299644b7837ff6607346163a071a50f55b810db60b8e89460f1ee8a5f45001b6f83850bca356b85c3908677310ec635b3ba0dbf708671531d2f45bb3036618200c28cfd75d0e426b936ee2970a1b9d0fce0b950946e8757c77b380000633f53483287e0db61e5a147c918ceac30cf56f134a2d9492757cc83674b48d50004265f681d59a406d1537defd0"}, {0x48, 0x101, 0x5e5, "1b727f48226604cbf58ee31dd487ed7e6aae6de620cb618e3a1af144b2bd5a816b9c264925aa5c7b013fc4d126c412269ccc04aed26f"}, {0xf0, 0x100, 0x5, "5b5e8fccd77bf1dd52ccac71753718578277f9cb453bf6a754629221d2ec4845ad07e97be7b2084549c3f01531d1b6ee4ce43b6c3a47d9256c01478b595f233c839f54640d7ceebe5e416cc4d4fb5aafc48664a444e4c646de0798452b4571d4da1062217cfe84e9ce0826a3c50413ff43b1ce552527e43f20e37cd04abbb262d3757ea1d7921a07e0e2ad24a82978c56c0b320fc54047943873cad58ffde9a730617f8d4f59ac773299dd077ec52dfe5c40c5ea12db1fbc3094c5aec3b3f1a78bb4eabe948bebec82b7dc75bd00393d5e251e06c7ec7e28bffd078a8fc4e869"}, {0xa0, 0x10e, 0x8af, "ff1588b30fa6f6cda4051d4faca489f11f490126d9eaaadcfc04213f93cdc8e14036fb0daa5863382bf43894efa3587813e0b3663971ab3995cbb3eed5836005fabd980f147b4da53975c5be98ac4fac3dafd02e4400010e11890634401267149c3088d3cecf75c947d7d2034ec0c315c9eb0af98d5f4a7a246b1c31d8db4470539e14ab2135ed0bc36854caa7914193"}], 0x350}, 0x400) [ 1135.394459][T18712] ion_mmap: failure mapping buffer to userspace [ 1135.474067][T18712] ion_mmap: failure mapping buffer to userspace [ 1135.495410][T18796] ion_mmap: failure mapping buffer to userspace 12:39:32 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:32 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000000)={{0x2, 0x8}, {0x80, 0x73}, 0x4, 0x0, 0x2}) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:32 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2d0000011f6e9b523de62f7a1859972d6609e8dc60147a10a68c831622a81d600217cb60ed6f1feeb7369b9f22041e872fe8884099a90438365a620faf9abe5891e892502d91725ecece93557c41743c9d9ee6fa85cc161b8664d4a3108da0611281528d65fff894269ced351e8efbabab11c55924acd35f140bede5d191b7246f71818fe08d921fe1b53e006268688c890a5f2ce3d29a55d38f5da8bed2", @ANYRES16=r6, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r9, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r12, 0x0) r13 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r13, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r15 = dup(r14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r15, 0x0) r16 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r16, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r18 = dup(r17) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r18, 0x0) r19 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r19, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r21 = dup(r20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r21, 0x0) r22 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r22, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r24 = dup(r23) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r24, 0x0) recvmmsg(r24, &(0x7f0000001940), 0x3, 0x40000100, 0x0) r25 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r25, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r27 = dup(r26) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r27, 0x0) r28 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r28, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r30 = dup(r29) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r30, 0x0) r31 = openat$null(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/null\x00', 0x3812f92176c19be, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000001b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240000}, 0x1f9, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="00042dbd7000fedbdf25020000000c000600030000000000000008000100000000005cfe070008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r27, @ANYBLOB='\x00\x00\x00 ', @ANYRES32=r30, @ANYBLOB="08000100", @ANYRES32=r31, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="0c0002000000000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:32 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/115, 0x73}], 0x1, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/214) ioctl(r0, 0x40084149, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) 12:39:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r2, &(0x7f00000002c0)=""/4096, 0x1000, 0x2000, &(0x7f0000000080)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:32 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000440)=0x0) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r12, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000880)=@short={0xb, @remote, @rose, 0x1, @rose}, &(0x7f00000008c0)=0x1c, 0x80800) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r13) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r8, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x3}, [{0x8, 0xc, r9}, {0x8, 0x4}, {0x8, 0x4, r13}, {0x8, 0x6, r14}], {}, {0x20, 0x7}}, 0x44, 0x0) r15 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r15, 0x6, 0x0, 0x0) r16 = syz_open_dev$usbfs(&(0x7f0000000480)='/dev/bus/usb/00#/00#\x00', 0x3, 0x220000) r17 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r17, 0x6, 0x0, 0x0) r18 = socket$inet6(0xa, 0x3, 0x20000000021) r19 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r18, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r21 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r19, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r20, r21}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) r22 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r24) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r22, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x3}, [{0x8, 0xc, r23}, {0x8, 0x4}, {0x8, 0x4, r24}, {0x8, 0x6, r25}], {}, {0x20, 0x7}}, 0x44, 0x0) r26 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r26, 0x6, 0x0, 0x0) r27 = io_uring_setup(0x42d, &(0x7f0000000600)={0x0, 0x0, 0x1, 0xfffffffc}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r27, 0x6, 0x0, 0x0) r28 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r28, 0x6, 0x0, 0x0) r29 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r29, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r30}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@dev, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0xe8) r32 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r34) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r32, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="020000000100000000000000040003000000000008000c00", @ANYRES32=r33, @ANYBLOB="080004266cf800", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r34, @ANYBLOB="08000600", @ANYRES32=r35, @ANYBLOB="10000000000000002000070000000000"], 0x44, 0x0) r36 = getpid() r37 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r37, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r39 = dup(r38) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r39, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r18, 0x29, 0x22, &(0x7f0000000940)={{{@in=@initdev, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000700)=0x4f9) r41 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r44 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r44, 0x6, 0x0, 0x0) fsetxattr$system_posix_acl(r41, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000d00)=ANY=[@ANYRES16=r44, @ANYRES32=r12, @ANYBLOB="0800135a", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r42, @ANYBLOB="06000000fba0d75fdfba170787560db4e826d54e9a0d6b8834ca5f3c898e117f8f737fd211f9e460a72ffcaab857c23bf25e0ad7b6b0d74541ea702021b869a441", @ANYRES32=r43, @ANYBLOB="bdec00000085c968809ae10db828eda76bde56a200000020040700000000005cce2e330912ee0ac3801f913e9f4968cdab0851f4009f3bb3a74d4a83fd5f8852632df14f1e09bfba3c02cc14fe25816f0ddf467fc550c4bac9a293bb9ae1596b805508df3e73ac9a73d47d01b8d81d388be6bdd6aecbb0bda0cfabcd6752305deef7f9039f3c47958deb5b6943c8b6f841b49c243df6f97593efe96581f86cdd4cee85f5e4e2227095e066995090a2df063b33b711f62a55540b254d4d68e4ac489218cfde5f418308e0d5440a3f783e5c28942fd5875491f1ad78e46e041efb1ec4f75c3a0a43a455f961cc5b0bd0b72cc327"], 0x9, 0x0) r45 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r45, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r46}, 0xc) sendmsg$unix(r3, &(0x7f0000000840)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000080)="2030a6fc0a2115fee1d40c3f015a5c9c77dc9c6c1f51745479601193bf145c9dafe93d2a5a81708343fb5d4ce730664aaf3b9f00b392d1d7105d0e0ebecfeca2fdc15062af1abfe8c963a7a95ea681d6e27301d328b27c943cf6612f128b6a94dba1d4ca4d7388b8851609a895a6a601b37771a47ec672c9849b9e009f6350ad218393b7dce5da1ed7a79d79fd3be1533c28872b6ef7983891c511b83b414ee4a3db92163dfa2f0c82c4be7a7b194e29bb5bb4e38bf947c39e9e93a13f67ccf54e82a47eaa5ccf09b5a777104dca53dfd946464d046665799a59e3f6260a389961b5275cb6", 0xe5}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="4c5efbea4eaa5af29a94f6ce293328235f152809fa21000e045e7afad5c854c0a7f1d222f3b2e84572ca66fdb17641b8a26d241fb26269abc8a08d5ebc80859c738cfecd01d7", 0x46}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="23c54771d9e9c04b4adce722602cba9fc9d1fce46b73783c9b18397cc5f3a36e473720c93b8558ed413046335892ada4f55f1c81a334f78e198c5532adcaa4307b4dc6a3818070ec60ca467292b28c0f798b3693e995ca44cd2d34b79653dcee7e8cd04db03eb1be4d4a4c5b965259bb08dc6c857d3891aac1bb7c0eb1ab0170291b42bfab14dfb6c063462caebcb516ccfd548799184a9e65dde4b0df3a34f7cb0cbfd02fe28190d3a80809f41681d46b6d81e351c3c7f94f7db2828e0939db05b8487bf532e8ca7c43c3f3c7186b5382248b8e3d0cfb25d026d17595", 0xdd}], 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYRES32, @ANYBLOB="1c0000000000003a28000000970efedc078dd7fa688c89080000000000000044769a049590de1d34fb8ed84074dd0000000000fa6c194980a71f634156970b1643f89b014076a5e23304d147a0eecb15f38233f856f890883c314dd00e0057753bcb9cf745fb09212685bd56010078c1ed9e42b8d4fcb49b2ead636ae5000000000000000000", @ANYRES32, @ANYRES32=r21, @ANYRES32=r23, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r26, @ANYRES32=r27, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r28, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r30, @ANYRES32=r31, @ANYRES32=r34, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r36, @ANYRES32=r40, @ANYRES32=r42, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r46, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x800}, 0x20000000) [ 1135.822168][T19204] ion_mmap: failure mapping buffer to userspace [ 1135.842236][T19208] ion_mmap: failure mapping buffer to userspace [ 1135.849028][T19210] ion_mmap: failure mapping buffer to userspace [ 1135.854139][T19208] ion_mmap: failure mapping buffer to userspace [ 1135.867478][T19208] ion_mmap: failure mapping buffer to userspace 12:39:32 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0xa, 0x3, 0x47, 0xff, 'syz0\x00', 0x436}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000200)={0x2, &(0x7f00000000c0)=[{}, {}]}) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 1135.904588][T19204] ion_mmap: failure mapping buffer to userspace [ 1135.918326][T19204] ion_mmap: failure mapping buffer to userspace [ 1135.935305][T19204] ion_mmap: failure mapping buffer to userspace [ 1135.945238][T19204] ion_mmap: failure mapping buffer to userspace 12:39:32 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x0) r1 = shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmdt(r1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x40044103, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) [ 1135.991520][T19204] ion_mmap: failure mapping buffer to userspace [ 1136.017203][T19204] ion_mmap: failure mapping buffer to userspace 12:39:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r8, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r11, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000280)={r11}) setsockopt$inet6_MRT6_ADD_MIF(r12, 0x29, 0xca, &(0x7f00000002c0)={0xfffe, 0x1, 0x1, 0x1000, 0xfffffff9}, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, 0x0, 0x0) r13 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r13, 0x6, 0x0, 0x0) r14 = dup3(r5, r13, 0x1c0000) r15 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r15) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r16, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r16, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r17}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r14, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x3f82, 0x200, 0x10000, 0x0, 0x5, 0x6, 0x1ff, r17}, &(0x7f0000000100)=0x20) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, &(0x7f0000000080)=[0x6, 0x1], 0x2) [ 1136.087256][T19204] ion_mmap: failure mapping buffer to userspace [ 1136.135652][T19204] ion_mmap: failure mapping buffer to userspace 12:39:33 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)=""/148, 0x94}], 0x10000000000001a7, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:33 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x202000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000040)={0x3, 0x5, 0x4, 0x0, 0x0, [], [], [], 0xff, 0x10001}) [ 1136.180086][T19762] ion_mmap: failure mapping buffer to userspace [ 1136.193035][T19762] ion_mmap: failure mapping buffer to userspace [ 1136.203418][T19762] ion_mmap: failure mapping buffer to userspace 12:39:33 executing program 4: socket$packet(0x11, 0x4000000000002, 0x300) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000000000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="021201000200000000000000000000009c6a5c38c11d6202436d41935c1d73e2e70f3813abcfb0b63d8273b566dba502da401e9fa7c0c5ba953d166d75088c19c4e75785520efe0fd4c163c9e57391cad929a88a471bb2dee94eacd7fca2718b"], 0x60}}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400806e, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/netlink\x00\xd4_\"\x0e\x8e\xb8t\x02j\xd1\x10j[\x8f\xec\xfcU\\\xaf\xeb}\x8d\xd1G\x1a\xcd\xdb\x9e\xdd\xf1\xfc\xa7\xf4{\xf7lk\xdb\xf3\xae\xd4V\xaf\x06\xb2\xbe\xcf\xe5\xe1w\x8c\xe3!I\x93\x0e\xa6\xa7\xc0\x93O\xfa\xd2\xb0\xafqA\xb6(\xfe\xbe\x18]\x9ap\xc3\'\xfa\xc5p\x1cv\xb9\xc4\x94\xaa\xf1\xf7\x199\xc2>eq\xe3\xf1\xfdg\xca\x900x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r9}]]}}}]}, 0x38}}, 0x0) bind$packet(r6, &(0x7f0000000080)={0x11, 0xd, r9, 0x1, 0x9, 0x6, @broadcast}, 0x14) sendmmsg(r5, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYRESOCT=r2, @ANYRESHEX=r4], 0x2f) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 12:39:33 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:33 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4004c103, &(0x7f0000000000)) 12:39:33 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x8000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x1, @rand_addr="259adfc4e8b2d822877bb688bb8e5929", 0x5}}}, 0x84) prctl$PR_SET_SECUREBITS(0x1c, 0x525395b830d4af44) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:33 executing program 5: syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8e9, 0x24e900) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xd25, 0x200) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r1, 0x40084149, &(0x7f0000000000)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x1, 0x5, 0x1, {0x6, 0x4}, {0x9, 0x3ff}, @ramp={0x4, 0x7, {0x0, 0x4, 0x40, 0x1}}}) 12:39:33 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) dup3(r2, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:33 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffda9, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000140)="ff5e855f411e6f54b64adff1867206ce35de2699f2409fe1f81515378fd08ea6f5d9c71d3b0c53e661c3e61dce3bfa50696ac321d79dc33bc65d990d4303ac61dc31dff7c42327bcbdbfa4ac8a68b2368e1bb04759cd580fe0bbacddcce23de51943e494b1fe56e8f9ab6d62a90062afe41b6bc30f9a4de460f37581fde00a1a1fe6", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000600)='k', 0x1, 0x0, 0x0, 0x0) 12:39:33 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x9, 0x601000) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x4, 0x4753, 0x9, 0x9}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) [ 1136.762992][T20485] ion_mmap: failure mapping buffer to userspace [ 1136.793071][T20496] ion_mmap: failure mapping buffer to userspace 12:39:33 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x30001, 0x0) finit_module(r1, &(0x7f0000000040)='self+\x00', 0x1) 12:39:33 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000015c0)='/dev/dsp#\x00', 0x400, 0x400) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000001600)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x6, [@loopback, @remote, @loopback, @broadcast, @loopback, @multicast1]}, 0x28) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:33 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x1, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40000, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x1, 0x2000}, 0x4) ioctl(r0, 0x40044103, &(0x7f0000000000)) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7ff, 0xb19a, 0x5, 0x0, 0x80, 0xf7}) 12:39:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000000)=""/116, &(0x7f0000000080)=0x74) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x40044104, &(0x7f0000000000)) 12:39:33 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000b40)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1137.166792][T21063] ion_mmap: failure mapping buffer to userspace [ 1137.190143][T21063] ion_mmap: failure mapping buffer to userspace 12:39:34 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:34 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) fsync(r1) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x15) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:34 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7, 0x8000) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f00000000c0)={0x0, 0x2, [0x8, 0xcf6b, 0x3, 0x3, 0x311, 0x1, 0xfffffff8, 0x1f]}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x6, @loopback, 0x4e24, 0x3, 'lc\x00', 0x4, 0x10001, 0x7b}, 0x2c) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:34 executing program 4: r0 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) socket$inet6(0xa, 0x100000000000001, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x18, &(0x7f0000000140), &(0x7f0000000180)=0x14) 12:39:34 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20002) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1858c0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0x0, 0x80000001, 0xffffffff, 0x8}) ioctl(r0, 0x40044103, &(0x7f0000000000)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) 12:39:34 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x4, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x75a) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000000)=0x3) r4 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f00000004c0)={@multicast2, @loopback}, 0x8) [ 1137.711412][T21511] ion_mmap: failure mapping buffer to userspace [ 1137.720561][T21482] ion_mmap: failure mapping buffer to userspace 12:39:34 executing program 4: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @remote}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'brid{e`s\x00\r\x00'}) 12:39:34 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000000)) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000040)={0x6, 0x7, 0x80000001, 0x3}, 0x10) r7 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x5, 0x80000) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f00000001c0)='/dev/ion\x00') accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) 12:39:34 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e00000027effffeb0100000002000000e00000017f000001782e022e5695b9003a2f6708a0019649a7f0729db387e83aa57ca90319b782e7cd53e357c9d92727dec615e36dccb4bdc2122af093e9e87869228bcbb9779ce68cb2d02ea1bcec65a274eddcd847fb4a68a34c6b09d6c9aa9350c035e5419afbbc7c0dbbfa5e2c677f21dd7562cb74008cc51aee2913be315c8d3e7f8502cc1c9661b7453f0320d7e4ce78b4702500a3563d00fa4bff07000041522245394f63b1eaa8ce53570b3eda88ba4cf992e6503f37425139e67b15aa1f"], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'lo\x00'}) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:34 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f00000000c0)=[0x2, 0x2], 0x2) [ 1137.921454][T22028] ion_mmap: failure mapping buffer to userspace [ 1137.935607][T22028] ion_mmap: failure mapping buffer to userspace 12:39:34 executing program 4: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009ff4)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000007ffc), 0x2f5) 12:39:34 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x81, 0x2000) [ 1138.021595][T22154] ion_mmap: failure mapping buffer to userspace 12:39:35 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:35 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x9d2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x202802, 0x20) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x7fffffff, 0x3ff}) ioctl(r0, 0x40044103, &(0x7f0000000000)) socket$can_raw(0x1d, 0x3, 0x1) 12:39:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r3, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 12:39:35 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x39, 0x400, 0x70bd28, 0x25dfdbff, {0x1a}, [@typed={0x4, 0x49}]}, 0x18}, 0x1, 0x0, 0x0, 0xc33366636d4faca8}, 0x1) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) 12:39:35 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x100000001, &(0x7f0000000000)) 12:39:35 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r1}, 0xc) perf_event_open(0x0, r1, 0xe, 0xffffffffffffffff, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r5, r6, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:35 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = io_uring_setup(0x313, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x793}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000000)={{0x5, 0x0, @identifier="ea1dd308c01c705445d89ffe33dc330e"}}) [ 1138.620441][T22539] ion_mmap: failure mapping buffer to userspace [ 1138.629914][T22541] ion_mmap: failure mapping buffer to userspace 12:39:35 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000000)=0x2, 0x4) ioctl(r0, 0x40044103, &(0x7f0000000000)) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)) 12:39:35 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 12:39:35 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$rose(r0, 0x104, 0x93d2646c1f04762d, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:35 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(0xffffffffffffffff, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r3, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) [ 1138.862523][T22957] ion_mmap: failure mapping buffer to userspace [ 1138.871879][T22957] ion_mmap: failure mapping buffer to userspace 12:39:36 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:36 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x200000) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:36 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) getsockopt(r3, 0x0, 0x1f, &(0x7f0000000000)=""/20, &(0x7f0000000040)=0x14) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:36 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0xffffff91, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r2, 0x801, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, '0\x9f\x01\x99V\xf5\xb8\xd4\xc9u\x89\x1c\x8eS\x80\xcf\x83\x8f\xd2\xb0\xc2\xeb\b\x13\x00\x05TD\xe9\xfe\x81C\x1a\xc1V;O\xf7sr\xe1B\xb3\xf1\xe9\xe1\xeen\xc7<\x95\x10\xdaS\xd6\xdb&\xcdu\x17r\xbd\xf9\x16\xdcP\xb6\x8e\x10\xa4\xef\xa6\xbe2Y\xe0\x8a\xc2\xe7\xcd\x0f\xcc8\xba\xbd\x1e\xbeU\x01\x17\x9db\x8aE}1b,\x00\xed\x05\xa2\xe3\x97\xf9z\x82;K\x10[\x85Ro\x82\xf9$[\x9cm\xa8\x85\xd5\xaav\xa4\x18\v\xe6\xb7\"%\xe3\xfa\xa8e?;\xf5\x89\x15|'}}}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x8e2d234133cdc4fd, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x20, 0x0, @udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r3, 0x40084149, &(0x7f0000000000)) 12:39:36 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2, 0x3], 0x2) 12:39:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r3, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) [ 1139.436178][T23410] ion_mmap: failure mapping buffer to userspace 12:39:36 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000000)={0x0, 0x101, "3aa1c985afe55ffe72843e25ce7b1b79391bff0dcf81cd8dd961a2649b5bfb06", 0x6, 0x101, 0x800000000000000, 0x0, 0xff, 0xffffffff, 0x1f, 0x8, [0x4, 0x1f, 0x10001, 0x8]}) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:36 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/deV/snEmC#D#c\x00', 0xf5f, 0x40100) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r6}, 0x8) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r9, 0x0) r10 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r10, 0x6, 0x0, 0x0) r11 = dup3(0xffffffffffffffff, r10, 0x40000) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f00000001c0)={r11, 0x6, 0x2, r3}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000040)={r6, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000100)=0x84) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:36 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x9, &(0x7f0000000000)="c5f73fd9904e39e8aa12b28f8ae29334f9cccf66ab3a46033fed65005944907b2371b00786388a82999e677410015a83efb4129eea") pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x2, 0x5}}, 0x14) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:36 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000080)=0x6, 0x4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:36 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snm/pcmC#D#c\x00', 0x7, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80000, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x1, 0x7, [], &(0x7f0000000080)=0x9}) [ 1139.728239][T23708] ion_mmap: failure mapping buffer to userspace [ 1139.755738][T23708] ion_mmap: failure mapping buffer to userspace [ 1139.820486][T23719] ion_mmap: failure mapping buffer to userspace 12:39:36 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x20000000021) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) sched_setscheduler(r4, 0x3, &(0x7f00000002c0)=0x10001) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r3, r5}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@ipv4={[], [], @multicast1}, 0x100, 0x2, 0xff, 0x8, 0x5, 0xfffd}, &(0x7f00000001c0)=0x20) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r9, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r9, 0x800442d3, &(0x7f0000000300)={0xfff, 0x7, 0x9, @random="1aa0984884e6", 'hwsim0\x00'}) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x7, {0x5, 0x1, 0x3, 0x3ff, 0xfffffffd, 0x2, {0x2ba5e5fc, 0x6, 0x7, 0x4be, 0x1, 0x7e8cf069, 0xda, 0x1f, 0xfffff55e, 0x0, 0xf1, r5, r6, 0xffffffff, 0x5}}}, 0x90) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:36 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:36 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x20000000021) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r3 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r2, r3}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) r4 = socket$inet6(0xa, 0x3, 0x20000000021) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r7 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r6, r7}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x40, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="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", 0xfd, 0x5}, {&(0x7f0000000180)="ad0399869afd629255852caa4c353a917faf044be0e372c8", 0x18, 0x200}], 0x1840000, &(0x7f0000000280)=ANY=[@ANYBLOB='jdev=./file0,grpjquotE,notail,grpquota,hash=rupasov,uid>', @ANYRESDEC=r3, @ANYBLOB=',mask=^MAY_APPEND,dont_appraise,fscontext=system_u,uid>', @ANYRESDEC=r7, @ANYBLOB=',fsmagic=0x0000000000000003,seclabel,\x00']) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000440)={{{@in=@initdev, @in6}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) r11 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000440)={r12, 0x1, 0x2, @remote}, 0x10) r13 = socket(0x100000000011, 0x2, 0x0) bind(r13, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r11, 0x107, 0x2, &(0x7f0000000000)={r14, 0x1, 0x6, @remote}, 0x10) r15 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r15, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r17 = dup(r16) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r17, 0x0) r18 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r18, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r20 = dup(r19) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r20, 0x0) getsockname$packet(r20, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000fc0)=0xfffffe84) r22 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r22, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r22, 0x107, 0x1, &(0x7f0000000440)={r23, 0x1, 0x2, @remote}, 0x10) r24 = socket(0x100000000011, 0x2, 0x0) bind(r24, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r24, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r22, 0x107, 0x2, &(0x7f0000000000)={r25, 0x1, 0x6, @remote}, 0x10) r26 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r26, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r26, 0x107, 0x1, &(0x7f0000000440)={r27, 0x1, 0x2, @remote}, 0x10) r28 = socket(0x100000000011, 0x2, 0x0) bind(r28, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r29 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r29, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r31 = dup(r30) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r31, 0x0) setsockopt$packet_drop_memb(r31, 0x107, 0x2, &(0x7f0000000000)={r25, 0x1, 0x6, @remote}, 0x10) getsockopt$inet_mreqn(r28, 0x0, 0x24, &(0x7f0000000f00)={@loopback, @broadcast}, &(0x7f0000000f40)=0xc) sendmmsg$inet(r4, &(0x7f0000002300)=[{{&(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="86327248113635059534cf868396976f9adf9aa9ff077e6fcf54c91c975214d4882e95436b400610630f9d5b12c3d9454dcc00a86aaa1faad2855e687ef37152d3fa70c0fadc0e593a67f557fb0c86f9f2f435241f449127351e0193fb05c3b7fc1640aa5a9386c14c5cfd6e92c84d3db74544b5281ab11eba624f0f3b52de2b5ab75ee14651cba299ea03c9d0d8b65d2d536007c53e872b7012bbc7689fed9f1786779095f89a6c90c95335cb102b58d6fec714e547f7f8be898c7d81687f4c", 0xc0}], 0x1, &(0x7f0000000840)}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000580)="56318b63241a2488e1debab7ea84982f1798b7d42108107bc1beb260135954771af8ad19dfe25ca59de1eb442a8533d7a08164a8b4ffdca9da7680d1e621b7fdeb3e846137bc82512c186a4724ad694244396a44a2e3dbed804eae581a89f63ae9f3e0c2d9c99dcf03e63c70ec0bfd01ce790c0f81fac2a1", 0x78}, {&(0x7f0000000600)="f70119385188f82f0237d3b8eefeb6742202a7f707522940e27402b27cbd84a1786a30c47eca45f680528089a20fbe46f57bee99d0221b539e585787d65a589689d99cc081d1002996488cedcfeb119fdc8f32f02cfa49152f14d47647806daf764b46ad55c1d533609628c25d0c380460cdde6d538a39eaf9e8f47323061a46cd875bd57c70592c1ae09677719d4260d8ce89cbe2fbc99508e701f6d8c71e99d262f1b1657eebeda99838153ec8f848612ec70533aec39f6c97705be8e725", 0xbf}, {&(0x7f0000000a40)="c635593ac744db491c45da64f617b9ab47f5a56868b2e71a97e89408d49c110f5880e75f2e9a8c5c60d34a3c5d7e1d44aac4c518ba60735b490a23d845d2ddf3c6782e438cd614e679434245a3e5d65bb3be9129d8ccd699cd4f0a7067ccff6240fb7774eb188e030f0862d9870a4f0b75676667829351e40bf1d7e1c8746fcc799a5cb408862eab1c691d8939f771ddd4f3cade774d1aa45b585c97b884", 0x9e}, {&(0x7f0000000b00)="e111007098c22f68e748b648c98507adb656854e1792e525ac8781ce29137c47aef37d9aa131100c61882b92e2394e0d07673901ecfd58f257fb02f3a620e1f5bcdc24cf646a381f1dd3c2b418e117dfeb813316f0f19190", 0x58}, {&(0x7f0000000b80)="8a46c6c68cf7e1e5bbb91c71c7a02381c5950a304e77910c52109d951d45675010ad7308e3c04bd6f3ccd6013f20c973c38c8695a88797801602bc946cdb9408eebe92769821dfbdc6d43f56b8efa805c48afc63279e18afa7348b13c3221eb8c574cbf713b1aacfae3a03931b1e7b23daaef0adcc833fb1de30bb71dffc88b088e025d902af505a47446c1b81dbf4be1d39607bc97a68d6c11707296ebdf40c4930f88a15257cc20d7984ed5c4957130bda86964a60343a40520cc4e2e5a5cc57c033b5cb2c819b7ccf69126fc7bb45c7c3a4021617d00fd039", 0xda}, {&(0x7f0000000c80)="e3bce0c21bbcd50f8fd8686298348946c1430ca1d03552d222b6263aff783fae679d40712a6427c434ad576676861a53eed845deeb14a434e0821ad0b5a211e4eba73ec8921c6605cae8eb396df0340c8fe3aab0e87cfdd4c5bc156cfcb3d8f817e8e80c96ee77470d06836dc09bf4aaaba48d5050ed597ccccfa25d326cb0b1a0d6ceee9a28c29880d9dff3837ea7599e8714cf7e2013ed", 0x98}, {&(0x7f0000000d40)="8195559b7bb0264fbfecbe482db4e26e4c6b", 0x12}], 0x7, &(0x7f00000024c0)=[@ip_retopts={{0x64, 0x0, 0x7, {[@ra={0x94, 0x6, 0x3}, @generic={0x44, 0x6, "26a4b339"}, @end, @rr={0x7, 0xb, 0x8, [@remote, @remote]}, @noop, @cipso={0x86, 0x39, 0x7f, [{0x0, 0x8, "12513d67b9bf"}, {0x5, 0x10, "1f53ce561bcd44bf2dd7a7cca81c"}, {0x5, 0x6, "0447a984"}, {0x6b621f9c43788c4b, 0x3, "ff"}, {0x1, 0xd, "33f990c9d96e50b67d3c90"}, {0x4, 0x5, "fb6ff9"}]}]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@noop, @cipso={0x86, 0x4f, 0xfff, [{0x1, 0x12, "d1968f9a59ce41a1586b7c76467c1e47"}, {0x5, 0xe, "e28b0891d650d1ca71bab1ea"}, {0x0, 0xb, "d99c00eeadcd63c941"}, {0xd808d02c6f263bd5, 0x8, "d316167a505d"}, {0x1, 0xc, "d5229b63f8ca76392a8d"}, {0x2, 0xa, "ee97c2438703d339"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x49}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ra={0x94, 0x6, 0x7}, @end, @ra={0x94, 0x6, 0x4}, @ra={0x94, 0x6, 0x80000001}, @lsrr={0x83, 0x1f, 0xfe, [@empty, @multicast1, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0x6, [@local]}, @noop, @timestamp={0x44, 0x20, 0x6, 0x0, 0xe, [{[], 0x3}, {[], 0x8aa23}, {[], 0x8001}, {[@empty], 0x33ac}, {[], 0x1}, {[], 0x5}]}, @noop, @timestamp={0x44, 0x28, 0xe1, 0x0, 0x1, [{[@multicast1], 0x4}, {[@local], 0x10001}, {[@multicast2], 0x1}, {[@rand_addr=0x6b7], 0x6}, {[], 0x5}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @rand_addr=0x2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7c6e0964}}], 0x210}}, {{&(0x7f0000001000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001340)=[{&(0x7f0000001040)="19e8bb4a5bd2788240fe8b881ff813ea2e7f5fd0402215c698e0c5252bd06b9f803e415cc98f4efc0a93318faca42e2f7fcabec974d649a1b90dfcaaa49a678278931a9989c01fe2c14baac3f97c9d9712eb4ff6d49fec9be8a8e043602b9f38462dd10459", 0x65}, {&(0x7f00000010c0)="92e42ef3de97084a802c19e5be2c40c01fdc29845f513d24ed31cc1e9521784796e9520fd8043196c1ea42a65056f9f663ef1e9502d881b4d5b37e07b6059a2c60dc8ca80094f9966e14deba30c3887132d0e68f5686f99b1d73e6c92fd164e5047d4e10131c06d96efa3190f040fccc2e3ace7f13ff24260d4e6ea0ca28968ce3be9da3aefdcaa6c4cb14587fb6979622b9d43dda587a1642f776f48cbd0b8fa1efa6407f8a3f6d5780430f72b8ef358506adfdf6363234ec0fa9cc3d440bedfc5ec3502ebca7bc704ab0fb0eb41bc8d33f66275a85402f1e2d982192b5f2bc010b39bc622bc83a998f0d6bf73b4c7b5c6580fb991c1700", 0xf8}, {&(0x7f00000011c0)="892161cadc2c0144ce044fc3627cce31a53ee887e5512978ea380280e4900293e9abf226b1c81fd5205e9179e2e50aefbd9a1aaf5741a842f7de827cf5231f3e08b2f8bc232f4db0c2206ba08e71ec53dcfa2d0229bfd70bfd618b286767261e298c", 0x62}, {&(0x7f0000001240)="807206ffe54bce06989d413e35bbacac81edb29f0918e3c4f42153c99539cded69568da468d5b64bf8cb5d24e567a460c74e5877dd6561a0beec3903c09e191161e3cb9b099ecd2154eff4b45442f3d669aebb19c29fc1aa804bfeb733a9e745ec1163402c440f8812c400631213ab8dfabd6a671f43f04e4294e7446ce6d9a6baea22a1bb67d10694339e9a31b25d86b77baf54556090e12355da683e70be8c7ae7ee9ff3ac07467ff0aca2ab362763bdf127709e6fee43a1bd2bfa348ce5917883b8248e673200af4ecb08c0f494dfbfc5ca7abac513", 0xd7}], 0x4}}, {{&(0x7f0000001380)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001500)=[{&(0x7f00000013c0)="1612a89e93a4cb0f9010eec0a4e7bc43f1ac550026940eedcaea9469d5a993800bdc56cc6496b4aaf766502270bc3864bcd760ad024295d3fd8ba43aafa4ae37c7a4208f3031dc88ec907ce9898bfe76d214298093043d53f7580cd6fccfb59da669c6480f4ce147732122023aea953ab824", 0x72}, {&(0x7f0000001440)="f854b7bece36c97830a4b1dceef72f751580bb91773f516b1cd68064ca8ba8a08f4c98601964e9ea", 0x28}, {&(0x7f0000001480)="ec66fb037cfb5f8e27fcf9367d14fe0a272b573d42fe765dbb2fde95cee76266644c212da5439228e5e4d526e1f35629bce9e7b62424c18042552d462c5f8e51b939af5054b9d0deaa13aacf96502e47705dbdb2b195ea", 0x57}], 0x3, &(0x7f0000001540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @loopback, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffd3c}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_ttl={{0x14}}], 0xb0}}, {{&(0x7f0000001600)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001640)="5f6cccde2c6170615cd82df970ad56a1daf2bd2800b733a67b77175e073aa998f2e3647f1abb9cef131043081e0d9d32c219ac15a7756f43b16599c59d05cdda173e617d5f276208cb77c2fa9815913151878b058741cbd890176af46eeb76ea2b8d4efdec4566546fb6e2af70b02f7484f73da7", 0x74}, {&(0x7f00000016c0)="e6408551da9419ba22905e15ae86cb5fed75ea9e0bc63ca22eaab8c03f560075c53c00c018b04b4250b5ceff4361a9ce4b7f64f3785360aaa18b8f53604c4b0fd16b1486c9688ed7752356a2537a6010830171be5a34cd21fb5df35c91e716e8ec9f6b69cb829f375699c04548ad1a8d9b822a1080e61074e2b88898869e246e8941ccaa7214b44574fe9671dafad508e5bd2c118a6c0eaa03ae9533706cdf6d0d6b3e3fc3d12c4309383648710de0c3f9761b3c20037691145fdd2e320500a3369a9bfc742241da20589eb6494342ea8944c7c653514ef2b1", 0xd9}], 0x2, &(0x7f0000001880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r21, @local, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r25, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @broadcast}}}], 0x98}}, {{&(0x7f0000001940)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000001980)="2c051d6e332e27706a3f6bba5ec6f83fef2befccf3f54345bafdb807ebcc38a5c648a0a9e47e3fd71a65298262a2cfec02aa675c9124c6025d984964dbb245e8b84b128446e676aa0b65731c9c32dff530bd976914bde792ece52387bb1ebbfd926ed7eb10813ba211464921a4f4c36226a7cab410a2b52882d3da09cbc17bbb5d27d18de0a1cc1b151590af7847839725b9a802b10c887dbb327bd5161226300abc69ad6ca595db808bd7d2de9366ae1af61f5cd5", 0xb5}, {&(0x7f0000001a40)="f7a87c93fef1ab1ca5117fcf492e98d413854e318e2960b678c818fd424add63fd5e227c153ba0dbe26faefbc3297da1bec5e9797b613031c2c607b62916bdb2b06a4bc3b4d4ec94ddc435df2cfde21410bc4d5d07e2e9339ccf207eeb92aae3eb689d8b670d0c4746217323ab7adab3ab2f3e7bdecb3144a2b375731f17e463e0688683616d108e36eff8150602dc0858d6c29eb825c36e4a70bcec22513c3b5c70e31d2fce6d4a828570511b76736e", 0xb0}, {&(0x7f0000001b00)="959466a417fbc6df0f216a324b97945e16a1b3b26964f58bdf251ab28e126aa8b2906a99876cedd0657e3fd7794514daa72b1aa862c53754d285b2519f7aaffd4717763796d8a4210a2727c275573d41cda4655c0aa896194a3aaf420367aa754a35a65139e3fa36749471d99f67fdf4a51a26c5cba2eb120b25e63ea7716f7abd0a7d2fdfeb53ae26a073faf5bebb2ff4a09e6d404d27470fd303729f90ff4b3fa062418ee616763b1931de6f033d3cb8c4d4859aea75370fc2", 0xba}, {&(0x7f0000000980)="5bfbe08e02154aaab9c90c4b02639c4fad886c7bfa20b7d82b5606818b6d2b0a911fb369ea8fd3d8e64a2ef5820004a4ba2b30c6967fdaef7467def01b4ac1a67ac72a41e4280e5d75725163475ebb2d6c1084a561cc0c6a609b70c38d61424cb1c017c0b971a0b513cb521c03ec1c0f265ccf8364d65252d37e71164cf5eae3dfb93076d90a10d9205da069906c453d849e36b965d273c904af8f", 0x9b}, {&(0x7f0000001c80)="cad4bba15ee6c167c782b2724a29ecefd7c5d741b4400bb062af60b5871616618cefb5f7ac6ced9dbeeb844beec417ae63f9d9ec4491cf30ae3a9b55001acb364e7a81958d0e87064d87376c841c7146b469470c934a304c7fe6a065e5c069b205f2", 0x62}, {&(0x7f0000001d00)="cae1258afe6302737a5aa09521f97d77f5caa3f12c1967c4d0747f045a149601e7dd2b52799f330c2f974820db75dce3683dd724b19d1c295af264151460078838a97fb277be94e6ca83c52dad0f1853914ff06f547ee995fcde2112665cab8c62719210af1ed50f90db72c522b537", 0x6f}], 0x6, &(0x7f0000001bc0)=ANY=[@ANYBLOB="140000000000000000000000020000000800000000000000180000000000000000000000070000009406000162000000748a9a670f92909f515529bc833471d8abd0838ef6de801a3ae0c7abde7359fa26ca60b418b606fbce515f5ea4f197156d52ebe1754c4a5b36478580c4040248cb0b9e2625a0a830f26251535e25a8eccd5423a2fb774d9230c2d17f5dcd086493acb35f62bb18abbfe06fe3e735da65714a4ee976364ecfc862f6bfbc8bb0cf37ca04bcae"], 0xb5}}, {{&(0x7f0000001e40)={0x2, 0x4e22, @rand_addr=0xfffffff8}, 0x10, &(0x7f0000002240)=[{&(0x7f0000001e80)}, {&(0x7f0000001ec0)}, {&(0x7f0000001f00)="b93f33ca1f09e96f90e3beb19dbfae616919b7009a74d12b783d5170439f7eea2f80f344aaa538ce9c311b0656eddbd2038f9ed78796008422d91d7376684edea9d7345b0706c786debd5f28428eaba6b8c2633273e311f61e50b6becbb4491b13bd57c8f1818663e0d6da7a3142526cefe8f789f0a6f02dea750e996098470790743a8173f982dd7fc88e65436f06000000000000006c9fa1e643e033", 0x9d}, {&(0x7f0000001fc0)="dbc11c84ca7e660ac71457438bd0d418519dbf4d0c2f199dedf6a4a8fca66089a8efa755a7999b281d8b35985f7a70bfefc9268783286b3c0524579bfd067c564268a02e0901a2e721d20164592385ae9f16af91068417b805a18186dd292fab0d7e05bb8853a5ca05aff4f51b9b3147ae3de594972c74490b00a74c13df0b5f2281da71713a29e5f7ca5a555c60aea446fe04581afdf70c4d0d4867fb40d1ba8c330678e1976f20e1c342ade0bba5d3", 0xb0}, {&(0x7f0000002080)="992e7bd0cb356ef0ec8a0c63664716a9259a3b66c3686879a3aea379215dc7fd62795331e71968ecf0dbbe3107649c55e526ae927478d8392648c39220f4d5050ab221341e3280e3599b92eaf658a45312a8d4d2a30b2602b426e7732fbd6e0c4cd14a650670add4c0f590c3c869c067a172972d7ca06170fe4892c85a0620e571f998c6b490e25baa1864d58555f0b1", 0x90}, {&(0x7f0000000e00)="a20a7011edd12c71d754eee41ee2f23326d0de052db340034a2cf3c86e38e6b6284f5911b9c4601054acf7a723b49babd3172d028ef23aa05627a8db921f1b9082bed802c19766fa083b7212cef1d823793550d4908d4186ad7f5f9aba9db8a1b0b02b86247d64944bc0362acdb18f7f22b1bb585f12afabb0a318ea60aff41f8dab386ecd7fff1743996b67de01b9d8bd422c8ea8a1500ca807b222cd18346e43deb69134970274dc7b2632b54d964cb08e96a23bf728310d1079a712dc92a825e84638a3b9bcd6c7f5bacaf0f4c2e4ce00"/219, 0xdb}], 0x6, &(0x7f00000022c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0x18}}], 0x7, 0x0) r32 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r32, 0x40044103, &(0x7f0000000000)) 12:39:36 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000000c0)={0xffffff01, 0x9, 0x80000000, 0xa8c0, 0xd, 0xb0, 0x20, 0x8, 0x4, 0xa8, 0x8ed, 0x2}) ioctl(r0, 0x40084149, &(0x7f0000000000)) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=0x8, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000100)={'nat\x00', 0x11, "8b2eea91409e9f17cfc349b83291f7c4df"}, &(0x7f0000000140)=0x35) 12:39:37 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000001c0)={0x0, 0xffffff91, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r5, 0x801, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, '0\x9f\x01\x99V\xf5\xb8\xd4\xc9u\x89\x1c\x8eS\x80\xcf\x83\x8f\xd2\xb0\xc2\xeb\b\x13\x00\x05TD\xe9\xfe\x81C\x1a\xc1V;O\xf7sr\xe1B\xb3\xf1\xe9\xe1\xeen\xc7<\x95\x10\xdaS\xd6\xdb&\xcdu\x17r\xbd\xf9\x16\xdcP\xb6\x8e\x10\xa4\xef\xa6\xbe2Y\xe0\x8a\xc2\xe7\xcd\x0f\xcc8\xba\xbd\x1e\xbeU\x01\x17\x9db\x8aE}1b,\x00\xed\x05\xa2\xe3\x97\xf9z\x82;K\x10[\x85Ro\x82\xf9$[\x9cm\xa8\x85\xd5\xaav\xa4\x18\v\xe6\xb7\"%\xe3\xfa\xa8e?;\xf5\x89\x15|'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x678e60d3496514c9}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x14, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40c0) r6 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) ioctl$VIDIOC_DECODER_CMD(r6, 0xc0485660, &(0x7f0000000080)={0x2, 0x2, @start={0x9, 0x54ab95f3cc38be60}}) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r9, 0x0) ioctl$TUNDETACHFILTER(r9, 0x401054d6, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1140.088052][T24128] ion_mmap: failure mapping buffer to userspace [ 1140.139480][T24132] ion_mmap: failure mapping buffer to userspace [ 1140.182908][T24137] ion_mmap: failure mapping buffer to userspace 12:39:37 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r3, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) [ 1140.240741][T24170] ion_mmap: failure mapping buffer to userspace 12:39:37 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x108041) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) r3 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000440)={r4, 0x1, 0x2, @remote}, 0x10) r5 = socket(0x8, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r6, 0x1, 0x6, @remote}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x14, 0x80, 0x7, 0x9, 0xcc, r2, 0x1, [], r6, 0xffffffffffffffff, 0x2, 0x2}, 0x3c) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000200)) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x1}, 0x8) ioctl(r7, 0x40044106, &(0x7f0000000600)="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") 12:39:37 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:37 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={{0x38, 0x1, 0x7, 0x5, 0x0, 0x44}, 0xffffffff}) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000140)='\x00', &(0x7f00000001c0)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) r7 = openat(r6, &(0x7f0000000080)='./file0\x00', 0x101000, 0x40) perf_event_open(0x0, 0x0, 0x0, r7, 0x2) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r8 = io_uring_setup(0x4a0, &(0x7f0000000000)) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, 0xffffffffffffffff, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) r10 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r8, r10, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1140.444087][T24490] ion_mmap: failure mapping buffer to userspace [ 1140.466911][T24490] device lo entered promiscuous mode [ 1140.485346][T24465] device lo left promiscuous mode [ 1140.603811][T24628] ion_mmap: failure mapping buffer to userspace [ 1140.639746][T24653] ion_mmap: failure mapping buffer to userspace 12:39:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x8, 0x200, 0x100}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x40044103, &(0x7f0000000000)) [ 1140.680220][T24653] ion_mmap: failure mapping buffer to userspace 12:39:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r3, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 1140.770108][T24773] ion_mmap: failure mapping buffer to userspace 12:39:37 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, {0xe4, 0x0, 0x4, 0x20, 0x5e, 0x81}, 0x0, 0x3f}, 0xe) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000000c0)={0xfffffffb, 0x7, 0x80000001, 0x3, 0x602}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x4061f000) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000040)={0x2, 0x95fb, 0x0, 0x5, 0x902, 0x2}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r4, 0x40044104, &(0x7f0000000000)) 12:39:37 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x2) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x401, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000500)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000080)=""/228) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x1], 0x2) 12:39:37 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r2, 0x0, 0x3, 0x3ff, 0x2}) 12:39:37 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0xdaa27821a882286e, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000000)={0x2, 0xf1, "f45f00a50446913794fa86714a3aa25f0914b390d4fdb382d546eb951749fb6ca5c0dde991219e093038f4b4354f643d1b6b8a05190376cfd92084fde8d3e19bb961ad3207ba83195be3cdfc4a27f19ea25af6371cf3f148c95cac76ba5dd96d7c78606e6e886404705ca6c5e74b8f898b0ec9950e76e44b686e49e05e2382d5d8f3f4c0277aec5b4829845ceeb485ac28d47c40a8fa0191933195f5a632a1ae98b26186a96e6a117052d123e226199fc26cf726387d8fd7ccf9c670b46153065516f0fa6953693c241804fad0f986e6d0b515dbddd6f851beb9784a13c71ef06c120fb34000a2aa48961b71e516bc0cd1"}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x40044104, &(0x7f0000000000)) 12:39:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) accept4(r1, 0x0, 0x0, 0x0) 12:39:38 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd03}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r1, 0x201}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="bd30313c", @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf250400000008000500ff07000008000500018000004c000200080002004e22000008000700fb8cffff080007000104000008000e004e2200000800030000000000080002004e2400000800050008000000080006000300000008000300030000002c000300080005007f000001080007004e220000080003000400000008000500e000000108000400050000000c0003000800040006da0000"], 0xa8}, 0x1, 0x0, 0x0, 0x18020}, 0x33aa141c44605564) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/sc\x00', 0x40000000000, 0x21aa01) ioctl(r2, 0x40044104, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000000)={@dev, @dev, @multicast1}, &(0x7f0000000040)=0xc) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000240)={0xa0006, 0x0, [0x9, 0xfffffffffffffffb, 0x6, 0x240, 0x0, 0x10001, 0x4, 0x6]}) [ 1141.322787][T25331] ion_mmap: failure mapping buffer to userspace [ 1141.369649][T25341] ion_mmap: failure mapping buffer to userspace 12:39:38 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7f, 0x200000) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040)) 12:39:38 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/198, 0xc6}) 12:39:38 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r2}, 0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r2) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 1141.644283][T25448] ion_mmap: failure mapping buffer to userspace 12:39:38 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:38 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x12, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x5d) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) 12:39:38 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x100000001) r1 = socket$inet6(0xa, 0x3, 0x20000000021) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r4 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r3, r4}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) r5 = socket$inet6(0xa, 0x3, 0x20000000021) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x100, 0x0) bind$x25(r8, &(0x7f0000000400)={0x9, @null=' \x00'}, 0x12) r9 = openat$md(0xffffffffffffff9c, &(0x7f0000000300)='/dev/md0\x00', 0x208000, 0x0) ioctl$BLKROTATIONAL(r9, 0x127e, &(0x7f0000000340)) r10 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r10, 0x6, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r10, 0x40286608, &(0x7f0000000380)={0xfffffffc, 0x3, 0x37e, 0x2, 0x7, 0xbae}) r11 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r7, r11}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x6010, &(0x7f0000000140)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}, {@aname={'aname', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@debug={'debug', 0x3d, 0x7}}, {@debug={'debug', 0x3d, 0xafc}}, {@version_u='version=9p2000.u'}, {@uname={'uname', 0x3d, 'posix_acl_accessvboxnet0trusted\xa2p-eth1'}}], [{@subj_role={'subj_role', 0x3d, '/dev/swradio#\x00'}}, {@euid_eq={'euid', 0x3d, r4}}, {@fowner_gt={'fowner>', r11}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@dont_hash='dont_hash'}, {@obj_role={'obj_role', 0x3d, '/dev/swradio#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@permit_directio='permit_directio'}, {@audit='audit'}]}}) r12 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$bt_l2cap_L2CAP_LM(r12, 0x6, 0x3, &(0x7f0000000040)=0x11, 0x4) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) [ 1142.273970][T25783] ion_mmap: failure mapping buffer to userspace 12:39:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2) ioctl$TIOCCONS(r0, 0x541d) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r6, 0x5}, 0x8) dup3(r2, r3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f00000000c0)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 12:39:39 executing program 1: timer_gettime(0x0, &(0x7f0000000380)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') r9 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r9, 0xc0046686, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) migrate_pages(r10, 0x9, &(0x7f0000000300)=0x9, &(0x7f0000000340)=0x8) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r8, 0x1, 0x0, 0x0, {0xb}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xe000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r8, 0x0, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x800) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r3, &(0x7f0000000080)=[{{0x0, 0x7530}, 0x5, 0x9}, {{0x0, 0x7530}, 0x15, 0x20, 0x80}, {{r11, r12/1000+10000}, 0x9, 0x9, 0xff}], 0x48) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:39 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1142.637150][T26004] ion_mmap: failure mapping buffer to userspace 12:39:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x6, 0x10000) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000180)=0xffffffff) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) io_uring_enter(r0, 0x3ff, 0x1, 0x1, &(0x7f0000000080)={0xe869}, 0x8) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r2 = io_uring_setup(0x100c8f, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x290}) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r2, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000200)={0x8, 0x8f7, 0x8, {r7, r8+10000000}, 0x1efb, 0xfff}) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1142.749085][T26004] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1142.777429][T26004] ion_mmap: failure mapping buffer to userspace 12:39:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) 12:39:39 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x796, &(0x7f0000000000)) 12:39:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) 12:39:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000002680)={0x28, 0x0, 0x1ffffec77, @host}, 0x10, 0x0) fcntl$notify(r0, 0x402, 0x8000000e) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) writev(r1, &(0x7f0000000200)=[{&(0x7f00000026c0)="5f21ab23da9555c7a6bfbccd7516d4435371f1435373d01a38077e45aaafaf76a20f07a9e88e85218d141a089043936b479570a14e5e2ef3dbd604f5c1d8cb0c6277407ae392a3395b2cbf2763018507f4a0d259edf3f5ba8af581b663f41e0ab07fb8a985bf69a62807b7cc2ea607f160fe0638f0b805df5a2117c3e2216bb56769d9810b1ee322c5b0164f0f95a672d9e51695be3e2d9ba2f354688e2a6f609d95f64db0ffdf3818b413f2cba408967c4728ce83302ab6cf00"/199, 0x3b}, {&(0x7f00000000c0)="4eea82338fbfddebd551c3826e1f", 0xe}, {&(0x7f0000000100)="d2171c20ad37a4b3a1f59c1b295415fe6d3712ff19465df581a9c4a13aab56b68d4585f0437e2ed0fbf5719707ff8b9d317c6cdfd8a65045fdb009407aa1d8a711d07500faf391ca5afe738336ce764a0ce8c98064fcb442566939e043bdd13e9171cd37d5a0e496866565bf9b797fa8bb405e3cb4547646a51ccacb83a068e48d9aeddb3e1aa601641e442b6ccd9135dd559eff56fcd83e7bd590fea6b45397584528827aa1b6902ec838a5befb648b638c2e8a814edece8ce73c6084a72ebe67f59ca98c6634eff1d55947153f7dec109837d71a04187ba8fcaa71bc", 0x254}, {&(0x7f00000002c0)="024f6f54059bebb04be364c3f60659c4fef6baf4aff73f09e14cf9ba7e9314e6c61f485b44e0d4abefdbd1959ae601880a439093a4e9f1f08ff5e79fe74790c2c4b8b395ee2f8b68b80040be3cc09ce8d5a8b2cd80c2063069be8c0880b4c95eb8d802a44ed6f217af50b855231e1f6f9be729bddf15106cb5a028aa2ca4fc42a784b0dc54f9c4b33d2e1eea4e277accfeedd65bdc703ad0a84ba14ac917cd96d410f3df82e8c32e8f4b942e800659672f9c18ba43210033725dd494f614f8f42120fb784f68d0ca4b5e59fd2f2bd184606e3d09697cdd7d05ff5bc3928e58204f08c1e64c", 0xe5}, {&(0x7f00000003c0)="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", 0xfe}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="dedede6873f86e1e3d86f1a5c0258fe478217cee2d7168be8601b0d57fad1999803c77f64641570e71d88647c6a7568e34763c76e017062639ac42f5904cb7b8598120d992822485550b4d18ca1160bf59cb25147bf229eb58aa589b5b79078b02ab4d40f97f10cbc730f93b74646360cea38d0ba33b6cde8ac3f03e91e4e166c7d625c8c50c902d3b580636", 0x8c}, {&(0x7f0000001580)="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", 0xffffffffffffffbe}], 0x8) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) r3 = dup3(r1, r2, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000002580)={0x0, 0x3}, &(0x7f00000025c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000002600)={r7, 0x101}, &(0x7f0000002640)=0x8) socket$can_raw(0x1d, 0x3, 0x1) r8 = syz_open_dev$vcsa(&(0x7f00000027c0)='/dev/vcsa#\x00', 0x0, 0x410440) setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000002800)=0x3, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2, 0x804], 0x2) 12:39:40 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x70, 0x2, 0x0, 0x7, 0xff, 0x0, 0xce, 0x40, 0x15, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0x3ff}, 0x4020, 0x8, 0x80000000, 0x9, 0x1, 0x3b, 0x586e}) ioctl(r0, 0x40044104, &(0x7f0000000000)) [ 1143.250655][T26332] ion_mmap: failure mapping buffer to userspace 12:39:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 12:39:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400000}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:40 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x3912813f4fedb6d1, 0x84) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000100)={'broute\x00', 0x0, 0x3, 0x0, [], 0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)}, &(0x7f0000000180)=0x78) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x5, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x10000}, 0x8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r6, 0xc0106403, &(0x7f0000000280)={0x3ff, 0x96c, 0x9, 0x80000001}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={&(0x7f00000000c0)=[0xfffff801], 0x1, 0x4, 0xfffffffc, 0x1, 0x6d, 0x0, {0x1, 0x0, 0x5, 0x1, 0xfffd, 0x5, 0xe568, 0x55, 0x7, 0x5, 0x6, 0x5, 0x3, 0xa333, "c1673872b42abe55828522d554d5800f3642252f0e5e5753e5c3cc7173f2cd4e"}}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r8 = semget(0x1, 0x4, 0x3) r9 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, 0x0, 0x0) fstat(r9, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r13 = dup(r12) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r13, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r13, 0xc08c5334, &(0x7f0000000400)={0x7, 0xffff, 0x7fff, 'queue0\x00', 0x401}) socket$inet6(0xa, 0x3, 0x20000000021) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r15 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, 0x0, r15}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) r16 = getgid() semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000380)={{0x1, r10, 0xffffffffffffffff, r15, r16, 0x24, 0x1}, 0xffffffffffff8001, 0x9, 0x4}) ioctl(r7, 0x40044104, &(0x7f0000000000)) 12:39:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x5, 0x1000}, 0x4) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r3, r4, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) [ 1143.695066][T26561] ion_mmap: failure mapping buffer to userspace [ 1143.731205][T26566] ion_mmap: failure mapping buffer to userspace [ 1143.767865][T26561] ion_mmap: failure mapping buffer to userspace [ 1143.835422][T26592] ion_mmap: failure mapping buffer to userspace 12:39:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) 12:39:41 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x800, 0x0, 0x7, 0xc, 0x1, 0x0, 0x0, 0x9, 0xfe9, 0x0, 0x8dac, 0x9, 0xfffffffffffffbff, 0xb117, 0x3, 0x9], 0x103000, 0x81000}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f00000002c0)={0x4}) ioctl(r0, 0x9, &(0x7f0000000180)="850bee61da8dedc69ac53c385de303186872f0aceb1a3c83d9e84cf28721684623a661f93ca6e520b095e8065418e293754c108e94c3231fa27faca991e87803f01a1893ad08df96b6f34e6fc23622e22583149b1b2a434c98a45da2670400000047a1ee0f8e437aa57208c60900000062ccab2db8f78fb7822effa15375c884022e8f8189fc9b3ca3397482b2e5a1958e5ec7e48cce") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000140)='syz_tun\x00') fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x3}, 0x28, 0x2) 12:39:41 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x3ab980, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1bd}) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000080)) 12:39:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) 12:39:41 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:41 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000000)={0x100, {{0x2, 0x4e21, @remote}}}, 0x88) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f00000000c0)={0x7, 0xcb0a, 0x968, 0x1}, 0x10) [ 1144.378014][T26902] ion_mmap: failure mapping buffer to userspace 12:39:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) [ 1144.433035][T26902] ion_mmap: failure mapping buffer to userspace [ 1144.445650][T26902] ion_mmap: failure mapping buffer to userspace 12:39:41 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$unix(r3, &(0x7f00000000c0)=""/179, 0xc8, 0x2000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4a24}, 0x196) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r8, 0x0) move_mount(r2, &(0x7f0000000300)='./file0\x00', r8, &(0x7f0000000340)='./file0\x00', 0x25) dup3(r4, r5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000002c0)=0x4) [ 1144.572555][T26956] ion_mmap: failure mapping buffer to userspace 12:39:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) ioctl$KDMKTONE(r3, 0x4b30, 0x80000000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r8, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r8, 0xc0bc5310, &(0x7f00000001c0)) ioctl(r5, 0x40044104, &(0x7f0000000000)) 12:39:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') [ 1144.632838][T26956] ion_mmap: failure mapping buffer to userspace [ 1144.733105][T27048] ion_mmap: failure mapping buffer to userspace [ 1144.804875][T27048] ion_mmap: failure mapping buffer to userspace 12:39:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) [ 1144.846309][ C1] protocol 88fb is buggy, dev hsr_slave_0 12:39:41 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) ioperm(0xc47, 0x1400000000000000, 0xfffffffffffffff9) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = dup(r1) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000580)={{0xa, 0x4e24, 0x8000, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}, 0x8}, {0xa, 0x4e20, 0x7c7e, @rand_addr="305df1e8a10c5ccc4a2516764752a5a7", 0x4}, 0xb8c3, [0x9, 0x5727, 0x1, 0x3eb15408, 0x1, 0xffffffff, 0x6, 0x8001]}, 0x5c) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = dup3(r1, r3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000200)=0x69e80, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000080)={{0x2, 0x0, @descriptor="bf7c84a5ad2413e8"}}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) clone3(&(0x7f00000003c0)={0x8280000, &(0x7f0000000240), &(0x7f00000002c0)=0x0, &(0x7f0000000300), 0x8038, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000340)=""/44}, 0xffffffffffffff19) get_robust_list(r8, &(0x7f0000000500)=&(0x7f00000004c0)={&(0x7f0000000400), 0x0, &(0x7f0000000480)={&(0x7f0000000440)}}, &(0x7f0000000540)=0x18) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000100)={0x3, 0x0, @ioapic={0x2000, 0x5, 0x80000000, 0x0, 0x0, [{0xe1, 0x7f, 0x9, [], 0x71}, {0x0, 0x3, 0x2, [], 0x80}, {0x6, 0x7, 0x80, [], 0xd1}, {0x5, 0x7, 0x5, [], 0x3e}, {0x87, 0x3f, 0x0, [], 0xe0}, {0x0, 0x20, 0x3, [], 0x81}, {0x1, 0x3, 0x9, [], 0x5}, {0xf9, 0x20, 0x6, [], 0x93}, {0x0, 0x7f, 0x20, [], 0xff}, {0x6, 0x40, 0x0, [], 0x3}, {0x20, 0x3, 0x3, [], 0x6}, {0x4, 0x5, 0xff, [], 0xb2}, {0x2, 0x4, 0x2, [], 0x7f}, {0x8, 0x4, 0x2, [], 0x3}, {0x5, 0x8, 0xff, [], 0x3f}, {0x84, 0x0, 0x1f}, {0x80, 0xa1, 0x20}, {0x84, 0x1, 0x20, [], 0x4}, {0x3, 0x81, 0x1f, [], 0x1}, {0x3, 0x9, 0x6, [], 0x9}, {0x5, 0x6, 0x5, [], 0x6}, {0x4, 0xda, 0x8, [], 0x3}, {0x83, 0x8a, 0x20, [], 0x62}, {0x9c, 0x89, 0x80, [], 0x73}]}}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:41 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1144.896035][T27048] ion_mmap: failure mapping buffer to userspace [ 1145.006408][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1145.012263][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:39:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) 12:39:42 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x800, 0x18200) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:42 executing program 1: ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x34}) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12:39:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') 12:39:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) socket$inet6(0xa, 0x1, 0x8010000000000084) 12:39:42 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r1, r2, r3) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r4) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, r4) keyctl$negate(0xd, r1, 0x7, r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, @in6={0xa, 0x4e23, 0x8, @mcast1, 0x2}], 0x38) 12:39:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) 12:39:42 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:43 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0xb, 0x3a, 0x8, 0x1c, 0x8, 0x6, 0x4, 0x4e, 0x1}}) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r1, r5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:43 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:43 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x9, 0x8000, 0x2, {0x77359400}, 0x1, 0x1}) ioctl(r0, 0x40044104, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000000c0)=""/125) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0xfffffffffffffeee) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46011f070104000000000000000200060008000000f80200000000000040000000000000000a00000000000000f9ffffffa3583800010000000200e4000100000009000000ff00000000000000d100000000000000000200000000000000070000000000000003000000000000004fb5008b00"/1909], 0x77c) 12:39:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) [ 1146.304338][T27483] ion_mmap: failure mapping buffer to userspace 12:39:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:43 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) io_uring_setup(0x4a0, &(0x7f0000000000)) r0 = io_uring_setup(0x4a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x2a2}) clone3(&(0x7f0000000180)={0x400, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140), 0x1a, 0x0, &(0x7f00000002c0)=""/132, 0x84, &(0x7f0000000380)=""/205}, 0x40) process_vm_readv(r1, &(0x7f0000001980)=[{&(0x7f0000000480)=""/253, 0xfd}, {&(0x7f0000000580)=""/72, 0x48}, {&(0x7f0000000600)=""/208, 0xd0}, {&(0x7f0000000700)=""/103, 0x67}, {&(0x7f0000000780)=""/68, 0x44}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/115, 0x73}, {&(0x7f0000001880)=""/202, 0xca}], 0x8, &(0x7f0000002b80)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/150, 0x96}, {&(0x7f0000002ac0)=""/138, 0x8a}, {&(0x7f0000000240)=""/50, 0x32}], 0x4, 0x0) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x6c197bb339f7d4a4}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000080)) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r5}, 0xc) capget(&(0x7f0000002bc0)={0x19980330, r5}, &(0x7f0000002c00)={0xa86, 0x8, 0x6, 0x7fff, 0x0, 0x1}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x2) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 12:39:43 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:43 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) dup3(r1, r0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:43 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet, &(0x7f0000000080)=0x80, 0x1800) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f00000000c0)={0x401, 0xb1a, 0x4, @dev={[], 0x21}, 'veth1_to_hsr\x00'}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x40044104, &(0x7f0000000000)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) 12:39:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) connect$ax25(r2, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) recvfrom$ax25(r2, &(0x7f0000000300)=""/21, 0x15, 0x20, &(0x7f0000000340)={{0x3, @bcast, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @null, @bcast]}, 0x48) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r8, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1}) r10 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r10, 0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0xb291077c2bb9f259, 0x70, 0x20, 0x4, 0x8d, 0x6, 0x0, 0x9, 0x10, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f00000005c0), 0x8}, 0x4c1, 0x5, 0x85d, 0x6, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x2) r11 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r11, 0x6, 0x0, 0x0) r12 = dup(r11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r12, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r12, 0x84, 0x13, &(0x7f0000000580)=0x10000, 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000400), &(0x7f0000000540)=0xb) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r14 = dup(r13) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r14, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000480)={[0x5, 0x0, 0x3, 0x200000000000000, 0x9, 0xd5, 0x3ff, 0x9, 0x6, 0xedae, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x2], 0x2000, 0x100}) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r16 = dup(r15) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r16, 0x0) fsetxattr$security_ima(r3, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@md5={0x1, "124d921c6b10ab61c6586124761076af"}, 0x11, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) r17 = creat(&(0x7f00000003c0)='./file0\x00', 0x40) sendmsg$rds(r17, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x20000000}, 0x4) ioctl(0xffffffffffffffff, 0x40044104, &(0x7f00000000c0)="e0cc3506398cdadcfe580f3bcefbc6c6884345f0dc83133526ec09cf95c2ef105463d582eddd988fadca32c0448d19b78e03cfd74163fb3b6a91ddaa7e891ada92cc67ff146f8942d8d1b34103685a7bd9cb8b71a9afe6458fd85684884c83bd9651db5d461e16ac20c474b1060a1808cd3ede5d1fcfa80e2603cb59ea25b126e2105e1167115e3aa36357a42c1590aad2550e02dd2fd4") 12:39:44 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0x8000, 0x1}) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xf9}, 0x1) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) prctl$PR_MCE_KILL_GET(0x22) dup3(r4, r5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000100)=[0x4, 0x100], 0x800001f4) [ 1147.213766][T27960] ion_mmap: failure mapping buffer to userspace 12:39:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) [ 1147.287521][T27960] ion_mmap: failure mapping buffer to userspace [ 1147.308769][T27967] ion_mmap: failure mapping buffer to userspace 12:39:44 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) [ 1147.377207][T27960] ion_mmap: failure mapping buffer to userspace [ 1147.388002][T27960] ion_mmap: failure mapping buffer to userspace 12:39:44 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd030000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1147.538577][T27960] ion_mmap: failure mapping buffer to userspace 12:39:44 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:44 executing program 0: perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xbd4a7e0b44ac8d16) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000200)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r6}, 0x14) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r9, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x300, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r12, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r12, 0x4008240b, &(0x7f0000000100)={0x5, 0x70, 0x2, 0x3, 0x2, 0x40, 0x0, 0x3, 0xaf98dfdaea12a120, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10, 0x4, 0x1f, 0x5, 0x36, 0x5, 0x200}) setsockopt$inet6_dccp_int(r9, 0x21, 0x10, &(0x7f0000000080)=0x2, 0x4) 12:39:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x40044104, &(0x7f0000000000)) 12:39:44 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) [ 1147.802557][T28208] ion_mmap: failure mapping buffer to userspace [ 1147.827450][T28208] ion_mmap: failure mapping buffer to userspace 12:39:44 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x2000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) write$nbd(r3, &(0x7f0000000000)={0x67446698, 0x0, 0x0, 0x4, 0x1}, 0x10) ioctl(r0, 0x40044104, &(0x7f0000000000)) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) connect$unix(r4, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 12:39:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:44 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) socket(0xa, 0x1000, 0x7f) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f0000000080)) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000140)=0x1) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r8, 0x0) getsockopt$inet6_tcp_int(r8, 0x6, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r11, 0x0) getsockopt$sock_timeval(r11, 0x1, 0x91b9f79753fc8260, &(0x7f00000001c0), &(0x7f0000000200)=0x10) [ 1147.981965][T28418] ion_mmap: failure mapping buffer to userspace [ 1147.999361][T28419] ion_mmap: failure mapping buffer to userspace 12:39:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="3b000000060000000000000000000000040000000000000003000000000000001200000000002f6465762f736e642f70636d432344866300000000"], 0x3b) 12:39:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:45 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) [ 1148.261203][T28538] ion_mmap: failure mapping buffer to userspace [ 1148.283038][T28538] ion_mmap: failure mapping buffer to userspace 12:39:45 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000040)) 12:39:45 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) [ 1148.555162][T28647] ion_mmap: failure mapping buffer to userspace [ 1148.575585][T28650] ion_mmap: failure mapping buffer to userspace 12:39:45 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x440100, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) getsockname$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x21837ddb) 12:39:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) [ 1148.718987][T28656] ion_mmap: failure mapping buffer to userspace [ 1148.763544][T28656] ion_mmap: failure mapping buffer to userspace 12:39:45 executing program 1: mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pipefs\x00', 0x40000, &(0x7f00000000c0)='lo,GPL\x00') r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:46 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8000, 0x27210fbb, 0xfb}) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) r3 = dup3(r1, r2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080)=0x7, 0x4) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:46 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000000)={0x1, 0x3}) 12:39:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:46 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) [ 1149.339439][T28677] ion_mmap: failure mapping buffer to userspace [ 1149.368632][T28677] ion_mmap: failure mapping buffer to userspace 12:39:46 executing program 1: r0 = socket(0x5, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x44f, 0x6, 0x4e, 0x80000000}, {0x2, 0x0, 0x0, 0x7ff}, {0x8000, 0x0, 0x7f, 0x6}]}, 0x10) recvfrom$inet6(r0, &(0x7f0000000000)=""/188, 0xbc, 0x100, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @rand_addr="8ec30eb64851067fa613da81e98837c5", 0x44}, 0x1c) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x40044104, &(0x7f0000000000)) 12:39:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:46 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x80004a0, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x1, 0x5}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:46 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x100000000, &(0x7f0000000000)="1d7d003b11503cd0e9") 12:39:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(0x0, 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:46 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:46 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = epoll_create1(0x80000) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(0x0, 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:46 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x49e, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000080)) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r4, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000380)) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r9, 0x4054561e, &(0x7f0000000300)={0x1, "3ad463e65da55172ac8dd4252ae24c57194f943cf9bc710691a9c4ef45c246db", 0x3, 0x100, 0xdb7c, 0x8000, 0x1, 0x4, 0x7, 0xc8ac}) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r11, 0x0) ioctl$PPPIOCGIDLE(r11, 0x8010743f, &(0x7f0000000240)) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r13 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r13, 0x6, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r12, 0x6, &(0x7f0000000200)={0x57b4, &(0x7f00000001c0)=[r13]}, 0x1) 12:39:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(0x0, 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:47 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x4000000000, 0x80) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) r5 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x20000) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x80, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r8, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000140)='}^ppp1wlan1em1-\x00', &(0x7f00000001c0)='./file0\x00', r8) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f00000000c0)=0x8, 0x4) ioctl(r1, 0x40044104, &(0x7f0000000000)) [ 1150.086650][T28924] ion_mmap: failure mapping buffer to userspace 12:39:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) [ 1150.181495][T28957] ion_mmap: failure mapping buffer to userspace [ 1150.204077][T28957] ion_mmap: failure mapping buffer to userspace [ 1150.258638][T29036] ion_mmap: failure mapping buffer to userspace [ 1150.280595][T28957] ion_mmap: failure mapping buffer to userspace 12:39:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:47 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x4, r3}) 12:39:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) [ 1150.583865][T29146] ion_mmap: failure mapping buffer to userspace [ 1150.607416][T29146] ion_mmap: failure mapping buffer to userspace 12:39:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:47 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = msgget$private(0x0, 0x100) msgsnd(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="000000068e69a04d0ba660ac2dd4c033384b046a6c5c09ab856cdb58010833b56faa4d066274809ce954e40ca10df6c912bd367e"], 0x32, 0xc00) dup3(r0, r1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) r6 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4}) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r11, 0x0) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f00000005c0)=0xe8) syz_mount_image$exfat(&(0x7f00000001c0)='exfat\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000300)="5841369970ff3692a0bf45adc16073971b8e2388c928d3ecd9584a47cd5b1ca5f7c81d37bfebf61d91263893652dba9d8bd40af7350e5e881943f167960ce113bd8be312a2f1f0e62c20d1fcec48c3debcfccdadf57a", 0x56, 0xc}, {&(0x7f0000000380)="8fc8cae1e60ea81b3ddad662", 0xc, 0x4}], 0x4c40, &(0x7f0000000600)={[{@dmask={'dmask', 0x3d, 0x40}}, {@discard='discard'}, {@gid={'gid', 0x3d, r8}}, {@uid={'uid', 0x3d, r12}}, {@codepage={'codepage', 0x3d, 'cp863'}}, {@codepage={'codepage', 0x3d, 'cp861'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'wlan1vmnet1$@:eth1posix_acl_access+wlan1'}}]}) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r13, 0x40045569, 0xa3c) r14 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r14, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r15}, 0xc) ptrace$setopts(0xffffffffffffffff, r15, 0x20, 0x1) r16 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r16, 0x40045569, 0xa3c) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000003f40)=ANY=[@ANYBLOB="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", @ANYRES32=r13, @ANYRESOCT=r16, @ANYRES64=r7], 0x1023}}, 0xfffffffffffffff9) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @mcast2, 0x1}, r7}}, 0x30) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1150.796894][T29154] ion_mmap: failure mapping buffer to userspace [ 1150.817535][T29154] bridge0: port 3(gretap0) entered blocking state [ 1150.834239][T29154] bridge0: port 3(gretap0) entered disabled state 12:39:47 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, 0x0, &(0x7f00000003c0)='y\x00', 0x2, 0x2) [ 1150.872087][T29154] device gretap0 entered promiscuous mode [ 1150.885400][T29154] bridge0: port 3(gretap0) entered blocking state [ 1150.891939][T29154] bridge0: port 3(gretap0) entered forwarding state 12:39:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, 0x0, &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:48 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000002c0)=""/4096) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000080)=0x7, 0x4) 12:39:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, 0x0, &(0x7f00000003c0)='y\x00', 0x2, 0x2) [ 1151.250405][T29373] ion_mmap: failure mapping buffer to userspace 12:39:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x2) 12:39:48 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x754, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x2, 0x22d}) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 12:39:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 12:39:48 executing program 0: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0xee00) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000100)) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 12:39:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, r1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000000), 0x4) getpid() readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) 12:39:48 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, r1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000000), 0x4) getpid() readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) getsockopt$netlink(r2, 0x10e, 0x0, &(0x7f0000000040)=""/233, &(0x7f0000000140)=0xe9) 12:39:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x3, 0x108000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, r1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000000), 0x4) getpid() readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) 12:39:49 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:49 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x20, 0x0, 0xcc}) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) pwrite64(r2, &(0x7f00000003c0)=' ', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x10076) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000001300)={0x2880008, r2, 0x0, 0xa}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) connect$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="182fee12bc0d329052991577418103a4054f951a184924494a45fb060495ec993ff1a91c8e1fd82cd5f83f115e", 0x2d}, 0x1, 0x0, 0x0, 0x10}, 0x24008040) ioctl(r1, 0x1000008912, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, &(0x7f0000000080)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @multicast2}}, 0x20) 12:39:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x11, r1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000000), 0x4) getpid() readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) getsockopt$netlink(r2, 0x10e, 0x0, &(0x7f0000000040)=""/233, &(0x7f0000000140)=0xe9) 12:39:50 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:50 executing program 4: 12:39:50 executing program 4: 12:39:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:50 executing program 4: 12:39:50 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:50 executing program 4: 12:39:50 executing program 4: 12:39:51 executing program 4: 12:39:51 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, 0x0, 0x0) 12:39:51 executing program 0: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) sendmsg$key(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0, 0x3e00000000000000}, 0x10) read$eventfd(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) 12:39:51 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:51 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 12:39:51 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x20) 12:39:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) socketpair$unix(0x1, 0x0, 0x0, 0x0) 12:39:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 12:39:52 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0xb, 0x3a, 0x8, 0x1c, 0x8, 0x6, 0x4, 0x4e, 0x1}}) r5 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r1, r5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) [ 1155.201233][T30785] ion_mmap: failure mapping buffer to userspace 12:39:52 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd03000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) 12:39:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) 12:39:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) 12:39:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) 12:39:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) 12:39:52 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) 12:39:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 12:39:53 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) 12:39:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) 12:39:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 12:39:53 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) 12:39:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) 12:39:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) 12:39:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) accept4(r1, 0x0, 0x0, 0x0) 12:39:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r2, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) accept4(r1, 0x0, 0x0, 0x0) 12:39:54 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1eb5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x7, "c057a4f08db49470e6b152ad5c0b44cef5dc2caea010bf04d1d605065b6dfa07", 0x0, 0xe205c3d767410aa}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') openat$cgroup_ro(r3, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 12:39:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:55 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2d0000011f6e9b523de62f7a1859972d6609e8dc60147a10a68c831622a81d600217cb60ed6f1feeb7369b9f22041e872fe8884099a90438365a620faf9abe5891e892502d91725ecece93557c41743c9d9ee6fa85cc161b8664d4a3108da0611281528d65fff894269ced351e8efbabab11c55924acd35f140bede5d191b7246f71818fe08d921fe1b53e006268688c890a5f2ce3d29a55d38f5da8bed2", @ANYRES16=r6, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r9, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r12, 0x0) r13 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r13, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r15 = dup(r14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r15, 0x0) r16 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r16, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r18 = dup(r17) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r18, 0x0) r19 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r19, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r21 = dup(r20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r21, 0x0) r22 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r22, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r24 = dup(r23) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r24, 0x0) recvmmsg(r24, &(0x7f0000001940), 0x3, 0x40000100, 0x0) r25 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r25, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r27 = dup(r26) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r27, 0x0) r28 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r28, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r30 = dup(r29) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r30, 0x0) r31 = openat$null(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/null\x00', 0x3812f92176c19be, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000001b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240000}, 0x1f9, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="00042dbd7000fedbdf25020000000c000600030000000000000008000100000000005cfe070008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r27, @ANYBLOB='\x00\x00\x00 ', @ANYRES32=r30, @ANYBLOB="08000100", @ANYRES32=r31, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="0c0002000000000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:55 executing program 5: r0 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000200)=""/33, &(0x7f0000000280)=""/197, &(0x7f0000000380)=""/80, 0x2}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000140)={{0xe5, 0x7}, {0x20}, 0x7f, 0x1, 0x80}) ioctl(r1, 0x40084149, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x1f9e}) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x18025000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[]}}, 0x20000801) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='/dev/radio#\x00') ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000100)={r4, r5}) 12:39:55 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_setup(0x4a0, &(0x7f0000000000)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x804010}, 0xc) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1158.874846][T31091] ion_mmap: failure mapping buffer to userspace 12:39:55 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1158.928352][T31266] ion_mmap: failure mapping buffer to userspace 12:39:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:55 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2d0000011f6e9b523de62f7a1859972d6609e8dc60147a10a68c831622a81d600217cb60ed6f1feeb7369b9f22041e872fe8884099a90438365a620faf9abe5891e892502d91725ecece93557c41743c9d9ee6fa85cc161b8664d4a3108da0611281528d65fff894269ced351e8efbabab11c55924acd35f140bede5d191b7246f71818fe08d921fe1b53e006268688c890a5f2ce3d29a55d38f5da8bed2", @ANYRES16=r6, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r9, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r12, 0x0) r13 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r13, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r15 = dup(r14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r15, 0x0) r16 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r16, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r18 = dup(r17) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r18, 0x0) r19 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r19, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r21 = dup(r20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r21, 0x0) r22 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r22, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r24 = dup(r23) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r24, 0x0) recvmmsg(r24, &(0x7f0000001940), 0x3, 0x40000100, 0x0) r25 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r25, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r27 = dup(r26) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r27, 0x0) r28 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r28, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r30 = dup(r29) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r30, 0x0) r31 = openat$null(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/null\x00', 0x3812f92176c19be, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000001b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240000}, 0x1f9, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="00042dbd7000fedbdf25020000000c000600030000000000000008000100000000005cfe070008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r27, @ANYBLOB='\x00\x00\x00 ', @ANYRES32=r30, @ANYBLOB="08000100", @ANYRES32=r31, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="0c0002000000000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) ioctl(r0, 0x40044104, &(0x7f0000000000)) 12:39:56 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/52, 0x34}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r2 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x8000, 0x4) fdatasync(r2) [ 1159.192731][T31509] ion_mmap: failure mapping buffer to userspace 12:39:56 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000001c00)=0x0) ptrace$getenv(0x4201, r7, 0x9, &(0x7f0000001c40)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000001bc0)=0x1e) sendmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000000)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="4a8c49b3b077b4523b10d7763857d2cde101f773e4a51d31be8e29e988248493b339", 0x22}, {&(0x7f00000000c0)="300e801e55adfc652b894a9951bd893a0a566f8524c1fec4e6ae387865592ca896592f21efc70394ad736ea3aa", 0x2d}], 0x2, &(0x7f0000000280)=[{0x60, 0x111, 0x9, "01862c27eacc277a96c7b7591a71b8b23c0e801419eb163fbe9d08541c033fb8d6a566406c3d05c735ef98c0ac213cf7e85255b57d0e231279e7aed92efa72d1734b55450fe22c6a49cd7c19"}, {0xf8, 0x11, 0x7, "17352e4f4927ac29fdc329ceb349296056657d1f64145ffb61d278e466b4d912b8e4265d4400175b581383fcef11278465f7b65efd879c1899b3d7a68f2dd1db774b0c2ca15719b6684094ef6e13699e873776cbbf81fab75403a65455343731af7fda1c465a51b7d4834b195a62f11275ffbdd33b003fe797fa22f03bd02398aae6f62d08c9db3f409e6cb6dd34916c737b401078e338194a314688ebcce6e8f78164916408cd2c9684c1e525957ae639c456989c2d487926961ab3da60a14b98185e78b78a4f4ff0d36e8413dfd9d33bfad03a81af61b5d222f92d587d600b4a"}, {0x78, 0x0, 0x80000001, "30d37a8a6dcaf3ba1438aa1074e7560563a7e1179f7268bf0434b40a37f04bf7401b3bab8c7f3d78b7b75b579b0c28f357dc7be4532913e100df428a7c15a3f1f5124d28a8ca34c6908add8ba50d77d12b46bc2dac839ade0c376656149d57d69b89686c69ff1a21"}, {0x110, 0xe840a3e114473cde, 0x2, "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"}], 0x2e0}}, {{&(0x7f0000000140)=@nl=@unspec, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="1a94f443721fa54898b1d93eba373df00f5d354a2b385790c5998db8592c8825800fa00dae4cad5e1bc2b89aca2f0b01aac8c822ad9a82c19053763fcf241f6daaae48da1c369ee4de4affbe7164a118811807c160105590a9cb563251e3a4ca4fe615a3f24123275db30a3fc4dd8f3135c31436371e35c143d9f493a29accf9df0dcb27b478e774b2e20b4057460dc6314aa61e56b3cc30b58fd6192871", 0x9e}, {&(0x7f0000001640)="269904e96adb3241dd8db0c2806eb4dce755be5212345e7566c9889b45c21888dc98aff8d9c0fd649514297b9960a85af0fb0652c4d497bb9816cb5d1e926a9e9a455c2eb9240d01ce06ed23a06526e085825f70d64673ec42bd8428b1a155e1ce9cb2f8ffb5e9900441155da15a292e7f3f9871ef847e4574d30db9cc47728b42868feb2977f85c6570b8b1c82b67b0ec6ee9bbd383f9d91b5d7488429be04bf84d517465021fcd0ffedd6fcaa1dd41ab366d437191b453a95d85b6169b65547cfd4f4f", 0xc4}], 0x3, &(0x7f0000001740)=[{0x50, 0x113, 0x6, "0b61bd2110a91c12014a9726cc1228d7e82973842dbe76acd609b6009c9c02c14bbbf630f5484cbf78a7d4394d3bfb796a040dd94acd9240c23b250f4aaf6e"}], 0x50}}, {{&(0x7f00000017c0)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000001840)=[{0xc8, 0x96, 0x1, "9e801d8829d1d6e9225f7925342d21b0b340448aa86a5ac87e43fb8049ace977fba8c25c99d944a9cebe5970a30be159cec1d0915982631343bea2270a622699666fccea823ca10975f503afee92f6080a823bc4cdca53932f009f1a135eceb9303bd68f5f7dfd4f69eabe7c3769bb7236eea98ce9b92a652de817bdf307abc28ac62988a7bc4b46670c9b761eaa1638f9b39fe1d0c34fa6f8a52cec2d1254e5db24f831a88ea27c4e27f897a49a6925f4b026ec9f80"}, {0x18, 0x10f, 0xf1e, "e58edde4c7cf9c"}, {0x48, 0x109, 0xfffffffa, "710c2198140f67c93f0735381feb518081e08109c64bfb400fa00304d37365f7f81e3c8337bfd10c5af7602e2ed3d130fe8dd1"}, {0x98, 0x118, 0x101, "645c13b476d221f994e9090905719356be06e0c19206df40436234c510aba09c1c963ddabdf83af3d04c66d155d4149466f13dfc2a0f1bc1b97400c0dec29d850f903d700f6219a31414727c8b69f2110a41b79550b32951bb68409c56e333d645480e01917e4760d661973ab1ce60981067ff9f393aa1e4046592ed4919b152ffa019b0b71fbd63"}, {0xe0, 0x6, 0x7, "9c6b036d2e6e880d5d4d322c985d33c85cb27b2b97c33881dc145c61f4977e53d424aa46c044f6376246621689336a3bb738081933db87a66ec269ea89919a16b1188356361f10e651097fcf46b864a858c8ab7c4b79bab7bc760dbbd40f01fab969f87a68b519581a6f080367200c2b77f7d5d7e1c71a9eb54a5f75b2b337d2ebe8ff000c2fcb060cf3bc38bb52f3671b136af37af501399be184fdba2408750e354249f7ceb8e6d4764e7339e16ca7e42c5005f9ac85b72b9f41fb4bc756e67960cf89884dd135c426"}], 0x2a0}}], 0x3, 0x10) [ 1159.284815][T31509] ion_mmap: failure mapping buffer to userspace 12:39:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1159.331410][T31509] ion_mmap: failure mapping buffer to userspace [ 1159.389063][T31509] ion_mmap: failure mapping buffer to userspace [ 1159.419212][T31619] ion_mmap: failure mapping buffer to userspace [ 1159.451199][T31509] ion_mmap: failure mapping buffer to userspace [ 1159.467420][T31619] ion_mmap: failure mapping buffer to userspace 12:39:56 executing program 5: r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$usbfs(&(0x7f0000000440)='/dev/bus/usb/00#/00#\x00', 0x2, 0x20a041) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r8}, 0xc) r9 = socket$inet6(0xa, 0x3, 0x20000000021) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x34b) r12 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r11, r12}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) r13 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r15) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r13, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x3}, [{0x8, 0xc, r14}, {0x8, 0x4}, {0x8, 0x4, r15}, {0x8, 0x6, r16}], {}, {0x20, 0x7}}, 0x44, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="92f70cebde", 0x5}, {&(0x7f0000000100)="64d4dda4c79af404b895c984a84350afce50a1ba8aae53dbc4f9a6e3baa185f9966ec40976a08e53486352de101e511e3815205d2233cec74dafad74796da823a53e35e04a95efc610658c1d8b843b9ee9b805c8cb3fb2b99604a984b2aa2d4658e5e64404370a8bf0cec0d4a8c45dd2e2bdaa0958cb0cfcea57c2507cfe703d", 0x80}, {&(0x7f0000000180)="b4adbb95282a543ba68479d1b54c97b4a48033d279811eafcd5ce24379d693c1657d093627665f41f877f31f39f26ce0a2a1fc8b", 0x34}], 0x3, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r8, r12, r14}}}], 0x78, 0x20000000}, 0x4000890) r17 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r17, 0x40084149, &(0x7f0000000000)) [ 1159.519422][T31509] ion_mmap: failure mapping buffer to userspace 12:39:56 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x20000000021) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r4 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r3, r4}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x3, &(0x7f0000000280)=[{&(0x7f0000000080)="d3a8f9583e923deab9baa2555e362b76e48207050cc810faf3f46000387610a38fd17f3abdb8088306cadfc9bd8c1d98e8c0ef34f9e7cbe2be5bb278c75d9bfa86ae0e71e017b282fefbaea8eec06370597441099d5b1c59ef1e4334501434b492c8e8c21c0527423f2c715ae4d009238841b32984fdf9f32941c5fb846e6d0b54b30f9561fb4c44585bcd484d586c879c5afabf5ead7d85d86e2a67772277286b53d73a1128462ebb3874771bbcade26b86edc58b623723ba21858be252114af2a61a2463fb", 0xc6, 0xff}, {&(0x7f0000000180)="3cc2a1fb318a30fed4581da209035bc9699687b806e6e1bc90155e999e8a37af4079e29936bcdbf2", 0x28, 0xfffffffffffffff6}, {&(0x7f00000001c0)="548ce9", 0x3, 0x4}], 0x4080, &(0x7f0000000300)=ANY=[@ANYBLOB="6c617a7974696d652c7377696474683d3078303030303030303030303030303030392c6e6f67727069642c696e6f646536342c6e6f6c617a7974696d652c7375626a5f747970653d25776c616e312c736d61636b66737472616e736d7574653d76626f786e6574315d2c6f626a5f747970653d2a2c646f6e745f6d6561737572652c686173682c7365636c6162656c2c646f6e745f686173682c6575e9643e", @ANYRESDEC=r4, @ANYBLOB=',permit_directio,\x00']) ioctl(r0, 0x40044104, &(0x7f0000000000)) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000200), &(0x7f0000000500)=0x4) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0', [{0x20, '/dev/snd/pcmC#D#c\x00'}, {0x20, '/dev/snd/pcmC#D#c\x00'}, {0x20, '/dev/snd/pcmC#D#c\x00'}, {}, {}], 0xa, "cf74b10c2b15b6d98ff51ed339c982d24e3a8f0e21532369c514bea8696305409327a6133175a03affc9ef1967792ab719681cff2ae0a88a972341f51a3c377802f007402618ac4aad2fb7616271539214d1b2e8a486134e08c846f714e23cd91e4ba921f2e2f7508709d599a2b873c500ea5c21cd7949dd2851770757c00f22459100969b224d9a46e7351b59ba76c01f2a8c"}, 0xd9) [ 1159.597147][T31509] ion_mmap: failure mapping buffer to userspace 12:39:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1159.640927][T31509] ion_mmap: failure mapping buffer to userspace [ 1159.653279][T31629] xfs: Unknown parameter 'subj_type' [ 1159.670275][T31509] ion_mmap: failure mapping buffer to userspace 12:39:56 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)=""/123, 0x83}], 0x10000000000001c4, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:56 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x20000000021) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r4 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r3, r4}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x3, &(0x7f0000000280)=[{&(0x7f0000000080)="d3a8f9583e923deab9baa2555e362b76e48207050cc810faf3f46000387610a38fd17f3abdb8088306cadfc9bd8c1d98e8c0ef34f9e7cbe2be5bb278c75d9bfa86ae0e71e017b282fefbaea8eec06370597441099d5b1c59ef1e4334501434b492c8e8c21c0527423f2c715ae4d009238841b32984fdf9f32941c5fb846e6d0b54b30f9561fb4c44585bcd484d586c879c5afabf5ead7d85d86e2a67772277286b53d73a1128462ebb3874771bbcade26b86edc58b623723ba21858be252114af2a61a2463fb", 0xc6, 0xff}, {&(0x7f0000000180)="3cc2a1fb318a30fed4581da209035bc9699687b806e6e1bc90155e999e8a37af4079e29936bcdbf2", 0x28, 0xfffffffffffffff6}, {&(0x7f00000001c0)="548ce9", 0x3, 0x4}], 0x4080, &(0x7f0000000300)=ANY=[@ANYBLOB="6c617a7974696d652c7377696474683d3078303030303030303030303030303030392c6e6f67727069642c696e6f646536342c6e6f6c617a7974696d652c7375626a5f747970653d25776c616e312c736d61636b66737472616e736d7574653d76626f786e6574315d2c6f626a5f747970653d2a2c646f6e745f6d6561737572652c686173682c7365636c6162656c2c646f6e745f686173682c6575e9643e", @ANYRESDEC=r4, @ANYBLOB=',permit_directio,\x00']) ioctl(r0, 0x40044104, &(0x7f0000000000)) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000200), &(0x7f0000000500)=0x4) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0', [{0x20, '/dev/snd/pcmC#D#c\x00'}, {0x20, '/dev/snd/pcmC#D#c\x00'}, {0x20, '/dev/snd/pcmC#D#c\x00'}, {}, {}], 0xa, "cf74b10c2b15b6d98ff51ed339c982d24e3a8f0e21532369c514bea8696305409327a6133175a03affc9ef1967792ab719681cff2ae0a88a972341f51a3c377802f007402618ac4aad2fb7616271539214d1b2e8a486134e08c846f714e23cd91e4ba921f2e2f7508709d599a2b873c500ea5c21cd7949dd2851770757c00f22459100969b224d9a46e7351b59ba76c01f2a8c"}, 0xd9) 12:39:56 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:56 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000040)=""/151, 0x97}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f0000000180)=""/123, 0x7b}, {&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/193, 0xc1}], 0x8, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000006c0)={0x7, &(0x7f0000000200)=[0x5, 0x3, 0x6, 0x7, 0x5, 0x6, 0x4]}) 12:39:56 executing program 0: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1160.161269][T32149] xfs: Unknown parameter 'subj_type' 12:39:57 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x20000000021) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r4 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r3, r4}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x3, &(0x7f0000000280)=[{&(0x7f0000000080)="d3a8f9583e923deab9baa2555e362b76e48207050cc810faf3f46000387610a38fd17f3abdb8088306cadfc9bd8c1d98e8c0ef34f9e7cbe2be5bb278c75d9bfa86ae0e71e017b282fefbaea8eec06370597441099d5b1c59ef1e4334501434b492c8e8c21c0527423f2c715ae4d009238841b32984fdf9f32941c5fb846e6d0b54b30f9561fb4c44585bcd484d586c879c5afabf5ead7d85d86e2a67772277286b53d73a1128462ebb3874771bbcade26b86edc58b623723ba21858be252114af2a61a2463fb", 0xc6, 0xff}, {&(0x7f0000000180)="3cc2a1fb318a30fed4581da209035bc9699687b806e6e1bc90155e999e8a37af4079e29936bcdbf2", 0x28, 0xfffffffffffffff6}, {&(0x7f00000001c0)="548ce9", 0x3, 0x4}], 0x4080, &(0x7f0000000300)=ANY=[@ANYBLOB="6c617a7974696d652c7377696474683d3078303030303030303030303030303030392c6e6f67727069642c696e6f646536342c6e6f6c617a7974696d652c7375626a5f747970653d25776c616e312c736d61636b66737472616e736d7574653d76626f786e6574315d2c6f626a5f747970653d2a2c646f6e745f6d6561737572652c686173682c7365636c6162656c2c646f6e745f686173682c6575e9643e", @ANYRESDEC=r4, @ANYBLOB=',permit_directio,\x00']) ioctl(r0, 0x40044104, &(0x7f0000000000)) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000200), &(0x7f0000000500)=0x4) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0', [{0x20, '/dev/snd/pcmC#D#c\x00'}, {0x20, '/dev/snd/pcmC#D#c\x00'}, {0x20, '/dev/snd/pcmC#D#c\x00'}, {}, {}], 0xa, "cf74b10c2b15b6d98ff51ed339c982d24e3a8f0e21532369c514bea8696305409327a6133175a03affc9ef1967792ab719681cff2ae0a88a972341f51a3c377802f007402618ac4aad2fb7616271539214d1b2e8a486134e08c846f714e23cd91e4ba921f2e2f7508709d599a2b873c500ea5c21cd7949dd2851770757c00f22459100969b224d9a46e7351b59ba76c01f2a8c"}, 0xd9) 12:39:57 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000140)=0x1, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000100)=0x7fff) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000000)={0x10, 0x7, {0x55, 0x20, 0x6, {0x7, 0x7}, {0x4be0, 0xfffa}, @cond=[{0x8001, 0x400, 0x8, 0x40, 0x8000}, {0x0, 0xfffc, 0x2, 0x400, 0x37d, 0x8001}]}, {0x54, 0x2, 0x0, {0x9}, {0x7, 0xdc38}, @cond=[{0x7fff, 0xffff, 0x9, 0x800, 0x0, 0x8001}, {0x4, 0x5, 0x1, 0x624, 0x20, 0xb}]}}) 12:39:57 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:57 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r1, 0x40084149, &(0x7f0000000000)) [ 1160.489331][T32373] ion_mmap: failure mapping buffer to userspace [ 1160.548496][T32371] xfs: Unknown parameter 'subj_type' 12:39:57 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x7) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:57 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x800) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x4) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:57 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) r7 = dup3(r3, r6, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000080)=0x401) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000400)={0x11, @tick=0x5, 0x9, {0x2, 0x1f}, 0x81, 0x0, 0x3}) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1160.746964][T32558] ion_mmap: failure mapping buffer to userspace [ 1160.918825][T32695] ion_mmap: failure mapping buffer to userspace 12:39:57 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x40000) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) dup(r0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r9, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r12, 0x0) io_submit(r1, 0x3, &(0x7f0000000940)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x401, r2, &(0x7f00000003c0)="6d711c0b5f212bc6cff6b1fa36", 0xfffffffffffffd20, 0xfffffffffffffc01, 0x0, 0x0, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000440)="c39bd56df16cfa2da4cd22e791ca3b261b58fe3c503e6c11a99c5b7af01186911a0cdc1630cb7537e9280e215a1d0e8adce1f332b79913828321b1d19c9c30ed45d7048b44eddb10669395365c2cd9b166efc07806e7f4024bc4333ae49f9a66ff82904f3067c0e689", 0x69, 0x3, 0x0, 0x0, r12}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x7fff, r6, &(0x7f0000000500)="0653aff73ac3a7513fcd38f979f2f99df0ff1149523246fecad437fbe056dec589d7bad58e9398d8740002000065c3", 0x2f, 0x80000000, 0x0, 0x2}]) r13 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r13, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r15 = syz_open_dev$vbi(&(0x7f00000005c0)='/dev/vbi#\x00', 0x3, 0x2) fsetxattr$security_selinux(r15, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:semanage_store_t:s0\x00', 0x26, 0x3) r16 = dup(r14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r16, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000840)='security.SMACK64IPOUT\x00', &(0x7f0000000880)='system_u:object_r:semanage_store_t:s0\x00', 0x26, 0x2) r19 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r19, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r21 = dup(r20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000008c0)={0x0, 0x80000}) r23 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r23, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r25 = dup(r24) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r25, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r21, 0xc00c642e, &(0x7f0000000900)={r22, 0x80000, r25}) futimesat(r16, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {r17, r18/1000+10000}}) r26 = semget$private(0x0, 0x4, 0x20) semop(r26, &(0x7f0000000380)=[{0x1, 0x0, 0x1000}, {0x4, 0x3, 0x1800}, {0x4, 0x8001}, {0x7, 0x3c, 0x3800}, {0x0, 0x3, 0x1000}], 0x5) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/136, 0x88) semctl$GETPID(r26, 0x2, 0xb, &(0x7f00000000c0)=""/186) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r15, 0xc0184900, &(0x7f0000000580)={0xa920, 0x0, 0x0, 0xffffffffffffffff}) r28 = dup(r27) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r28, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r28, &(0x7f0000000800)={0xc, 0x8, 0xfa00, {&(0x7f0000000680)}}, 0x10) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:57 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0x7f, @mcast1, 0x2}, {0xa, 0x4e21, 0x26a, @ipv4={[], [], @local}}, 0xdf6, [0x7fff, 0x3, 0x80, 0x200, 0x80000000, 0x1, 0xfffffff8, 0x10001]}, 0x5c) 12:39:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1160.995071][ T343] ion_mmap: failure mapping buffer to userspace [ 1161.014747][ T343] ion_mmap: failure mapping buffer to userspace 12:39:57 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x7) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1161.041628][ T343] ion_mmap: failure mapping buffer to userspace [ 1161.058267][ T343] ion_mmap: failure mapping buffer to userspace [ 1161.070688][T32695] ion_mmap: failure mapping buffer to userspace 12:39:58 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) r7 = dup3(r3, r6, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000080)=0x401) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000400)={0x11, @tick=0x5, 0x9, {0x2, 0x1f}, 0x81, 0x0, 0x3}) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1161.202084][ T519] ion_mmap: failure mapping buffer to userspace 12:39:58 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:58 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x57, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 12:39:58 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x10240, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000005668c90728de2436028526d0a0e135fd66fbb8b28c88ed4be7dc988dcd22e37ced30a6dc74f1438138932bd3313a0269b45c472f6d642869b9c6fab7ee39891827000000000000e948078fbb4b48b94b04353f7a8191f624204edc3e5815f9a572de5d4bb8156cb3f44728a194c3a327ee4111aa53a846437dd319a8045df2d45603a65fbbc54e945b8048fe5957fde12493d15afdc289ebd1eb301d66fc7c8930bd60f23b791719c0177c4a1cff4c33937ffda986f114f1cd20f0af6a411674dac1e7f4c1931b4a2619cdf013e676d10afad620f9", @ANYRES32=0x0], &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r4}, 0x8) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r4, 0x4) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 1161.309146][ T583] ion_mmap: failure mapping buffer to userspace 12:39:58 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) r7 = dup3(r3, r6, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000080)=0x401) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000400)={0x11, @tick=0x5, 0x9, {0x2, 0x1f}, 0x81, 0x0, 0x3}) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:58 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x58}], 0x354, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000040)={0x1, 0x0, [0x0]}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000000c0)=0x1, 0x4) 12:39:58 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x7) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) 12:39:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1161.615568][ T982] ion_mmap: failure mapping buffer to userspace 12:39:58 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffd, 0x1b5080) socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r2 = semget(0x1, 0x0, 0x190) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x20, 0x8, 0x5, 0x1, 0x2]) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4000, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x200000000000, 0x1, 0x0, r4}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) bind$inet(r7, &(0x7f0000000440)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) write$sndseq(r4, &(0x7f0000000380)=[{0x2, 0x7f, 0x20, 0x8, @tick=0x9, {0x5, 0x9}, {0x4, 0x2}, @time=@time}, {0x20, 0x7, 0x81, 0xc0, @time={0x0, 0x989680}, {0x3, 0x2}, {0x6, 0x5}, @result={0x6, 0x79}}, {0x9, 0x0, 0x6, 0x7, @tick=0x81, {0x12, 0xf8}, {0x0, 0x7}, @quote={{0x4, 0x19}, 0x800, &(0x7f00000000c0)={0x90, 0xd3, 0x0, 0xf7, @tick=0x5, {0x2, 0x4}, {0x1, 0x7}, @addr={0x7d, 0x31}}}}], 0xfffffffffffffcad) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000480)) ioctl(r3, 0x1f, &(0x7f0000000140)="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") [ 1161.669374][ T985] ion_mmap: failure mapping buffer to userspace [ 1161.677523][ T989] ion_mmap: failure mapping buffer to userspace 12:39:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1161.770151][ T982] ion_mmap: failure mapping buffer to userspace 12:39:58 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) r7 = dup3(r3, r6, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000080)=0x401) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000400)={0x11, @tick=0x5, 0x9, {0x2, 0x1f}, 0x81, 0x0, 0x3}) socket$can_raw(0x1d, 0x3, 0x1) 12:39:58 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400c80) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:58 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:58 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_setup(0x80000001, &(0x7f0000000080)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) [ 1161.974331][ T1228] ion_mmap: failure mapping buffer to userspace 12:39:58 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) 12:39:59 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) 12:39:59 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x6) fchmod(r0, 0x30) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x880, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000047000000673c0000090000003f4b0000000001009e0b40b0826acca41981c9f102d9efa0f59ff901573ae1924299edf15f4e797e0a5a8bc3cfab8ffc6759b39805e492387416934fdcddafe1eba701fb1c700d22bcb1df117d11a8ea7b53870959"], 0x15f) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x27}, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r4}, 0x8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x401, 0x1c5) ioctl$SIOCRSSL2CALL(r7, 0x89e2, &(0x7f0000000200)=@bcast) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x11, &(0x7f0000000140)=@assoc_value={r8}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x26}, 0x2920}}, 0x9, 0x3c2, 0x1000000, 0x1f, 0xf582ad4d27d4b059}, 0x98) 12:39:59 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) getsockname$unix(r5, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) r6 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r6, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r6, 0xc0385650, &(0x7f0000000000)={{0x6c90827405a3a9fa, @addr=0x401}, 0x8, 0x100000000, 0x19d}) ioctl(r0, 0x40044103, &(0x7f0000000000)) 12:39:59 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) r7 = dup3(r3, r6, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000080)=0x401) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000400)={0x11, @tick=0x5, 0x9, {0x2, 0x1f}, 0x81, 0x0, 0x3}) socket$can_raw(0x1d, 0x3, 0x1) 12:39:59 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffd, 0x1b5080) socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r2 = semget(0x1, 0x0, 0x190) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x20, 0x8, 0x5, 0x1, 0x2]) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4000, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x200000000000, 0x1, 0x0, r4}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) bind$inet(r7, &(0x7f0000000440)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) write$sndseq(r4, &(0x7f0000000380)=[{0x2, 0x7f, 0x20, 0x8, @tick=0x9, {0x5, 0x9}, {0x4, 0x2}, @time=@time}, {0x20, 0x7, 0x81, 0xc0, @time={0x0, 0x989680}, {0x3, 0x2}, {0x6, 0x5}, @result={0x6, 0x79}}, {0x9, 0x0, 0x6, 0x7, @tick=0x81, {0x12, 0xf8}, {0x0, 0x7}, @quote={{0x4, 0x19}, 0x800, &(0x7f00000000c0)={0x90, 0xd3, 0x0, 0xf7, @tick=0x5, {0x2, 0x4}, {0x1, 0x7}, @addr={0x7d, 0x31}}}}], 0xfffffffffffffcad) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000480)) ioctl(r3, 0x1f, &(0x7f0000000140)="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") 12:39:59 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 1162.331743][ T1577] ion_mmap: failure mapping buffer to userspace [ 1162.370610][ T1577] ion_mmap: failure mapping buffer to userspace [ 1162.378598][ T1580] ion_mmap: failure mapping buffer to userspace 12:39:59 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1162.471132][ T1580] ion_mmap: failure mapping buffer to userspace 12:39:59 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 12:39:59 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) r7 = dup3(r3, r6, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000080)=0x401) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000400)={0x11, @tick=0x5, 0x9, {0x2, 0x1f}, 0x81, 0x0, 0x3}) [ 1162.620012][ T1819] ion_mmap: failure mapping buffer to userspace 12:39:59 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:39:59 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000037c0)={0x5}, 0x4) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000003600)=[{&(0x7f0000000080)={0x27, 0x1, 0x0, 0x4, 0x3f, 0x80, "6c79c525aa264930a188bfbd909e6b0beab5f55b21d019ec5d611674254aabe260af56a7504cd65d32a36713acdccb067219140cfbcb7d4c83fd03dc173d91", 0x26}, 0x60, &(0x7f0000000700)=[{&(0x7f0000000100)="6ad3cacb0128aa05b31c30c3f3df53195d392fb509a5ef78728694692e632d6556a1e2dc4a9c2cd011c1487385841d1917ea9a0b4b634860122179498638c2", 0x3f}, {&(0x7f0000000140)="e56eccbec7f443032d0d11f6859e6572cee38ad767433b4c8092b7fe43b5ca78705e0c637eeb6d4542f22c976b3afeeb1e", 0x31}, {&(0x7f0000000180)="1f84d97c6032a05cb96998dc5a3c2ba90612e44df5be19773ccc77f7d501e868da44e24e9d1b372c34bea35c9f81ec7e2bc260f03f3071c55a9e67d5cdd628fd82c27ec5bd4a1db4feab42f6155e2a47e99d2032fd81d0a60b8bce7e71114fc8ec57af15287001093d6762fe858545c51c30affdf193b22717de7fbd14d9", 0x7e}, {&(0x7f00000002c0)="f321cfbf64404b0ad429b44706696c7a6c573e5ab9206644f1797c591cb43e8c59c885c8e9c496ae6a91e29162ba919e5c400579537a6b607583db687b0cfbeb55dac3e4ef38631c607bc274f70ec0cf34e368a92f4fe5dd911975072ff900c1198ae85250bba92474022ae255c7e0239597d16be4de2ba70ac593d649d3d66a54777e463d5cfab13a4aad0e4c3cd1b02c6645442a73e873df3aa951449efac412d5475fd39e602c34a0a87b44b6c50f508f5af87a28aa755e4fd735e0c84fda2389680a96cbeeb7f1f89e", 0xcb}, {&(0x7f00000003c0)="e8575a9d775dab69404da5ccb4880e16806db0bdc1615739a1f987241dd14db7ac084e707e9dd5b7dee39340179baba05e17df5f56b0f91720d5f1a42e3d2dbecfdf8c2b5f0b4d273f7516f19f4bb47f2e912593a16ffc42e023d58fe48844d1a99aae2ae271264ada0ad3b53cc4f1121139efa91763abf7e27e0d524fe2db952108e621571068ec3c3f349d0c88e545e4391758182d646739254865e4410858a3067536baac452f0ec381ae32dfebfbb659951b2c3b99480c90feaba86f21e6ffa77c15c0f1cbc17a14c924e4b95aaf85", 0xd1}, {&(0x7f0000000200)="df8eca623656a5101f171e0366ef0816035571c923ff91a76f8b061b1e084a9d10ecb0786c6040d7bf354243463a4769cb5a362e3629b6dd1637e3c2f16c30d6fda9fd0822aae58126f1b4b81d", 0x4d}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000005c0)="281de57b02e48fd26b8fae7d3067985e851edbfaab0e19fa3ed4", 0x1a}, {&(0x7f0000000600)="80459588c280784aec5e26c061d703f0aae0d93551107663b6db9bb5d64d819c2fd5ae94146a4fcab76c951614f569198973b8e85ce19cd58f0f254eae84150b71c861270b50131c82856de66369cf0ea13f9d93c136a800652c0894e79bbced4089c12de290280d0208339a9220e3e4e531c5b0142eee80b9834d03d29fe19226b16b24ee4ae7b12e912930a6abb689bcb0fe40779882b6d463bcefb99d24b876d94f629d666f13789c147f21ad5496122d595b7616d6882c545c20a7b32539b6349dae821ede7046349b75bf0a40d4cfcc57a23dd66c1e21ce42cfef08c029b172", 0xe2}], 0x9, &(0x7f00000007c0)={0xc8, 0x10d, 0xa01d, "03e58a533c201204a6f06ef59e85476aedcf4f42da8b527ea5005af3870f7f903145012fe1b822ac946804a8124b5a763a1064883a2d40cd127f78c7b9b2722c7fac9c3715354cde5d49ce3288ba183cf433b6d34f0c54892ddf03407600a87f62372af7ed9a0d631df50f2f8a47dd40c5bf5233f4e5c6d7306dbf292d1a3f2a34eb2f087ce01a0906a996fbec953b765504536299e0d4ba7a251090a02b567905dd54768d5483685433e8d5ed9f75575a14"}, 0xc8, 0x2400c855}, {&(0x7f00000008c0)={0x27, 0x1, 0x1, 0x5, 0x52, 0x9, "f835f2beebc15e4169ac22e3abaa0cd4352f34e66291b2fc6262c1e196cb1aab3c2a53b60f33751876b0befeea3edadc47dc42f8e798a6272b8885fc2221a5", 0x1c}, 0x60, &(0x7f0000000dc0)=[{&(0x7f0000000940)="faad912c2f8634ebe58c288d549c921839fac41e49edf84b63ef5377c2120eb07e5e264ec7025ec823f6453d0825b7a342daf933237fcd131f3527b67617d0c996abc062", 0x44}, {&(0x7f00000009c0)="41c55df0eebe48567fd2344daf201b9fff157609f45eb2e6ef3729eff90829aa269c12f4b7a1102e67930fdaf04eb79cb7e38ede13ea1c4abb86beac8ad073248807f2d8308477313ea179e12ff74226b4c6e317b17614d615a3faf89bef27f2491ed7a69fd9c6587111c5c5fdb66fe0a8e2da896fa3c3a5299c2de5b524ab5b107ad41bb90fbf4a1abd84704aae5593b628c529bcbd38f76c544600994afb6a346d2b4c145f401cc8ae2110e3510103276d76f4832ac2d38e3fc7", 0xbb}, {&(0x7f0000000a80)="a6a542dcf536cb864b2385ed9005af72427e1a22503f2b73dfefce384bfe6a0fb8e396d0ab5a41461254e83cd0dccb4f21f5e6d8a38677830954995b64878d9c2727df5f79ab62c6daa00af6d678d3e106ce75f338896f9a5b7f6cb41f12abf8ee4e27ba2eb3fd28148535fc8cb21dd90c6a2026449157efcb081c02a073f8e65ee627fec1cfa4d33d4f3fa04c96ddf88f9d52a3461d0c1bb480ad1fbb83e7", 0x9f}, {&(0x7f0000000b40)="134a01596cb6ca766ff677b473c000b793747550ac7d2e3de6c6942e19319e45ce485832e483b649feaa1e68713df0c50e5fe82bb0592553c1f3b9e12050", 0x3e}, {&(0x7f0000000b80)="9c148b2964e45b38e1a23255ecb2871a29a1e02421e9a0b4fc83a7d918435b2101ded94090d1a82c1038fdc98d8a68038445a158ae32f52f5a23c03a95d4d4311784b2000d09ab0a7a747552211eeb59ae475b183f30502fc584ad1ec437ba9c0e032c0b73a52afaa1e7343e2a1eda6ba371842b54071e9ab88803a85915f1b3011bc5de0c2c73b966783d5c99f039b217", 0x91}, {&(0x7f0000000c40)="1036c5039322db7a1f38d58d166b819a7ca76e4af7fbd49677b472065c257746bba306e6eb61af23e4b3d062af9334db54723353e16d6ba303798d548a53f6b81e9cbaae99e671bc9c6a2654a6692df1bdab95d0f5a0857dd0cd56295d266b1c01ce71cfbd56a838e56279cd013718b0288b64f53b", 0x75}, {&(0x7f0000000cc0)="627734fd75b3c5023d3afafe32da3d217ddefba5f2cf41baea7a5bb17ac1815d49f9ec3efc8b4d7d0336fa4559f5ed2274e99be2d89fffb117f84db2b4cb6e6e90298bfcf6404170390576ff517a0dc04d8b535885fb5bba595cf9ff51d567fe20c75f2812028656ce47346ac177b6d3e4cf60b660d93c0b76788d0c2bbe3875ebd7301404404738bdfcfaac0465e24c147c860a5d724feb87641f01d470ee2a9c141ead319de205a3d040caae7f8871be9f93d17f07873e215caefdbc64349129b328c49a3902cf37d4dee772f418639252a147823d511ecc", 0xd9}], 0x7, &(0x7f0000000e40)={0x88, 0x107, 0x3, "69996bdcb7f554eb2cca3e5a510d121c5334a0c882b41c141e433465a83884b1bebbc267a18b7effcf207cccb4aaf076e74dfd213572701b427bbee827602146a9dbb2fc8fc734962e70d1334c35a464c1672b133af7faca044f58d66aba406c95ebbeeec7bb2811816aa555943d57a183"}, 0x88}, {&(0x7f0000000f00)={0x27, 0x0, 0x0, 0x4, 0x3f, 0x7f, "4ac0084899b6415442690674217ab7046b00d63552b98b8f1cd894e486818fb26257b12db05da956aacdcae1b2e2bdb38f980a37430332db4640f76786bf0c", 0xb}, 0x60, &(0x7f00000010c0)=[{&(0x7f0000000f80)="8d4460b050b154cb04b85628b3615591a765d916c722839e94a1b91ad23cc32b0fbf9345ff10204ebd5179637386e26137f873cc77195499e564b049fa98a699fb1af11c62bf3cf4f515d2f5873f18866343d6e8a3ea68488918d94834386a7ef856c2cb26ab8052b9245b024b719fa51cf3fb0dfa4d8d8c08f831e3b577e33b60f514556f4e3623c430dcd783a8df4f937031dfa44dd86d7a984c3a200af8ffac8cb80356f9792fbae4ec", 0xab}, {&(0x7f0000001040)="4d22bdcc3a90e1b52ef92eab84fbb349e48b1e5cb39e5989f7d6bdfe88da267b59b86857ef2e3b048fbe585b30ae74e5ec16d7e6baed80af7ac180c33037b4779ddf388c5869", 0x46}], 0x2, 0x0, 0x0, 0x4000000}, {&(0x7f0000001100)={0x27, 0x0, 0x1, 0x1, 0x3, 0xc0, "1cb6beafb3203c5801a194e3915ff45da85da1cc7c5d7f9db318316d85816e0e097ff411dd3c7853241454e3ea3d9e8fda336cf1f39522509a64f1fe321769", 0x2d}, 0x60, &(0x7f0000001380)=[{&(0x7f0000001180)="adb838462faec3d041a91c1675171a1f1cbf11b4d018d6efc1a2c400fc53505c8a3f09577fdcc6834bdd95dbc7f909325921f23593b65388406350125c269d9383c6218ea2bcf4f026f3f9b0d35489b39ecb8af19e5d4850b2fece80f2807b1097100adbbf28add9363b52c1502c19dffd0c59de6a6dc32b622287af734edbee1124db4b99ae14ef56d54b6d426b4c15fcbc7d0d1e8d80b86e20c821ad7cdb3e126b780d614668650410281cb63530125b5919fd657aa3bbe8cffb23e8f2ca43d7e4a9", 0xc3}, {&(0x7f0000001280)="4656b9eb64408bdde8d5daf8e5b46a3505bc33a73ddfb5c214dcfbcae11e5fbbd4c0169692a0068569e68a4f17b556fdb70a85954e3c23d6281d0df2aaafbf6c575220c62107c4ac2307faa62c05be49025db5a65965100ebeb31b36b02d179054cbe4d675b9883c6bd6c0cd16f1fa69450e0d63b7dd100063882aafe4bd5c3f36a64265bf525dcec642b076c12f89f04981f81e25dc654b38c51494e0e061ec946c15e3dba5049a60cba30742e97f0d011b53cf878de25b24198b89c45d3563e6f2e6470edc18b99cfdacdd5f6b2c4f", 0xd0}], 0x2, &(0x7f00000013c0)={0x68, 0x113, 0x1, "6f1c67a88556766da9a34828d694a76a5aa74865d627be6041d7919c2147ea4114077e15f4653cacff33d75f90a97b643d12579f5337a524fbe44e3431bc22fc1ea4ea629addec9e1365788ace0a348d74241ac4e9af9679"}, 0x68, 0x20000000}, {&(0x7f0000001440)={0x27, 0x0, 0x0, 0x4, 0x80, 0x9, "66ef03d4625f157fba35430c7e427b44358944baad0ba131085d2a99cedd1f55145f5cf025675a38a42fb4514201fe969f946f3ff45fa2ac4de6b6e5930391", 0x2c}, 0x60, &(0x7f00000015c0)=[{&(0x7f00000014c0)="359af47f6a54842548b0f837db550ed9e3d8f954f7", 0x15}, {&(0x7f0000001500)="5fc1c645904cf9e8aa4f86ec8d7d3a7dbf581488ec265636596a02b54d1fc4ce6b0127213f020117b22d9baa3feea3bf4a0d7ab0f9375544ed9c23c4396ea4b24519cff63e0c6210219203aa7b1f5444207e7441415787c35b7281b34ea1cd57afd7c06b8ea90cf1923e509b492e79a0093d326a1b08feb5c0c0e253c9e176ac9bd56a8329eec0bf95786de554a73894048b5a9b751d29516fbcdd26dcbb10bd6c2e97acd3d5f6d69daa0091", 0xac}], 0x2, &(0x7f0000001600)={0x108, 0x112, 0x3, "14f8cf921f760e16a7a47681ccb8c79afd301e38c3aaa52b15b3eedc72e0cdf26bd7286a1f0c894a432eac4cb1c2736fed7b91b60a8c1a27ed7b3adfa97631847b46a8b233868b345260404c02c02c83936c14642bb8b7219e5a2b0c549db0b0c6ba50ea75b82d1f3b1b974b2f2e8b1589b739c9f8fd9685fdf4f271a2382126f31778d36f5382839fabfa0e1c0f1b30eaf137838fdc75e69cc527d11292dbea9d04ed27c406a919a155e25a34279e95a0742c1eb1fa7f2cc3dc269d79acab6638b2c9a0727d86e8bc71e5b8c19176a75809e9b8e7714bd054e43b41aae74e019727148f2c3ee84c9b83a04f00b2ca2884471c6ed058204e"}, 0x108, 0x84}, {&(0x7f0000001740)={0x27, 0x1, 0x1, 0x5, 0xff, 0x3f, "d3b1726b163db1cb0b0c6d2335c82ca1ddc7700c9633d7bb12aaacc757241f929297d5226b707c1dfb50da505e64ab7591fa8924f6680fd0ef006ce27e0a1e", 0x1e}, 0x60, &(0x7f0000002b40)=[{&(0x7f00000017c0)="cc650209bc4f81154c9c5f307b39f77c1442fa1cbbca3cf4e65377da41b3fdcd4e56c1e797e327f378cb3497e2d6632ae8ff08e4462e6d9a89d5a8630bb71d0c7b863924f17ba5ff846871b6ddce818a5df800a22a7a3d75c8ea2eebfe669f7ac35e94d35d088f153cd0f63621deef16d663437cce22278c2391ea24db7a4e0df870949ad18fae818208ca10c4e1a68875259b06fb6a0f9dafcf26902f5b94f06a8c300b872860c8f1710823f8ebad43bda9fa40e04c7e13009f58a545924ef023c7014197c6124ed2b65765a7e3415e1a9c5ebbee4dc8a7f044e9a956809d4efbbc3c9228048c17bc1f8b04b8f699855dbf6d608ca89a05", 0xf8}, {&(0x7f00000018c0)="6581389b46a51b863b9a0dde606b2cc7009f346612eb383c2a74db5b0a5f90cb0b7c2dfc6aec02be8cd3c657571bd4ceb2b9ea292f52c99d699acb69b228cb2b74e4e5978fae7c6b1d4871e725bc272fd36f5f55cdbc41418a0f6633d21ebf8408010dfc0d9fe7af396b2377d4fbc6df215ca09e", 0x74}, {&(0x7f0000001940)="750ca6cc5c1198dc7cf0443ded0b47c1557aff5eff9d73bf5611f5ee0c29f7967581c29696589a245eac6af809441e159ac824ac658eca72ac4c2da8074057a33ffaacfaa5e6b0aee2eddbb97d23ea16b2e4f9c8becae4548493e6ef799df2baee15d0c305fb9b6d39f7b4a8950b879ee37a29bea5e8f5c008b7933af99740b6a91ac57756f4e2adad5ba9fdff82bfbc4cf0fe2afc9e87b979dcc5b29bcccf78cdf9a6b14a902b76393423d5fc93b4c800ad370a0e33", 0xb6}, {&(0x7f0000001a00)="77d2d4511bfc7e9993ae3e36d3751725a902184fd4a4e3c3268d9133788218cb975763f0b5e6cbdeb55103b1fe39ceeaf059b4582232bf4bfdd9", 0x3a}, {&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000002a40)="628e02f07e4f01267dfb17d7435fa0929dcdd63cd1af2ba6729753cb43aaaa3a17d228122763b6e776670c5611d9d63c4267950674c1e34a81e24e0e928a181d5acd4ccfa1620c54e6402c44938a1e70bfbf8893da2023d793649276d5cec0e59de8d9bd94a5714f0fa32cb1eec0a53e462045a0e4b1c75695150d2fc7b4217527831b74503ae15037a082bc611f3d2fb6995729d14f112ba11dfb6aeb6763e485c93d48cdd0a9c8a0e31e7b208f3bb911e4d9a118276f4e48942bdff16ccb6fff860e9792a5167b5b2efeff49b290d0492df793f74216b76c41da4f931897f24030c11c0973d2605230874eb176d8bd0ae1f74d4aa592bb", 0xf8}], 0x6, &(0x7f0000002bc0)={0xf0, 0x29, 0x1, "758053004e224480e4098ba78be4cb34f022cdd9c7365622d83ce087e3310d12aee82ff4b3c51698a41b90a257c99c08702b4b4ddc6e9fd40fdc2fa8cd75025fb4ddee7e7d864f25009bbc23053370cf19286294fd2adb66f67909e71c2a97a51dd4fc36c7135bfa7f798dda8f35b7a908340e5700f6b79d1e5514a56a2d4aa85ccb9ea4d1afec1b31931851792d482044e9a6a29354a3ff2787e0e138a4f6f4068e670ad5c64927adde2fd3d8a44a1abad1de0ed1f36e68d13ed93a99b6481a78e360e34b1b8b5d81cdb443f7603d6ee156c23ffdb5354975a0afc50054a6d3"}, 0xf0, 0x60}, {&(0x7f0000002cc0)={0x27, 0x1, 0x1, 0x3e302bdbaa3f71ee, 0x7, 0x0, "2f4bb87022c90075fb6f5b29dfb383db7e8245cf3fd385a1b9edf21bb943df2d35d1e889de02ebdd5b82a08586991f2a8f6f377fd57e0ec1fec2c659bc5c87", 0x36}, 0x60, &(0x7f0000003000)=[{&(0x7f0000002d40)="083d56fab757931eb10824ef1e1b4fe08f15011ec6970ca6b4f3666854487b6fcd1bde9ea52ab3a5adb748df0cbf1b84be0c4dc877f592570d0034bf6a4016208620bd7ea64ab1721ec6fde983503e8de2c099368a46f8a0a0c137d1152a65fb6e673c1ef56ec3ccbcb162debf2c20eeb1fea45d29767c1f5bde562dcb403af6f9594b5211a342dbc713d48da9c3a6fadf7f719668b3d0665e577d78235fa4b6a468a8800ddb3e61b887f58250456164889299e1d5d9fe0963b4911e24130bc5fc8d6589b4239e4b3e7eb95ba68c77cb8a27dffc356c4ecb73c7d3ca", 0xdc}, {&(0x7f0000002e40)="5a33f509d7f7c42712184bfa0c5eb0bbd5d00dd44b96034c7a197722c8b353b9b17f693a6d5b13113617a23fb45ae9a983ff4cbe3b0342fe1f027d3c1411ecf41617e538da5ba61fefd7c2061551843d2e34e3b383ba35cd0a6e49bfb80a570df8f25de15ca5a69d5fcc1060e89c58bf", 0x70}, {&(0x7f0000002ec0)="45be1a626db7a68f951611e6e43cb8be2790b0932d15cb386755a512612d0fca61bc9783495302745a6b13cd8321e4689cc3b23e1ce74da687b3f96ae50ca5e5757ce52af5bc090f33197650653a4e837f991e4994090a554c84068b6a797ced8f565e3daf170602a2b0532e533258f6fa6a1fae1498bfaccf0a0285f757e087eae656696796ab7ced9bb269cb7480bf70549de5314e201a9a2142dc3fdd98c89b8131d4b372bfcdcb97a422552ef3915373918e8228691f74c68530bc1c3716b2929ca6cc8259e1a2b5b0ca45d263b2d09ab98588cd", 0xd6}, {&(0x7f0000002fc0)="decd", 0x2}], 0x4, &(0x7f0000003040)={0x100, 0x312, 0xffffff7f, "5780b7cd1e67b44fe59ab482fa37bd0ceaf791d235c7d1fcd0fd15ae811fbfca7eb43260c67351badded27bc39e20832a1bc9d21812e49ed6906e64a28f70a4a53672a2e52422d313113b844952ae88165f1f4108a6c2c62631bc7979c148306f9b769b4de47fae8ba09df16e934ca422661af6b87d9e1b80b85c5220a6cc969e161dc741c0530fd5324e19cce707616da9a4a3c7bf0b02cdafc8a99452fa98009965e5963abf4f256d8076d4b90a69e92bd80e792e3454048a95d70356cfab54f1cdd0687ddc08c72284d9097e6ddfa3d98d990f5b9a99d9f66b53bf10b00133d49412795cff943af060607"}, 0x100, 0xa000}, {&(0x7f0000003140)={0x27, 0x1, 0x2, 0x0, 0x2, 0x1, "bd41aec5b812d9fdc044e03a5534149037d33f13cd849cfbdf90a02776dd598a94389446ac11a40e47f240db4fb612fc70243cb3559740ca035ebe372744a0", 0x5}, 0x60, &(0x7f0000003540)=[{&(0x7f00000031c0)="a4304272217d7e344e43a3181d0a9d4ef0960622786a9d0c2bb46d3297cc73109996a34274a2080e750ce024d4f42f6095016dccc00662fe831c16fdcad404304820d525a9bf267f564e3edd9a80e7c493b22f738b74229c7756e6f2229849eb600ed1d497a7e60d883c6e9c66a34a3138dfd3bbf792d762285793ac043f1ed0e7d6419484f6d01dd19d87edaeefb20d9c168f69984cec385671152f52e3a7d61bf1dba15a6491dda9ff75c0608b2ee95a9d85", 0xb3}, {&(0x7f0000003280)="2864870da538c83a3b918db7b482815ae87b4711f37cb2700f260db9e7e42af059c8e12b5a9fdaad907f3747381fefa46523ef79eb52f2b8c7659e058416db834ea9003484984abb2bdd9edb9486aa4258b48d616e2540fbd37f7b762d136f362cff530e0e22cc4f6a64c24251e30fa027d7ef34e70eee35edf53fe2840d495bed31058057348bff2381a3c2329fe0794bf8296c9d7befbee48f9c758339407057c393d95437940435c50c", 0xab}, {&(0x7f0000003340)="7d6b8b0bd142980d54d203d0c441c7dc5a5ccaf07952a550fe4217673669dc27e0d92ea6d29e6d6d464f7c99c097021b910e8f154c7a1e90840d4815b99008e642a0ba37c9fc0fa7edd3ca3aba6132244ab7d5c649a4b5c4dc3d91b5c61b2af84c4b3cc04b6408e3d1a1cb314a375454e93795da86482430c5f398a4f606fc97eb30f8aac3765dfa6971ece9923c206bdc19dca5cbe442d15e86e471596e8f9fb0bce2f22fc53639a41f2dab7b6fcb51c7580810c6675e2f6a203529b38f0665e6af49f983f00aeeb36d76e1421bcce61ba4e6d3e893422e002e103dab52def431860f42c9464a5b92", 0xe9}, {&(0x7f0000003440)="c643d2c17599cfef5a64b5077d397288bfdfe7a4b7bfa5a50737f171423252255c12b013531b78b7c03e742fd9c8e39d6668843c7f636b40fd5a767a452ea3ac68a4369d2e42d8b2c2e8", 0x4a}, {&(0x7f00000034c0)="4b7fc5ba96bcabdbb88ee5638b57b8116bd2dcc7e804945a643c328dafef324036be2a498b36c9cc31c55e03b8401b67276eca959ad7228a24ad6417de110c22ef", 0x41}], 0x5, &(0x7f00000035c0)={0x20, 0x111, 0x5, "35d320780134bb857095e3d7694f"}, 0x20, 0x40}], 0x8, 0x4000) 12:39:59 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:39:59 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 12:39:59 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffd, 0x1b5080) socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r2 = semget(0x1, 0x0, 0x190) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x20, 0x8, 0x5, 0x1, 0x2]) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4000, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x200000000000, 0x1, 0x0, r4}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) bind$inet(r7, &(0x7f0000000440)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) write$sndseq(r4, &(0x7f0000000380)=[{0x2, 0x7f, 0x20, 0x8, @tick=0x9, {0x5, 0x9}, {0x4, 0x2}, @time=@time}, {0x20, 0x7, 0x81, 0xc0, @time={0x0, 0x989680}, {0x3, 0x2}, {0x6, 0x5}, @result={0x6, 0x79}}, {0x9, 0x0, 0x6, 0x7, @tick=0x81, {0x12, 0xf8}, {0x0, 0x7}, @quote={{0x4, 0x19}, 0x800, &(0x7f00000000c0)={0x90, 0xd3, 0x0, 0xf7, @tick=0x5, {0x2, 0x4}, {0x1, 0x7}, @addr={0x7d, 0x31}}}}], 0xfffffffffffffcad) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000480)) ioctl(r3, 0x1f, &(0x7f0000000140)="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") 12:39:59 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) r7 = dup3(r3, r6, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000080)=0x401) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000400)={0x11, @tick=0x5, 0x9, {0x2, 0x1f}, 0x81, 0x0, 0x3}) 12:39:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1162.908705][ T2040] ion_mmap: failure mapping buffer to userspace 12:39:59 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x40084149, &(0x7f0000000000)) [ 1162.984699][ T2044] ion_mmap: failure mapping buffer to userspace [ 1162.995296][ T2040] ion_mmap: failure mapping buffer to userspace 12:39:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:39:59 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000140)=[0x5, 0x3], 0x2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x81, 0x12) 12:40:00 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) r7 = dup3(r3, r6, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000080)=0x401) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) 12:40:00 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0xffffffffffffff8c}], 0x1, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r4, 0x3, 0x800000}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x3}, 0x28, 0x2) [ 1163.192298][ T2179] ion_mmap: failure mapping buffer to userspace [ 1163.269444][ T2179] ion_mmap: failure mapping buffer to userspace [ 1163.323690][ T2234] ion_mmap: failure mapping buffer to userspace 12:40:00 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:40:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:00 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffd, 0x1b5080) socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r2 = semget(0x1, 0x0, 0x190) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x20, 0x8, 0x5, 0x1, 0x2]) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4000, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x200000000000, 0x1, 0x0, r4}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) bind$inet(r7, &(0x7f0000000440)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) write$sndseq(r4, &(0x7f0000000380)=[{0x2, 0x7f, 0x20, 0x8, @tick=0x9, {0x5, 0x9}, {0x4, 0x2}, @time=@time}, {0x20, 0x7, 0x81, 0xc0, @time={0x0, 0x989680}, {0x3, 0x2}, {0x6, 0x5}, @result={0x6, 0x79}}, {0x9, 0x0, 0x6, 0x7, @tick=0x81, {0x12, 0xf8}, {0x0, 0x7}, @quote={{0x4, 0x19}, 0x800, &(0x7f00000000c0)={0x90, 0xd3, 0x0, 0xf7, @tick=0x5, {0x2, 0x4}, {0x1, 0x7}, @addr={0x7d, 0x31}}}}], 0xfffffffffffffcad) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000480)) ioctl(r3, 0x1f, &(0x7f0000000140)="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") 12:40:00 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) r7 = dup3(r3, r6, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000080)=0x401) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) dup(r9) 12:40:00 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:40:00 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = io_uring_setup(0x4a0, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = dup3(r0, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000140)=[0x5, 0x3], 0x2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r5, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x81, 0x12) 12:40:00 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1163.850747][ T2517] ion_mmap: failure mapping buffer to userspace 12:40:00 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) [ 1163.933958][ T2518] ion_mmap: failure mapping buffer to userspace 12:40:00 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 12:40:00 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) syz_open_dev$sg(0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') 12:40:00 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) r7 = dup3(r3, r6, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000080)=0x401) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1}) 12:40:01 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) syz_open_dev$sg(0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') [ 1164.198611][ T2771] ion_mmap: failure mapping buffer to userspace 12:40:01 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd03}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:40:01 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000040)={{0x6, 0x2f, 0x3, 0x8, 0x2, 0x8}, 0x2d3, 0x8001, 0x8000}) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0xfffffffd}, {&(0x7f0000001280)=""/152}], 0xb9, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0xd78e000) write$P9_RAUTH(r3, &(0x7f0000000080)={0x14, 0x67, 0x2, {0x0, 0x2, 0x2}}, 0x14) 12:40:01 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 12:40:01 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) r7 = dup3(r3, r6, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000080)=0x401) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) 12:40:01 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) syz_open_dev$sg(0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') 12:40:01 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) syz_open_dev$sg(0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') [ 1164.756836][ T3007] ion_mmap: failure mapping buffer to userspace 12:40:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:01 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) r7 = dup3(r3, r6, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000080)=0x401) 12:40:01 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000080)) chroot(&(0x7f0000000040)='./file0\x00') [ 1165.011476][ T3012] ion_mmap: failure mapping buffer to userspace [ 1165.035674][ T3143] ion_mmap: failure mapping buffer to userspace 12:40:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1165.084381][ T3012] ion_mmap: failure mapping buffer to userspace 12:40:02 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) syz_open_dev$sg(0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') 12:40:02 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) dup3(r3, r6, 0x0) [ 1165.349752][ T3413] ion_mmap: failure mapping buffer to userspace 12:40:02 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:40:02 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10100, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:40:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:02 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) syz_open_dev$sg(0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') 12:40:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1165.779363][ T3547] ion_mmap: failure mapping buffer to userspace 12:40:02 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f00000001c0)=""/122, 0x7a}, {&(0x7f0000000280)=""/122, 0x31}], 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000009c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a00)=@dellink={0x264, 0x11, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x2800, 0x48580}, [@IFLA_BROADCAST={0xc, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_IFALIASn={0x4}, @IFLA_EVENT={0x8, 0x2c, 0x3ff}, @IFLA_PORT_SELF={0x24, 0x19, [@IFLA_PORT_PROFILE={0x18, 0x2, '/dev/snd/pcmC#D#c\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, @IFLA_CARRIER={0x8, 0x21, 0x7}, @IFLA_VFINFO_LIST={0x1f8, 0x16, [{0x78, 0x1, [@IFLA_VF_VLAN_LIST={0x54, 0xc, [{0x14, 0x1, {0x9, 0x631, 0x200, 0x8100}}, {0x14, 0x1, {0x3, 0xada, 0x7, 0x8100}}, {0x14, 0x1, {0x8, 0x801, 0x5, 0x8100}}, {0x14, 0x1, {0x4211, 0x120000, 0x2, 0x9a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8001, 0x2}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7ff}}]}, {0x14, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7, 0x6, 0x5}}]}, {0x14, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x3ff, 0x401, 0x8}}]}, {0x2c, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3f09, 0xd6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x953}}]}, {0x94, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x4}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, [{0x14, 0x1, {0x9, 0xf5f, 0x7fffffff, 0x8100}}, {0x14, 0x1, {0x3ff, 0xfd8, 0x4}}, {0x14, 0x1, {0x48267343, 0x5cc, 0x4, 0x88a8}}, {0x14, 0x1, {0x8, 0x820, 0x1}}, {0x14, 0x1, {0x10001, 0xe86, 0x400, 0x8100}}]}]}, {0x94, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8, 0x9d3e, 0x800}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x5, 0xba1, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x101, 0xffffffff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x474, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x10001, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x8}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x9}]}, 0x264}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000000c0)=[{0x2, 0x3, {0x2, 0x1, 0x1}, {0x2, 0xf1, 0x1}, 0x0, 0x2}, {0x2, 0x0, {0x0, 0xf0, 0x3}, {0x3, 0x0, 0x4}, 0xff, 0x2}, {0x0, 0x0, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x1}, 0xfd, 0xfd}, {0x0, 0x2, {0x0, 0xff, 0x8}, {0x2, 0xf0, 0x4}, 0x0, 0x1}, {0x1, 0x1, {0x5, 0x866d6e81c6e34fab, 0x1}, {0x2, 0x6eeca0d01dee212a, 0x1}, 0xfe}], 0xa0) [ 1165.832175][ T3547] ion_mmap: failure mapping buffer to userspace 12:40:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1165.935743][ T3665] ion_mmap: failure mapping buffer to userspace [ 1165.943494][ T3665] ion_mmap: failure mapping buffer to userspace 12:40:02 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000011, r2, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000080)={r0, 0x6}) 12:40:03 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) syz_open_dev$sg(0x0, 0x0, 0x0) 12:40:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1166.435012][ T3885] ion_mmap: failure mapping buffer to userspace [ 1166.484647][ T3885] ion_mmap: failure mapping buffer to userspace 12:40:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:03 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:40:03 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:40:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:03 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) dup3(r3, r6, 0x0) [ 1166.626700][ T3907] ion_mmap: failure mapping buffer to userspace 12:40:03 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000440)={'filter\x00', 0x4}, 0x68) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:40:03 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) dup3(r3, r6, 0x0) 12:40:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:03 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) syz_open_dev$sg(0x0, 0x0, 0x0) 12:40:03 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x100903) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000080)="57eeb94bcc68c7eb1f3fa22f2bde02d4dd9c7fd8e4517ddf8a7eeccbbc26d92f0bb0a11505e1fd5f199e74fa1d43692fcdc122654d2609ea88803e83b91991f06379ba2b6654d6fe120ed3bb97ec40faf1c29dc1879929a9c7eb4371cf8c70c2adcb64bc1c03dbcb0b245973cb3d84533b527b4e5ea7458b77d99ddf36518a4d98d63f058136d17eba6efdab334f65427ad6cf69330dd5d826078320dfe9bdd101623a18377c105216b0537dc576c8fc1d99eed05ebe3c", &(0x7f0000000140)="7d0e5f839ab79f68ffdc9fbbc48ffa673b81cd29eb6cf6a10efa16989eda34c1d67ece61187e53d9083bc1e52dd547cda2f9c79746f8101129016725cfd918c8d3a92454c209090c384b77783bdb617ef59277046c541d955f7a68cae973b8bb9371cae3dd9488525917d997", 0x5}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xb) [ 1166.937183][ T4224] ion_mmap: failure mapping buffer to userspace 12:40:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:04 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) dup3(r3, 0xffffffffffffffff, 0x0) 12:40:04 executing program 5: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x40000) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={r2}, 0xc) prlimit64(r2, 0x8, &(0x7f0000000040)={0x7, 0x624}, &(0x7f0000000080)) 12:40:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1167.219717][ T4386] ion_mmap: failure mapping buffer to userspace 12:40:04 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:40:04 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) dup3(r3, 0xffffffffffffffff, 0x0) 12:40:04 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) syz_open_dev$sg(0x0, 0x0, 0x0) 12:40:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:04 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000180)={0x0, 0x3, 0x5, &(0x7f0000000140)}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) clock_gettime(0x1, &(0x7f00000000c0)) [ 1167.505872][ T4675] ion_mmap: failure mapping buffer to userspace 12:40:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1167.592917][ T4691] ion_mmap: failure mapping buffer to userspace 12:40:04 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) accept4$netrom(r4, &(0x7f00000001c0)={{}, [@default, @rose, @remote, @remote, @null, @remote, @remote, @rose]}, &(0x7f0000000240)=0x48, 0x100000) dup3(r3, 0xffffffffffffffff, 0x0) 12:40:04 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) chdir(&(0x7f0000000240)='./file0\x00') 12:40:04 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) syz_open_dev$sg(0x0, 0x0, 0x0) [ 1167.807831][ T5003] ion_mmap: failure mapping buffer to userspace 12:40:04 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) dup3(r3, r6, 0x0) [ 1167.969297][ T5006] ion_mmap: failure mapping buffer to userspace 12:40:04 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() r4 = socket$inet6(0xa, 0x3, 0x20000000021) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r7 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r6, r7}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x1ced, 0x7fffffff}}, 0xe8) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r9 = socket$inet6(0xa, 0x3, 0x20000000021) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) r12 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x67, r11, r12}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, {0x0, 0x0, 0xfe00000, 0x17e}, 0x0, 0x0, 0x1, 0x1, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@mcast2, 0x34ff, 0x1, 0x1, 0x40, 0x401, 0x3ff, 0x7fffffff}}, 0x145) r13 = getuid() fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000340)=0x0) r16 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r16, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0280000001fdffff89f3007462000000000000facad86dcff722d6338de80e4d77d2b7d42743901bbfda3b0400030000", @ANYRES32=r17, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r18, @ANYBLOB="08000600", @ANYRES32=r19, @ANYBLOB="10000000000000002000070000000000"], 0x44, 0x0) r20 = getegid() getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) r22 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r24) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r22, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x3}, [{0x8, 0xc, r23}, {0x8, 0x4}, {0x8, 0x4, r24}, {0x8, 0x6, r25}], {}, {0x20, 0x7}}, 0x44, 0x0) r26 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r28) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r26, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100000000000000040003000000000008000c00", @ANYRES32=r27, @ANYBLOB="22000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r28, @ANYBLOB="08000600", @ANYRES32=r29, @ANYBLOB="10000000000000002000070000000000"], 0x44, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x7}, [{0x2, 0x5, r2}, {0x2, 0x4, r3}, {0x2, 0x1, r7}, {0x2, 0x6, 0xee00}, {0x2, 0x2, r8}, {0x2, 0x0, r12}, {0x2, 0x1, r13}], {0x4, 0x2}, [{0x8, 0x4, r14}, {0x8, 0x2, r15}, {0x8, 0x4, r19}, {0x8, 0x1c7791afafceb4e5, r20}, {0x8, 0x1, r21}, {0x8, 0x0, r24}, {0x8, 0x0, r29}], {}, {0x20, 0x1}}, 0x94, 0x2) 12:40:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:04 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1168.035012][ T5006] ion_mmap: failure mapping buffer to userspace [ 1168.085368][ T5029] ion_mmap: failure mapping buffer to userspace [ 1168.199746][ T5018] ion_mmap: failure mapping buffer to userspace 12:40:05 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) chdir(&(0x7f0000000240)='./file0\x00') 12:40:05 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendto$rose(r0, &(0x7f0000000040)="7f1bbcbd8484d618530463a402215e6f46db5288b69c756ec59af7915a238a9e8572b8c49bdce78d2ce94ba4b5714c633af24903e8eb0290ea9a0619aeb6ae120a9f1be4ed2a5d2efd319879b3723a26570a1fbebc10b038077d1a79c8705b0478006f02b672d9cb8ed32a1b5ac804a8091e7e9f5643871a6f2740efa707e82fd8b5589253ee1da61f90dd932d13e9468522418cc51a0a8a63954ef3902b071fa413dc933a75653d3eafbc8ee92061f535b9863d742aa01b68f4da32c170c5e1afc9ccf97c7a9cefbe02dec371709069ec6f9d6af2842a703fbd6c5a310e73a4319f64cd57266303c4dfdbd02fb0fe76", 0xf0, 0x40000c4, &(0x7f0000000140)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000180)={0x0, 0x2}) 12:40:05 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:40:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) dup3(r3, r6, 0x0) 12:40:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1168.388809][ T5018] ion_mmap: failure mapping buffer to userspace [ 1168.515378][ T5441] ion_mmap: failure mapping buffer to userspace 12:40:05 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) chdir(&(0x7f0000000240)='./file0\x00') 12:40:05 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}], 0x1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 12:40:05 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) chdir(&(0x7f0000000240)='./file0\x00') 12:40:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r5 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{0x0, 0xe, 0x0, 0x7f, 'syz1\x00', 0x4}, 0x1, 0x10000000, 0xa3, r5, 0x2, 0x2, 'syz0\x00', &(0x7f0000000140)=['%#\x00', ']cgroup[^mime_type\x00'], 0x16, [], [0x3, 0x46, 0x8000, 0x8]}) r6 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) dup3(r3, r6, 0x0) 12:40:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1168.953558][ T5822] ion_mmap: failure mapping buffer to userspace 12:40:05 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) chdir(&(0x7f0000000240)='./file0\x00') 12:40:06 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) getpgid(0x0) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) dup3(r3, r4, 0x0) 12:40:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) chdir(&(0x7f0000000240)='./file0\x00') 12:40:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:06 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 1169.247326][ T5922] ion_mmap: failure mapping buffer to userspace [ 1169.372490][ T5903] ion_mmap: failure mapping buffer to userspace 12:40:06 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) getpgid(0x0) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) dup3(r3, r4, 0x0) 12:40:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:06 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) chdir(&(0x7f0000000240)='./file0\x00') [ 1169.478339][ T5955] ion_mmap: failure mapping buffer to userspace [ 1169.585818][ T5955] ion_mmap: failure mapping buffer to userspace [ 1169.593480][ T6244] ion_mmap: failure mapping buffer to userspace 12:40:06 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) chdir(&(0x7f0000000240)='./file0\x00') 12:40:06 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) getpgid(0x0) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) dup3(r3, r4, 0x0) 12:40:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:40:06 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 12:40:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) chdir(&(0x7f0000000240)='./file0\x00') [ 1169.929501][ T6567] ion_mmap: failure mapping buffer to userspace 12:40:06 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x200000) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) dup3(r3, r4, 0x0) 12:40:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1170.089168][ T6588] ion_mmap: failure mapping buffer to userspace 12:40:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)) r4 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) dup3(r3, r4, 0x0) 12:40:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x18, 0x0, 0x3a687de5695a6ea2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1170.224569][ T6581] ion_mmap: failure mapping buffer to userspace [ 1170.254977][ T6581] ion_mmap: failure mapping buffer to userspace [ 1170.301126][ T6605] ion_mmap: failure mapping buffer to userspace 12:40:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r10, 0x0) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) syz_open_dev$sg(0x0, 0x0, 0x0) 12:40:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xffff, 0x3, [0x8, 0x9, 0x6, 0xfff, 0x4], 0x40}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x2) r3 = io_uring_setup(0x4a0, &(0x7f0000000000)={0x0, 0x0, 0x2}) dup3(0xffffffffffffffff, r3, 0x0) [ 1170.571174][ T6616] ion_mmap: failure mapping buffer to userspace [ 1170.581390][ T6626] ion_mmap: failure mapping buffer to userspace [ 1170.600053][ T6616] ion_mmap: failure mapping buffer to userspace 12:40:07 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x488900, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) r1 = io_uring_setup(0x4a0, &(0x7f0000000000)) r2 = io_uring_setup(0x78, &(0x7f00000002c0)) dup3(r1, r2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000280)=[0x2], 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000080), 0x5b) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000480)) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000000000/0x2000)=nil) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r10 = dup(r9) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f0000000340)={0xf10, 0x4, 0x0, [{0x6, 0x54, 0x68e, 0x7f, 0xff, 0x0, 0x7f}, {0x401, 0x2, 0x5, 0x1, 0x6, 0x3, 0x7f}, {0x5, 0xfffffffffffffffe, 0x1, 0x1, 0x40, 0x3, 0x1f}, {0x10000, 0xfe, 0x0, 0x7f, 0x0, 0x8d, 0x7f}]}) chdir(&(0x7f0000000240)='./file0\x00') [ 1170.910752][ T6676] ion_mmap: failure mapping buffer to userspace [ 1320.446556][ T1082] INFO: task syz-executor.0:6402 can't die for more than 143 seconds. [ 1320.455136][ T1082] syz-executor.0 D28288 6402 8822 0x00004004 [ 1320.461537][ T1082] Call Trace: [ 1320.464872][ T1082] __schedule+0x94a/0x1e70 [ 1320.469388][ T1082] ? __sched_text_start+0x8/0x8 [ 1320.474258][ T1082] ? __kasan_check_read+0x11/0x20 [ 1320.480192][ T1082] ? __lock_acquire+0x16f2/0x4a00 [ 1320.485324][ T1082] ? __kasan_check_read+0x11/0x20 [ 1320.490643][ T1082] schedule+0xdc/0x2b0 [ 1320.494724][ T1082] schedule_timeout+0x717/0xc50 [ 1320.499625][ T1082] ? find_held_lock+0x35/0x130 [ 1320.504387][ T1082] ? usleep_range+0x170/0x170 [ 1320.509108][ T1082] ? lock_downgrade+0x920/0x920 [ 1320.513953][ T1082] ? _raw_spin_unlock_irq+0x23/0x80 [ 1320.521227][ T1082] ? wait_for_completion+0x294/0x440 [ 1320.526644][ T1082] ? _raw_spin_unlock_irq+0x23/0x80 [ 1320.531926][ T1082] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1320.537252][ T1082] ? trace_hardirqs_on+0x67/0x240 [ 1320.542275][ T1082] ? __kasan_check_read+0x11/0x20 [ 1320.547443][ T1082] wait_for_completion+0x29c/0x440 [ 1320.552550][ T1082] ? wait_for_completion_interruptible+0x470/0x470 [ 1320.559187][ T1082] ? wake_up_q+0xf0/0xf0 [ 1320.563509][ T1082] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1320.569387][ T1082] ? __kasan_check_read+0x11/0x20 [ 1320.574407][ T1082] io_wq_destroy+0x247/0x470 [ 1320.579035][ T1082] io_finish_async+0x102/0x180 [ 1320.583794][ T1082] io_ring_ctx_wait_and_kill+0x24f/0x700 [ 1320.589483][ T1082] io_uring_release+0x42/0x50 [ 1320.594150][ T1082] __fput+0x2ff/0x890 [ 1320.598201][ T1082] ? io_ring_ctx_wait_and_kill+0x700/0x700 [ 1320.604005][ T1082] ____fput+0x16/0x20 [ 1320.608602][ T1082] task_work_run+0x145/0x1c0 [ 1320.613184][ T1082] exit_to_usermode_loop+0x316/0x380 [ 1320.618519][ T1082] do_syscall_64+0x65f/0x760 [ 1320.623119][ T1082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1320.629039][ T1082] RIP: 0033:0x45a219 [ 1320.632929][ T1082] Code: 48 8d 7c 24 30 48 39 3b 75 ad 48 89 23 eb a8 cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 59 48 83 ec 48 48 89 6c 24 40 48 <8d> 6c 24 40 48 8b 59 20 48 85 db 75 49 48 8b 74 24 60 8b 4c 24 68 [ 1320.652588][ T1082] RSP: 002b:00007fe2554c2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 1320.661073][ T1082] RAX: 0000000000000005 RBX: 0000000000000003 RCX: 000000000045a219 [ 1320.669102][ T1082] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1320.677110][ T1082] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1320.685079][ T1082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2554c36d4 [ 1320.693124][ T1082] R13: 00000000004c0ada R14: 00000000004d3580 R15: 00000000ffffffff [ 1320.701130][ T1082] INFO: task syz-executor.0:6402 blocked for more than 143 seconds. [ 1320.709135][ T1082] Not tainted 5.4.0-rc6-next-20191108 #0 [ 1320.715277][ T1082] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1320.724002][ T1082] syz-executor.0 D28288 6402 8822 0x00004004 [ 1320.730375][ T1082] Call Trace: [ 1320.733654][ T1082] __schedule+0x94a/0x1e70 [ 1320.738987][ T1082] ? __sched_text_start+0x8/0x8 [ 1320.743869][ T1082] ? __kasan_check_read+0x11/0x20 [ 1320.748940][ T1082] ? __lock_acquire+0x16f2/0x4a00 [ 1320.753961][ T1082] ? __kasan_check_read+0x11/0x20 [ 1320.759046][ T1082] schedule+0xdc/0x2b0 [ 1320.763109][ T1082] schedule_timeout+0x717/0xc50 [ 1320.768108][ T1082] ? find_held_lock+0x35/0x130 [ 1320.772878][ T1082] ? usleep_range+0x170/0x170 [ 1320.777602][ T1082] ? lock_downgrade+0x920/0x920 [ 1320.782445][ T1082] ? _raw_spin_unlock_irq+0x23/0x80 [ 1320.787677][ T1082] ? wait_for_completion+0x294/0x440 [ 1320.792971][ T1082] ? _raw_spin_unlock_irq+0x23/0x80 [ 1320.798210][ T1082] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1320.803488][ T1082] ? trace_hardirqs_on+0x67/0x240 [ 1320.808542][ T1082] ? __kasan_check_read+0x11/0x20 [ 1320.813565][ T1082] wait_for_completion+0x29c/0x440 [ 1320.818718][ T1082] ? wait_for_completion_interruptible+0x470/0x470 [ 1320.825216][ T1082] ? wake_up_q+0xf0/0xf0 [ 1320.829501][ T1082] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1320.835221][ T1082] ? __kasan_check_read+0x11/0x20 [ 1320.840287][ T1082] io_wq_destroy+0x247/0x470 [ 1320.844870][ T1082] io_finish_async+0x102/0x180 [ 1320.849691][ T1082] io_ring_ctx_wait_and_kill+0x24f/0x700 [ 1320.855317][ T1082] io_uring_release+0x42/0x50 [ 1320.860044][ T1082] __fput+0x2ff/0x890 [ 1320.864026][ T1082] ? io_ring_ctx_wait_and_kill+0x700/0x700 [ 1320.870439][ T1082] ____fput+0x16/0x20 [ 1320.874408][ T1082] task_work_run+0x145/0x1c0 [ 1320.879121][ T1082] exit_to_usermode_loop+0x316/0x380 [ 1320.884403][ T1082] do_syscall_64+0x65f/0x760 [ 1320.889049][ T1082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1320.894935][ T1082] RIP: 0033:0x45a219 [ 1320.898881][ T1082] Code: 48 8d 7c 24 30 48 39 3b 75 ad 48 89 23 eb a8 cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 59 48 83 ec 48 48 89 6c 24 40 48 <8d> 6c 24 40 48 8b 59 20 48 85 db 75 49 48 8b 74 24 60 8b 4c 24 68 [ 1320.918541][ T1082] RSP: 002b:00007fe2554c2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 1320.927035][ T1082] RAX: 0000000000000005 RBX: 0000000000000003 RCX: 000000000045a219 [ 1320.935009][ T1082] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1320.943019][ T1082] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1320.951016][ T1082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2554c36d4 [ 1320.959045][ T1082] R13: 00000000004c0ada R14: 00000000004d3580 R15: 00000000ffffffff [ 1320.967082][ T1082] [ 1320.967082][ T1082] Showing all locks held in the system: [ 1320.974850][ T1082] 1 lock held by khungtaskd/1082: [ 1320.979921][ T1082] #0: ffffffff88fab880 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 1320.989336][ T1082] 1 lock held by rsyslogd/8690: [ 1320.994158][ T1082] #0: ffff88809df48ae0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 1321.003427][ T1082] 2 locks held by getty/8780: [ 1321.008126][ T1082] #0: ffff888090cb9090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1321.017112][ T1082] #1: ffffc90005f212e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1321.026809][ T1082] 2 locks held by getty/8781: [ 1321.031474][ T1082] #0: ffff8880982f3090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1321.040471][ T1082] #1: ffffc90005f312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1321.050046][ T1082] 2 locks held by getty/8782: [ 1321.054689][ T1082] #0: ffff88809a224090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1321.063660][ T1082] #1: ffffc90005f4b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1321.073235][ T1082] 2 locks held by getty/8783: [ 1321.077949][ T1082] #0: ffff88809ada2090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1321.086924][ T1082] #1: ffffc90005f292e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1321.096637][ T1082] 2 locks held by getty/8784: [ 1321.101295][ T1082] #0: ffff888097de4090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1321.110255][ T1082] #1: ffffc90005f3d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1321.119875][ T1082] 2 locks held by getty/8785: [ 1321.124532][ T1082] #0: ffff888095303090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1321.134081][ T1082] #1: ffffc90005f412e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1321.143686][ T1082] 2 locks held by getty/8786: [ 1321.148370][ T1082] #0: ffff8880a991f090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1321.157353][ T1082] #1: ffffc90005f192e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 1321.166985][ T1082] [ 1321.169299][ T1082] ============================================= [ 1321.169299][ T1082] [ 1321.177753][ T1082] NMI backtrace for cpu 1 [ 1321.182073][ T1082] CPU: 1 PID: 1082 Comm: khungtaskd Not tainted 5.4.0-rc6-next-20191108 #0 [ 1321.190627][ T1082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1321.200662][ T1082] Call Trace: [ 1321.203938][ T1082] dump_stack+0x197/0x210 [ 1321.208245][ T1082] nmi_cpu_backtrace.cold+0x70/0xb2 [ 1321.213429][ T1082] ? vprintk_func+0x86/0x189 [ 1321.218005][ T1082] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 1321.223625][ T1082] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 1321.229646][ T1082] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1321.235522][ T1082] watchdog+0xc8f/0x1350 [ 1321.239768][ T1082] kthread+0x361/0x430 [ 1321.243844][ T1082] ? reset_hung_task_detector+0x30/0x30 [ 1321.249390][ T1082] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 1321.255093][ T1082] ret_from_fork+0x24/0x30 [ 1321.259668][ T1082] Sending NMI from CPU 1 to CPUs 0: [ 1321.264947][ C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 [ 1321.266726][ T1082] Kernel panic - not syncing: hung_task: blocked tasks [ 1321.280035][ T1082] CPU: 1 PID: 1082 Comm: khungtaskd Not tainted 5.4.0-rc6-next-20191108 #0 [ 1321.288608][ T1082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1321.298648][ T1082] Call Trace: [ 1321.301992][ T1082] dump_stack+0x197/0x210 [ 1321.306311][ T1082] panic+0x2e3/0x75c [ 1321.310193][ T1082] ? add_taint.cold+0x16/0x16 [ 1321.314845][ T1082] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 1321.320492][ T1082] ? ___preempt_schedule+0x16/0x18 [ 1321.325599][ T1082] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 1321.331733][ T1082] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 1321.337874][ T1082] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 1321.344029][ T1082] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 1321.350179][ T1082] watchdog+0xca0/0x1350 [ 1321.354406][ T1082] kthread+0x361/0x430 [ 1321.358463][ T1082] ? reset_hung_task_detector+0x30/0x30 [ 1321.363993][ T1082] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 1321.369691][ T1082] ret_from_fork+0x24/0x30 [ 1321.375715][ T1082] Kernel Offset: disabled [ 1321.380116][ T1082] Rebooting in 86400 seconds..