x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0xbf, "5d08ba66328981a86c1158d862f0d85c2bece52a78c2ba382207647414fafff9b890ec894dc5e99f424ee5434011e6dd8923085c98aa7947ee7f1be0cc58976a4b7b3c13a597a9f4484a488967840851463ce116cfc398e6a43763c07fbe0452e497c8c57e135cce68685dcb4c142659cd839b0831a9e0e0b20a5c3b68c2e8322e8e4d31e318d4528be206822ef7aedf921245f4cf13ddf022169fee5d5969a93c6cf8911c223240a6ff986447a0608abf03ba92fa5213968b35b34cbf43a1"}, &(0x7f0000000000)=0xc7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.current\x00', 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x200, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r3, &(0x7f0000000580)="89323f73414cc29ff118153d9f6f16919e9cbff5299a18f2e4beac4507eea2abfbefedeeffad65f89ea968f7c26fd86152e2d1b71d69f0cf1060449127b0a6ccc49d670082d0e0f91c25721a3ed2d6a3c98ee373277561eaca9496ebd41c7a714b8f35e951076a5568a653065c1a1f25fd6bf779ee96aa0ff875a8eddb0000000000", &(0x7f0000000140)=""/47}, 0xa177afcc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2}, 0x8) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:40 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'b\xff\xff\xff\xff\x00', 0x20}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) 15:13:40 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:40 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) prctl$PR_MCE_KILL_GET(0x22) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:40 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:40 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:40 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:40 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x2cf1fb9f, 0x4000) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000240)={0x1, 0xe0}) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f00000001c0)={0x0, 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$NBD_DISCONNECT(r3, 0xab08) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x191102, 0x0) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f00000000c0)={0x81, 0x5, 0x1}) 15:13:40 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:41 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:41 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:41 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@initdev, @in6=@local}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x8, 0x10000) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) mlockall(0x2) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r3 = socket$inet(0x2, 0x0, 0x7fffffff) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x8, 0x2f}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={r4, 0xe873}, 0x8) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000000c0)={0x40, "bf3191a95a23a6b2591758a2140863983a0fa8f6f55b76f2042acc7eed560f22", 0x40, 0x9, 0x9a0, 0x6, 0x7}) sendmmsg(r2, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:41 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:41 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) r1 = dup2(r0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r2, 0x0, 0x2, 0x4}}, 0x20) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:41 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:42 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0x249) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mknod(&(0x7f0000000480)='./file0\x00', 0x1043, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 15:13:42 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:42 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:42 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:42 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x43732e5398416f1a}) 15:13:42 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:43 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@initdev, @in6=@local}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:43 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000280)="bdc55c2d70e5747d523791ce7840477f", 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x80000001) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x111) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x9, 0x0) accept4$ax25(r2, &(0x7f00000000c0)={{0x3, @rose}, [@null, @bcast, @rose, @rose, @rose, @default, @netrom, @rose]}, &(0x7f0000000140)=0x48, 0x80800) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f0000000100), 0x4000000000005db, 0x4801) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0) 15:13:43 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0xfffffffffffffffc, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x56, 0x2, 0x1ff, {0x2, 0x3}, {0x8, 0x81}, @ramp={0x81, 0x3, {0x9, 0x7, 0x6a, 0xc813}}}) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:43 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x80, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:43 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x80) statx(r0, &(0x7f0000000280)='./file0\x00', 0x6100, 0x0, &(0x7f0000000400)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x501000) getsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f00000000c0)=""/29, &(0x7f0000000100)=0x1d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000200)={0x2, 0x0, "c9e4fa029194f3cb67d2fed5e4bdd32fb066d3f4e2ac8bed07f0e342366e41c6", 0x7fffffff, 0x9, 0x7, 0x1, 0x10}) sendmmsg(r2, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:43 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) readahead(r0, 0x7, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000040)) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:43 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x98) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f00000000c0)={@host}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x20) 15:13:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:44 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:44 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:44 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:44 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:44 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:44 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x205, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x282240, 0x0) 15:13:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:44 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:44 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:44 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:44 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:44 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:44 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x1, 0x0, 0xe}, 0x20) getresuid(&(0x7f00000002c0), &(0x7f0000000400), &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x7fff, @loopback, 0x80000000}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, @in6={0xa, 0x4e21, 0x9a, @ipv4={[], [], @local}, 0x80}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0xfffffffffffffff7, 0x0, 0x985, 0xfff, r3}, &(0x7f0000000280)=0x10) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:44 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:45 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:45 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) 15:13:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) 15:13:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) 15:13:45 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:45 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, 0x0, 0x0) 15:13:45 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) 15:13:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:45 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:45 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) 15:13:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, 0x0, 0x0) 15:13:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xffffffffffffffff) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:46 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) 15:13:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, 0x0, 0x0) 15:13:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040), 0x0) 15:13:46 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) 15:13:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040), 0x0) 15:13:46 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040), 0x0) 15:13:46 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) 15:13:46 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) 15:13:46 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) 15:13:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) 15:13:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x101000) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) ioctl$SIOCRSACCEPT(r1, 0x89e3) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000140)) 15:13:46 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) 15:13:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) 15:13:46 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:46 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) 15:13:47 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) 15:13:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x1b3, 0x810) 15:13:47 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:47 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:47 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f0000000000)=0x12d) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:47 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:47 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:47 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:48 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x1ff, 0x309000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getflags(r0, 0x3) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000400)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r2, r1, 0x0, 0xc, &(0x7f0000000440)='t\x00\x00\xcf\xccT\x10\x9c\x11\x97\x03\x05', 0xffffffffffffffff}, 0x30) r4 = perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x8b5, 0x8, 0x0, 0x3, 0x0, 0x9, 0x2000, 0x0, 0x0, 0x1, 0xffffffff, 0xfffffffffffffffc, 0x1, 0x4, 0x400, 0xfffffffffffffff7, 0xff1, 0x8, 0xff, 0xd55, 0x1, 0x2, 0x0, 0x1, 0x612, 0x80, 0x5, 0x9, 0x0, 0x3, 0x7ba17e58, 0x2838904a, 0x4, 0x9, 0x2, 0x800, 0x0, 0x223, 0x1, @perf_config_ext={0x9, 0xfffffffffffffffc}, 0x80, 0x3ff, 0x60000000000000, 0x3, 0x8, 0x1, 0x7}, r3, 0x0, r1, 0x9) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000), 0x10) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f0000000440), 0x400000000000211, 0x810) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f00000002c0)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 15:13:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:48 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:48 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:48 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:48 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:48 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:48 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0xfff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f0000000440), 0x400000000000211, 0x810) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x1) 15:13:48 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:48 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:48 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:48 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:48 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ftruncate(r0, 0x380) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4200) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xfffffffffffff801) 15:13:48 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:48 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:48 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) lstat(0x0, 0x0) getresgid(0x0, &(0x7f0000000b00)=0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000600006c06cee8a9c4ad53769f9d2518efe1ce6f4a0c4b9d4630edb84fe708644f2e7db8c7c0d2fa313d544d18ce136b0d26d4e71e5e09a4c5a3b316e64c5ec485159e64cb3f48a1dfe71a95b54e18bc6a2353818bd5e29656ad7e0e29d39caeb144a94714375ae2e8089f011a330931a9e7925bf59000"], 0x1, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xfffffffffffffdff, 0x8, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) poll(0x0, 0x260, 0x0) setresgid(r0, r0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) openat$cgroup_int(r2, &(0x7f0000000680)='cgroup.max.descendants\x00', 0x2, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000001c0)={0x3, 0x0, 0xc, 0xc}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)) geteuid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast2, @in6}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) getpeername$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x3, 0x7, 0xc0db, 0x0, 0xd}) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r3, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x5}) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000000)=0xe324) readv(r3, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:48 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1003f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0xffffffffffffffff) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f00000000c0)=""/152, &(0x7f0000000000)=0xca) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000013c0)={0x6, 0x3, 0x46df, 0x11, &(0x7f0000000280)=""/17, 0x1000, &(0x7f00000002c0)=""/4096, 0xf3, &(0x7f00000012c0)=""/243}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000240)) 15:13:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:49 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:49 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xa2, "9bd64f2270e60c8cda7375f7f769b9b3381dc6839ab1b88897e1ea15628183635a2ccc6e5aa5c1fdb440a146c743dee7f1eca16ea6e384fab80dd48965ce624ec8e0c7938d2188690ed0cab9442edd1fa94ab7beda902d87d594d9dc52c3aa547ae98263e179f7331f1d32358d6d414e70c27220b73b3508d5b7c2f5402fd2ee9c8b2241e86c69c453a5c746de5d358a62efe18147430fb4d2fe0b03e9eec910d158"}, &(0x7f00000000c0)=0xaa) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r5, 0x4) sendmsg$key(r3, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0xff3f, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:49 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) r3 = dup2(r0, r1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x174, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10001, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}, 0x318}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x4, 0x80000000, {0x77359400}, {0x3, 0x2, 0x0, 0x2, 0x0, 0x2fc, "4d4fa936"}, 0x9, 0x3, @offset=0x1, 0x4}) sendmmsg(r2, &(0x7f0000000440), 0x400000000000211, 0x810) open(&(0x7f0000000580)='./file0\x00', 0x8000, 0x103) 15:13:49 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:49 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:49 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xa2, "9bd64f2270e60c8cda7375f7f769b9b3381dc6839ab1b88897e1ea15628183635a2ccc6e5aa5c1fdb440a146c743dee7f1eca16ea6e384fab80dd48965ce624ec8e0c7938d2188690ed0cab9442edd1fa94ab7beda902d87d594d9dc52c3aa547ae98263e179f7331f1d32358d6d414e70c27220b73b3508d5b7c2f5402fd2ee9c8b2241e86c69c453a5c746de5d358a62efe18147430fb4d2fe0b03e9eec910d158"}, &(0x7f00000000c0)=0xaa) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r5, 0x4) sendmsg$key(r3, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0xff3f, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:49 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) getsockopt$packet_buf(r2, 0x107, 0xa, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x334) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:49 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xa2, "9bd64f2270e60c8cda7375f7f769b9b3381dc6839ab1b88897e1ea15628183635a2ccc6e5aa5c1fdb440a146c743dee7f1eca16ea6e384fab80dd48965ce624ec8e0c7938d2188690ed0cab9442edd1fa94ab7beda902d87d594d9dc52c3aa547ae98263e179f7331f1d32358d6d414e70c27220b73b3508d5b7c2f5402fd2ee9c8b2241e86c69c453a5c746de5d358a62efe18147430fb4d2fe0b03e9eec910d158"}, &(0x7f00000000c0)=0xaa) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r5, 0x4) sendmsg$key(r3, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0xff3f, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:49 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x4, 0x100) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x60) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x7) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f00000002c0)='\x00'}, 0x30) perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0xe57b, 0xffffffff, 0x7fff, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1, 0x800, 0x5, 0xe0, 0x5, 0x0, 0x5, 0x87c7, 0x4, 0x0, 0x7f, 0xb3b, 0x85, 0x8, 0x1, 0x13f6, 0x8, 0x4, 0x5, 0x9, 0x1000, 0xc, 0xfa, 0x8, 0x19, 0x5, 0xffffffff, 0x7ff, 0x0, 0x4, 0x3, @perf_bp={&(0x7f0000000280), 0x4}, 0x35000, 0x6, 0x6, 0x7, 0x2, 0x40, 0x7}, r3, 0x4, r0, 0x2) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000240)={0x8, 0x1, 0x4, 0x200, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) sysfs$2(0x2, 0x7, &(0x7f0000000400)=""/138) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r4) 15:13:49 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:49 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) fallocate(r0, 0x0, 0x1, 0x80) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:49 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xa2, "9bd64f2270e60c8cda7375f7f769b9b3381dc6839ab1b88897e1ea15628183635a2ccc6e5aa5c1fdb440a146c743dee7f1eca16ea6e384fab80dd48965ce624ec8e0c7938d2188690ed0cab9442edd1fa94ab7beda902d87d594d9dc52c3aa547ae98263e179f7331f1d32358d6d414e70c27220b73b3508d5b7c2f5402fd2ee9c8b2241e86c69c453a5c746de5d358a62efe18147430fb4d2fe0b03e9eec910d158"}, &(0x7f00000000c0)=0xaa) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r5, 0x4) sendmsg$key(r3, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0xff3f, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:49 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:50 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:50 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:50 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xa2, "9bd64f2270e60c8cda7375f7f769b9b3381dc6839ab1b88897e1ea15628183635a2ccc6e5aa5c1fdb440a146c743dee7f1eca16ea6e384fab80dd48965ce624ec8e0c7938d2188690ed0cab9442edd1fa94ab7beda902d87d594d9dc52c3aa547ae98263e179f7331f1d32358d6d414e70c27220b73b3508d5b7c2f5402fd2ee9c8b2241e86c69c453a5c746de5d358a62efe18147430fb4d2fe0b03e9eec910d158"}, &(0x7f00000000c0)=0xaa) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r5, 0x4) sendmsg$key(r3, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0xff3f, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:50 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'btrfs.', 'md5sum\x00'}, &(0x7f0000000200)=""/245, 0xf5) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x84800, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140)=0x151c, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:50 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(0x0, 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:50 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:50 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xa2, "9bd64f2270e60c8cda7375f7f769b9b3381dc6839ab1b88897e1ea15628183635a2ccc6e5aa5c1fdb440a146c743dee7f1eca16ea6e384fab80dd48965ce624ec8e0c7938d2188690ed0cab9442edd1fa94ab7beda902d87d594d9dc52c3aa547ae98263e179f7331f1d32358d6d414e70c27220b73b3508d5b7c2f5402fd2ee9c8b2241e86c69c453a5c746de5d358a62efe18147430fb4d2fe0b03e9eec910d158"}, &(0x7f00000000c0)=0xaa) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r5, 0x4) sendmsg$key(r3, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0xff3f, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xa2, "9bd64f2270e60c8cda7375f7f769b9b3381dc6839ab1b88897e1ea15628183635a2ccc6e5aa5c1fdb440a146c743dee7f1eca16ea6e384fab80dd48965ce624ec8e0c7938d2188690ed0cab9442edd1fa94ab7beda902d87d594d9dc52c3aa547ae98263e179f7331f1d32358d6d414e70c27220b73b3508d5b7c2f5402fd2ee9c8b2241e86c69c453a5c746de5d358a62efe18147430fb4d2fe0b03e9eec910d158"}, &(0x7f00000000c0)=0xaa) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r5, 0x4) sendmsg$key(r3, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0xff3f, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(0x0, 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:50 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:50 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:50 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(0x0, 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0x4000) write$P9_RREMOVE(r1, &(0x7f0000000340)={0x7, 0x7b, 0x2}, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000200)=""/152, &(0x7f00000003c0)=0x2) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000002c0)=0x9) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x404040}, 0x100, &(0x7f0000000480)={&(0x7f0000000500)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x240400d0}, 0x1a3439c986443610) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000440), 0x4) sendmmsg(r2, &(0x7f0000000440), 0x0, 0x4800) accept(r0, &(0x7f00000000c0)=@llc, &(0x7f0000000000)=0x80) r4 = syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000140)={0x3, 0x5, 0x5, 0x4, 0x3}, 0x14) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000540)={{0x1, 0xfffffffffffeffff, 0x7, 0x7f, 0x800, 0x3}, 0x300}) 15:13:50 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xa2, "9bd64f2270e60c8cda7375f7f769b9b3381dc6839ab1b88897e1ea15628183635a2ccc6e5aa5c1fdb440a146c743dee7f1eca16ea6e384fab80dd48965ce624ec8e0c7938d2188690ed0cab9442edd1fa94ab7beda902d87d594d9dc52c3aa547ae98263e179f7331f1d32358d6d414e70c27220b73b3508d5b7c2f5402fd2ee9c8b2241e86c69c453a5c746de5d358a62efe18147430fb4d2fe0b03e9eec910d158"}, &(0x7f00000000c0)=0xaa) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r4, 0x4) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x4, 0x100) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x60) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x7) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f00000002c0)='\x00'}, 0x30) perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0xe57b, 0xffffffff, 0x7fff, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1, 0x800, 0x5, 0xe0, 0x5, 0x0, 0x5, 0x87c7, 0x4, 0x0, 0x7f, 0xb3b, 0x85, 0x8, 0x1, 0x13f6, 0x8, 0x4, 0x5, 0x9, 0x1000, 0xc, 0xfa, 0x8, 0x19, 0x5, 0xffffffff, 0x7ff, 0x0, 0x4, 0x3, @perf_bp={&(0x7f0000000280), 0x4}, 0x35000, 0x6, 0x6, 0x7, 0x2, 0x40, 0x7}, r3, 0x4, r0, 0x2) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000240)={0x8, 0x1, 0x4, 0x200, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) sysfs$2(0x2, 0x7, &(0x7f0000000400)=""/138) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r4) 15:13:50 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) 15:13:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) 15:13:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x4, 0x100) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x60) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x7) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f00000002c0)='\x00'}, 0x30) perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0xe57b, 0xffffffff, 0x7fff, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1, 0x800, 0x5, 0xe0, 0x5, 0x0, 0x5, 0x87c7, 0x4, 0x0, 0x7f, 0xb3b, 0x85, 0x8, 0x1, 0x13f6, 0x8, 0x4, 0x5, 0x9, 0x1000, 0xc, 0xfa, 0x8, 0x19, 0x5, 0xffffffff, 0x7ff, 0x0, 0x4, 0x3, @perf_bp={&(0x7f0000000280), 0x4}, 0x35000, 0x6, 0x6, 0x7, 0x2, 0x40, 0x7}, r3, 0x4, r0, 0x2) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000240)={0x8, 0x1, 0x4, 0x200, 0x3, 0x4}) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) sysfs$2(0x2, 0x7, &(0x7f0000000400)=""/138) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r4) 15:13:50 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:51 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) 15:13:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xa2, "9bd64f2270e60c8cda7375f7f769b9b3381dc6839ab1b88897e1ea15628183635a2ccc6e5aa5c1fdb440a146c743dee7f1eca16ea6e384fab80dd48965ce624ec8e0c7938d2188690ed0cab9442edd1fa94ab7beda902d87d594d9dc52c3aa547ae98263e179f7331f1d32358d6d414e70c27220b73b3508d5b7c2f5402fd2ee9c8b2241e86c69c453a5c746de5d358a62efe18147430fb4d2fe0b03e9eec910d158"}, &(0x7f00000000c0)=0xaa) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:51 executing program 3: socketpair$unix(0x1, 0x4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xb0000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000100)={0x6, 0x7, 0x801, 0x90004, 0x800000004, 0x521}) 15:13:51 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) 15:13:51 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:51 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:51 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:51 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x8e0) 15:13:51 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000001140)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, '^+'}}, 0x23) write$UHID_INPUT(r1, &(0x7f00000000c0)={0x8, "0791e0b37bd65cf267ab83dff565c7ee11d629ba13f0ed1340240888260eb19c5c450f829b17e4953eac6387d622233efc2242126200811781a2ff8aea5fad4e56011e79e5622b24be1fef03775a0c5a4ccc5f9b897c9906a8c3b6b085485fc957dae6dadc9df38d91eda395c44a8f8238066e772ddd106234d89dc1d3b0c904d1459bb5e63a06d5dd994db12e2b4f2be8417a8e1941518682f180df05673a4838e14bba28a3f428358a3ac9646703d64b64bf21e988d9c66c07d6804e45a563d1ce14f8ca91932902e2ee638f66afe8fdde3e1c1a4ecda7383d56d19c026cd5525f4880e964d5142ecbcaf377e49e26d1118c76880c78e5eeb48ec5c515883aef0bbd689c6ad6b11de13f5ad080f5d0c4200d9e2f78e355a96697eca2ffa8a72cdb6fcd92bb63b7a4f11d2da347e77d8deb9649f26df7a02e7916b827e4b1fb249fdb21e9d45e924ed0b9b4f02494a889ee080f40c4bb030101cabe07f2b198e6839af6af5838ba15c4def8100015c2f5edcaf9f51cedd1f13b2bcb7607e896f7f9db539ca7ff818587a096fb822597a12f6382b7fbcd65520c37ae69de93b64534ab23ef043108036272227c984fd8d806dafbbdd378a1577af1ddea04b5f95fbb4be25987d53f5f5b0e82d54295d2857f5412c39805b1cca8dcd757cb8ee3d4407f54947be55ec108cc61af42049d96a5da336bd462be48407c4d2f5ebf1ad660397876c0012e8e187c5becdee9b0ef30f97b94ab2f5bd6078e65359a0d9c2c9e63b0f94fef37bdab22ccc9f3c86e8de520d11a732baaabc28a5d2132da4bf848d7d68dbce6efbcc6b76391ae1d1354aa10059a3bfc635d689d98cfc6379b396aa184e59db722af85e1bf23cfe1c26f103eaee69c6c78de1d4d0407c19d7108046f6510dab22b7e54c302ed9945e4b8390b3e541ebe802385128bf5a8d17c99bfa948e4e3208b854210ae087638df82a5cf359f880bdacbba12f76adb61a7b3bfe1b699b0600a8efb10b5287a86eeffce3379bf69e90917fc1de1329e46671821353a4cca6ee34a19590a02a6f777244ecf9996e602674f41e7d1c9ea8a3c7fe16002d65ffd9849820ae0b433350a7e9581230050876d356599caa09142bb7e0429c30d28d5313ec56a1ecce5830b7a6bbb7dffc7f72874147cbece35c91acdd6650a35ef88597676b50242c058ac5c85bf5fe306a2d5a44a8b7c781ae80c1f1113ad7070ec1a449cc36d18c497fcbb4608d1fcc9f26089467184becb760e9edfddd06949541069fc4bf04cee3e2a5d9f4d62d3077be0a5940debe79f956a83945bf413b3b00d50dd3902af89505a6aa2cee90da0e6218d4f0018a1b90f1e621d9b7e8dd742209ea9b322f8809e56947db8d7d387815146bac686bd10107ee7db22cf21bfeb6f91b89218645836e7967ba3ed361930c1ef82c8c3e8955c3dabd072be9dc7ee05c9c163646a18c3634359dd1dd64e0055123a60f4e56a2c95c6ca78daaad68fe7c943e76f0c3664c73bd216ed5c12d9a1da1a9cc2ea5bc8574bfac04ff9e425b83041752c01d3d360c0a809d0df98aed09af3c3e56001da2f0c96fd3620e53430ee20a6785a61cad83d188da8589fccc321d302f8082560c39a1ff70220ec01b00bab133a78873903f3bfb0f74494f4ffd3f45a6c22273937733476db1fbaf738a75cf89f9904b2e9159499f52f0f160d76ee7509c8e7248ac50c27b486c4c296a76e0e23e7827c7e2ea0cb821bfa50213eebaebae495f1a75a04e3c9b185b200a609bcb31f03f4c9b8f31977eedf3f0ff4a34388c035d4d0a740c487d056a5b5030030d0392075dfe27a051247a8a1babfdcb9ce3fcbbf7623240f77cd36598f5022f0886e6c582b64f944384494e0a7e4e6251a0e539d7ce8700d63b7caf524bb34249f69e1d2eda61b935635fb4c75fa18133e178b10524220abe030dd30f753a4d47718960c59c48db9fe86a853699688ea460a9c1d49dc67dc9ad02dd10a888cf1cede8b30db2f559cf7c9181476c48869e27041a207da59cae6e7cded6a7589f69c2d7bd396bc329359e1c18f9b8333d870b98211d2fb284109661c295aaa395b8ecd5fe3e0d1cedd247e79254cdc19f3cdef5d911b5e0c7134cb6f0bb91e8adbfaa922c04f46a866b6d12d665795b3f4a352b56d785d13e72c2a9eed8fec2ea5f21111903f737529d228b77833040318d18a493fd8fd7ef993ea8ac9406472ffb24fde2153f4dcfce3fe4f889f4916a8ae987fea400686c965f72f03715f77ff8a73453b34f88b5e437de78be4a684f70d34c61e7dbe18da301e240115375e7c7d57daef53ac1f3d812f31324232b399b9e1442bd2243d6863d5168f1dad7ef7f77c6e64581cf35539acaacfab25244fdb29a7e37cd5efa595dcefd045b73ab56bb543a262b0e32aaa7e959d875e396e579d08aae02cba69b43f15f27ebc29ab33d2845a4feb88d19aa932df4b2eac3164b32e237dffc9d0fe107f2930f7f0546b55296185db0f04b5c9c06fdead78f7fe22e25a3383bc838671c8650eb48d528ea8059f830cf709173c41ab637d62376ed9369b564c9a29b096eb4d1fa21327ff5407c86e79c801148d3aab082b122de34741857c58d7a5ad69b14f2ea906cac8b18d48a33320feb745363ef715a3ffbfc04816e274bd132e9a239d8ee4d754312daaa501f8c32b21d8c0dec1f2f02dbc4916511278bc970ab788c08265233c08263a708fcb6975adf8b5bd7303d399054a1aeb4cc929570d03a1cf8bdf49c3b8bdfb948a976945db902864cb5dcb78ccf6c596e4825bc45b87ae8df02c32b086eda9616f6de6b9ef5c927f8806a670b5d0efcd37b7c723a2c87a3d68d8207b10efe40a52d39cc19a1624f5eeb961d2c4adf7303bdea5f5ec83b62be567a3152479f5791666171665480064e9418dfd0c11bad79aac4d006f34669b559cd9f005cebc166c242abea82abb372a3995e1165ce522267aeafdcc8499f3ca92060dd6050890cb24be8e76dad009e5e29daa1c7d1f05a6b61b4c285532c62b26bb9510d0508789579e8f3be51256a292fda9df7a6c82a280f25715aba2004234f1a27c9b6a6a45ee749f965a40280a980ed1d487117b771694ce6dddfb261dea025d0c4b854ee3d7276dd4f48f86760fd757f87edc7952a3729a63ff923e9b29da49cfa6e5194204c0dcf38cb9f1bfa4c5ec92cb197c86acd64a8e06ebaf2d07fd9eed233447e92a0c00cf4c9826628d27fca4b7d361df4178319d8ae769ad286ecc8808505ae01f09507382203e891ed5fbb32c24d5a6d0cfcb557b3a7f2112ecc0d0906c0ac3237de8aaa213b1ca02ce3da434f13a1636f528cf2753ec2e1a8d01373fbe6bfe357fa0c68df477a14389042fb95f3c1388a845ff3f40debd72342c52221da3129dbf3388690196448d5d296f476ba7d423814e25263232f8b5b9fcfde642dafb6b8107e54f57aa2b5561d4eabe20e7c21d93220847a96ed11062d68362d0b4af97144c14a31cf33cc0e9c21e546168c2a0ea5507f8911e6b4d640884a224dd7216ce937323dd53308c579792e6f8f891fe9bcb947b4d3c56e2e0cd12cd3ca947ef22844243c35fb301a003e8070e801013811904711c2305ac51dfb9a04b5ef9498753c2c6efb2c778a13ac34d9e34dd3be364d7220f116abccf5ce85d8e93438c8abf27e8fbc385c882a290bf5da3c18a471fb025e07c89ea7dde2d883e440eb2f7903ff31c42a690ec51af2e70f94aa42a6b237db8d9de4558ad7e253376a22a9e0d8d00a4291f4a70413e0dfab84f609e2f67ee0557321e7e63f82c5ed8cbfee22978e15d5c6b8e97cf59e3096955e5684e8b7e42213c326238daf34eec0c81ab09fdd8518f516fba7f54a367766acae43da1476a4719f756fa936edceac0602f263b1a4e34b068f64483f124c75d646ee33e15232087222fd432fd513de6059e3225d4a358d564b4b5542348b3bfdcbe8f613d6ae049b65fac4e6e55f2583781560e94f89233dd03495d951a9e016be3eb5354058adca2c171e1a966e0389d18d6f09114ceb52fa8612802d914401ad618c5139828ca836670c6c50647cdce8b176c484b4309b0e6229501ea1e8687e4941a265dca6b145d7559ff89501953f49eed44bc42f8b4400bdaa2fbd94772f6f489c87fc53c0c0b40d1aa17bddccc4848d17ba0cf59015c2298ea67740ec127b151ccce8c77f88fce0f174e089ed4862fdb80f6e464c63692f23a2f6274b4c6ab483db70e01869b0da171467a142afe6da7a3ddaed57721c541fe15b10e41af554c6e4d47e96a65f42bc6cc2032de6b543295bf4f75e9f61a9253e4145b7a28a67acf437568383b371725d7f74bd428d2337e31a7a133797d01b0d61893438d894ea0b264df98e588ec81738cb5cffe560e30a8351734395458daa1f8dfd469ac523ecd6ab196fdba2e64ab2003629e195c89724c296b864e77d545175b4fe79088886c51ef5a8f9fc2e15fe3670ddba65b09d925420c4f20c2f733668cfcb7cbc1fd5527fec711296868353f65d1321edd848b058dbfaf9b002f4dd84823ecf86db2f729bad6df89abd62e7527055166a56e0f741d644a3efd7f1198acc940a9ad945ad529bc74b5b825b0d28d13c254acec67d65972c7d91a9c2a96dab25a655cacfa10cd53db19f29fd7e1aff16b2837aacbb9d5813abed7342f21059b2cf7d275b7fc81d822d00de03ff0950684257fcb5e94e423b790db7f9c42c23011ca199dc54a9ef72d0cecde9b9679c369c8a39dd463ccd5dc69791149d1f123b33d6b3251305746086c51a91888fe7d068e81f696a2cf654b51de77186afdc1f20056c769bc038917d5bccdc79d4fdda5f624811b9f2ef3a4ed35dc80604e4bf82efb6094b6c7047e31c929d86c04a4d3a75dd5cb0b57a729392b417c76593ceaf73176ac5688f32f756107771ba6d33a5940b9f501daa0f9758b95f5b5fc0c9a6b8d02387a897ad9a43e86d02aeca0682dee69d6528969c84e57b3fef74483074b1c2bb2a3e364b398843159066322fb2ce1fc7c5312297673035914e6a2d6a3bdf5063642b2645049d6263dcef68bcb0877c9591cc2b86b140a3c43b4a55cb2cc6236da601b7f30590122f9b06dc09db86df74c9bc2c0bd6f0b028fa9d82918b637f1e4bece31ca073045317bb05d78e5d32b82c6194e619bc035bd73022624815dc56bfedb0a9d6277b66e643f2694257e886e0aef7c06198693e55ae1dc66f396d7e5fa38147c916fa86935304da1075fa495abea0158d60b6b22b8416d5126e62a3f7da15461589ed76280d8f8554680a4c3d6c10f41a64ba61ed36a8e63c3e2ac0ae55b6a40bb57ea795dc2d8b3f57566277b86d89a9c9c72ed5c27a36c292a4391d51a9b9330b68df264c876a1e5cfa7313f629300b3c8d10aa2294f1b68ded926372af2b3214a32cf3becf43d482b047a53a6fca34dc9e7bfe9983635789cd19e82d8366d2339bb0fd0c767b05eb9c90d33d2e2594bf62bb8d363c725f965680819ef9dd9af0fe2e33f9b4451506002aaba4008f0a13c5f673716dd544b5b8b27039f3b1f6e7b00265379864ba34cbc5a4f22939b78e213f9309450f1aec344d20d021d89f2f821295f1d4aa509916b3ab2d0157df6a3b87a5b59e38b0d3ab0d4edf2f36daa7f23f3203648fcd31d7ccd0fe2eda640cfb7425f41caf9ac0eea61c660d9e4fe7413446db010848844fd4c38d800577698d84bc8a8bb06ae55091def80050a64c574def101fb4bc9fef64fe87c43d5bf7232034ca0", 0x1000}, 0x1006) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000000)=0xe324) readv(r2, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) [ 1142.741093][T24763] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:13:51 executing program 3: socketpair$unix(0x1, 0x10000005, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_read_part_table(0x3eae, 0x7, &(0x7f0000000600)=[{&(0x7f0000000000)="8b61d71315eb1529eccc8980faa67bcfd449b800149b7fffa66b", 0x1a, 0x4}, {&(0x7f00000000c0)="931085842ea3d33b895c342f57b3a7d476bac54d912d1388afe8581415cd16b70a5cb26219a596941b381e50f9de546d4b887bcc20d9f0737ef49c751b41b8871d0a3a1bfe1e7a32f431e822ac205d0f3da7c86d4336241594b39dfcb9a3afe135d11f3b3ce0dd444f74401f4b674f7742ae388c066863ba7b2a837fefed9ec6aae38c538027cf75cb76788f14b96edcc6074323474ad66fb33862ba7e4f7da618c239c53e", 0x2ed, 0x3}, {&(0x7f0000000200)="f5bed62f09b91155be44eb1b652c5e8a68c12d4ae05d71f4d0551a8320d74366b414d1afc860aa15f6a9e4a1c06b839b179e3d030be0d9cb5187f5f627ef06c5cabd0f937c7ff3007855498302ae9743db98f4201f1379cd75e792e026c26bb11fd3764b612bf625980785c0681d0a6dd2129f2eb2f9900242c1df006dee6b27cf031197d9df279eb2cb2f0a7ca955266170797698b4db4aebbf", 0x9a, 0x7}, {&(0x7f0000000400)="1867269c5229ce1323ff5d15b3d28548d1a5049815dd55b36db686caa3403bf56948424da224c06cdb176dd2ac112f18d2ab153a7a55a88708c4075f28a32a76e80504136472b8e246df996627371b2fec7f1d69da2d9fec9eb04c34a37ddd31fea497b65de25606209ef6e31a6f8c29f01d12c53920200cde51db36996c3452d2021532dd91331ec06a3070065f089e943a0b651fbddda533178c4b3f413eeb71c56813db83662d5775", 0xaa, 0x80000001}, {&(0x7f00000004c0)="1f7d54c7717612409a6cb92134e69ab0db6f15e828ec06ac554afbe57a4a59082b120ff621c95e328c516883219d303b3e4f492599da9fbf45d6bd2807e98e736fedf512", 0x44, 0x4}, {&(0x7f0000000540)="fba23045c32e99c976c9ea66db73610299aa3fbdfa3721d65872e65f88b94ae32938f0a61cbe5d636e83c6f6656e23b756080c21539fff053e65026f32a6f0fc0b0d6d40f69db5467681777c42fcfb9dbe6b2e70220f4d7f71d65d79d4cb4e4ae43c8cfcbcc5314770d510b44500d19f3781e0dfda69d5981f36e464ee6b2439baf479685fc0fdc527896f98cc06b9185b21f099adf8be31115bed3535a7e99574c10c", 0xa3, 0x4}, {&(0x7f00000002c0)="7ca2cac5aefabf8e6817dd2b4ca0c2c86b37b5beb062605485d60cfd31d2130c5c91786df8f621", 0x27, 0x1000000000000}]) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:51 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:51 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:51 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:51 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:51 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:51 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x5c5, 0x9}) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) socketpair(0x6, 0xa, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:52 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:52 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="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", 0x1000) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x10004, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2, 0x4}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='cmdline\x00') setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000180)=0x5, 0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:52 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) [ 1143.750159][T24903] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1143.750159][T24903] program syz-executor.0 not setting count and/or reply_len properly 15:13:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x5c5, 0x9}) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:52 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x10004, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2, 0x4}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='cmdline\x00') setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000180)=0x5, 0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:52 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x10004, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2, 0x4}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='cmdline\x00') setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000180)=0x5, 0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) timerfd_create(0xf, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @mcast1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000000c0)) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f0000000440), 0x0, 0x40010) 15:13:52 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x5c5, 0x9}) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:52 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x10004, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2, 0x4}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='cmdline\x00') ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) [ 1144.188325][T25128] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1144.188325][T25128] program syz-executor.0 not setting count and/or reply_len properly 15:13:52 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x10004, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2, 0x4}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:53 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:53 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 15:13:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x10004, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x5c5, 0x9}) fcntl$dupfd(r0, 0x0, r0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:53 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:53 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) [ 1144.481188][T25415] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1144.481188][T25415] program syz-executor.0 not setting count and/or reply_len properly 15:13:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x4, 0x4e) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:53 executing program 5: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:53 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:53 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x5c5, 0x9}) fcntl$dupfd(r0, 0x0, r0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:53 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:53 executing program 5: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7fff, 0x80000) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) [ 1144.703137][T25629] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1144.703137][T25629] program syz-executor.0 not setting count and/or reply_len properly 15:13:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x6) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000400)=""/137) sysinfo(&(0x7f00000000c0)=""/56) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x4e20, @empty}}}, 0x88) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:53 executing program 5: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:53 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x6) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000400)=""/137) sysinfo(&(0x7f00000000c0)=""/56) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x4e20, @empty}}}, 0x88) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x5c5, 0x9}) fcntl$dupfd(r0, 0x0, r0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:53 executing program 5: r0 = syz_open_dev$dri(0x0, 0x10004, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) [ 1144.991421][T25793] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1144.991421][T25793] program syz-executor.0 not setting count and/or reply_len properly 15:13:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x6) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000400)=""/137) sysinfo(&(0x7f00000000c0)=""/56) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x4e20, @empty}}}, 0x88) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:53 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:53 executing program 5: r0 = syz_open_dev$dri(0x0, 0x10004, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:53 executing program 3: socketpair$unix(0x1, 0x8, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0x7f, @broadcast, 0x4e23, 0x3, 'lblc\x00', 0x20, 0x7, 0x7a}, {@loopback, 0x4e23, 0x10000, 0x5, 0x5, 0xffffffffffffffff}}, 0x44) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x6) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000400)=""/137) sysinfo(&(0x7f00000000c0)=""/56) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) socket$inet_sctp(0x2, 0x5, 0x84) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x5c5, 0x9}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:53 executing program 5: r0 = syz_open_dev$dri(0x0, 0x10004, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:53 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) [ 1145.240639][T26009] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1145.240639][T26009] program syz-executor.0 not setting count and/or reply_len properly 15:13:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x6) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000400)=""/137) sysinfo(&(0x7f00000000c0)=""/56) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x6) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000400)=""/137) sysinfo(&(0x7f00000000c0)=""/56) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:54 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:54 executing program 5: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xdbe, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="3e0f01ca0f01b00000ba4000b000eebaa000b80e00ef0f01b9020066b8010000000f01c10fc75b6af2a70f0665360f09", 0x30}], 0x1, 0x61, &(0x7f0000000200)=[@cr0, @cstype0={0x4, 0x3}], 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x51d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet6(0xa, 0x2002, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x5c5, 0x9}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x6) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000400)=""/137) sysinfo(&(0x7f00000000c0)=""/56) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:54 executing program 5: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:54 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x6) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000400)=""/137) sysinfo(&(0x7f00000000c0)=""/56) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) [ 1145.865195][T26240] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1145.865195][T26240] program syz-executor.0 not setting count and/or reply_len properly 15:13:54 executing program 5: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x200, 0x8d0, 0x400], 0x4, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x6) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000400)=""/137) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:54 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) 15:13:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x5c5, 0x9}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:54 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0x6) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) [ 1146.142680][T26465] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1146.142680][T26465] program syz-executor.0 not setting count and/or reply_len properly 15:13:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) 15:13:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:55 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) 15:13:55 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0xff70) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) [ 1146.567223][T26683] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1146.567223][T26683] program syz-executor.0 not setting count and/or reply_len properly 15:13:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffff9, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:55 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2466, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:55 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) [ 1146.856914][T26863] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1146.856914][T26863] program syz-executor.0 not setting count and/or reply_len properly 15:13:55 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 15:13:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vga_arbiter\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000600)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r1}}, 0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffff8, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x9, 0x3ff}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x400, 0x8200, 0x0, 0x8, r4}, &(0x7f0000000280)=0x10) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f0000000440), 0x400000000000211, 0x810) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f00000006c0)={0x3, 0x2}) 15:13:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:56 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x40000003) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @rand_addr=0xd73}}, 0x2, 0x8, 0x400, 0x40, 0x81}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000400)={0x100000001, 0xa, 0x8001, 0xfffffffffffffffb, r2}, &(0x7f0000000440)=0x10) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x400, {{0x2, 0x4e24, @local}}}, 0x88) pipe(&(0x7f0000000480)) modify_ldt$read(0x0, &(0x7f00000004c0)=""/240, 0xf0) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:56 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xc000000000000000, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:57 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19d, 0x0) 15:13:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf4e1, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x12e00, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x101, 0x0, 0x10001, 0xff}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x20, r1}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x210040, &(0x7f0000000540)={'trans=unix,', {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@cache_none='cache=none'}, {@mmap='mmap'}, {@msize={'msize', 0x3d, 0x10001}}, {@noextend='noextend'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@privport='privport'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/vga_arbiter\x00'}}, {@euid_gt={'euid>', r4}}]}}) sendmmsg(r2, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:57 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:57 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000140)={0x53, 0x101, 0x6, 0xb717, 0x3, 0x401}) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x2840, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socket$inet6(0xa, 0x80003, 0x800000000000006) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x15, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000200)=0x28) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sendmmsg(r3, &(0x7f0000000440), 0x400000000000211, 0x810) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x7}}, 0x18) 15:13:57 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:57 executing program 4: write(0xffffffffffffffff, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c000, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:57 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 15:13:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ext2\x00', 0x4000, &(0x7f0000000140)='\x00') r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:58 executing program 4: write(0xffffffffffffffff, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x12e00, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x101, 0x0, 0x10001, 0xff}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0x20, r1}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x210040, &(0x7f0000000540)={'trans=unix,', {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@cache_none='cache=none'}, {@mmap='mmap'}, {@msize={'msize', 0x3d, 0x10001}}, {@noextend='noextend'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@privport='privport'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/vga_arbiter\x00'}}, {@euid_gt={'euid>', r4}}]}}) sendmmsg(r2, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:58 executing program 4: write(0xffffffffffffffff, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8b1, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) [ 1149.630271][T27497] sg_write: 2 callbacks suppressed [ 1149.630284][T27497] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1149.630284][T27497] program syz-executor.1 not setting count and/or reply_len properly 15:13:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x17, &(0x7f0000000300)=""/152, &(0x7f0000000000)=0x3fb) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sysinfo(&(0x7f0000000200)=""/244) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) [ 1149.754838][T27607] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1149.754838][T27607] program syz-executor.1 not setting count and/or reply_len properly 15:13:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:58 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:58 executing program 0: write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000280)={0x9f0000, 0x3f3e, 0x100, [], &(0x7f0000000140)={0x9c0908, 0x2, [], @ptr=0x7}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @remote, 0x81}, {0xa, 0x4e20, 0x3, @remote, 0x40}, r1, 0x6}}, 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f0000000440), 0x400000000000211, 0x810) [ 1150.250472][T27819] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1150.250472][T27819] program syz-executor.1 not setting count and/or reply_len properly 15:13:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:59 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:59 executing program 0: write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) 15:13:59 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:59 executing program 0: write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) [ 1150.501263][T27933] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1150.501263][T27933] program syz-executor.1 not setting count and/or reply_len properly 15:13:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:13:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "060df1146f22d94120451f175402df6acefb6a9aedde4442e09d91a37e68bc31"}}) 15:13:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x5, 0x5, 0x0, 0x2, 0x1, 0x0, 0x4, 0x9, 0x100000000, 0x2, 0x3, 0x100, 0x0, 0x101, 0x6, 0x2}}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x14d3700ef6142b3, 0x810) 15:13:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:59 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) 15:13:59 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:59 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) [ 1150.797492][T28151] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1150.797492][T28151] program syz-executor.1 not setting count and/or reply_len properly 15:13:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x17, &(0x7f0000000300)=""/152, &(0x7f0000000000)=0x3fb) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sysinfo(&(0x7f0000000200)=""/244) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 15:13:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:13:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:13:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) [ 1151.039404][T28270] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1151.039404][T28270] program syz-executor.1 not setting count and/or reply_len properly 15:14:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) fcntl$dupfd(r0, 0x0, r0) 15:14:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ext2\x00', 0x4000, &(0x7f0000000140)='\x00') r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) [ 1151.550147][T28376] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1151.550147][T28376] program syz-executor.1 not setting count and/or reply_len properly 15:14:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) fcntl$dupfd(r0, 0x0, r0) 15:14:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) [ 1151.788874][T28485] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1151.788874][T28485] program syz-executor.1 not setting count and/or reply_len properly 15:14:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=0x98) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000050, 0x810) 15:14:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) fcntl$dupfd(r0, 0x0, r0) [ 1152.048827][T28600] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1152.048827][T28600] program syz-executor.1 not setting count and/or reply_len properly 15:14:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:01 executing program 5: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) 15:14:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) [ 1152.449629][T28606] sg_write: data in/out 167162/656 bytes for SCSI command 0xff-- guessing data in; [ 1152.449629][T28606] program syz-executor.1 not setting count and/or reply_len properly 15:14:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:01 executing program 5: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) 15:14:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:02 executing program 5: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:02 executing program 3: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) 15:14:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:02 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:02 executing program 3: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:02 executing program 1: write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) 15:14:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:02 executing program 3: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:02 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:02 executing program 1: write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) 15:14:02 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:02 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:03 executing program 1: write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) 15:14:03 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:03 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) 15:14:03 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:03 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) 15:14:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:04 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) 15:14:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:04 executing program 5: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) 15:14:04 executing program 3: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:04 executing program 5: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) 15:14:04 executing program 3: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:05 executing program 5: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) 15:14:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) 15:14:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:05 executing program 3: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:14:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:14:05 executing program 1: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) 15:14:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:14:05 executing program 1: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) 15:14:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:14:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:14:05 executing program 1: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2c0) 15:14:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:14:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) 15:14:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x0, 0x4}) 15:14:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x0, 0x4}) 15:14:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)) 15:14:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) 15:14:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x0, 0x4}) 15:14:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)) 15:14:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0), 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)) 15:14:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) 15:14:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140), 0x0) 15:14:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140), 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140), 0x0) 15:14:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140), 0x0) 15:14:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0), 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) 15:14:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140), 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc", 0x18) 15:14:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) 15:14:08 executing program 3: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:08 executing program 3: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:08 executing program 5: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0), 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc", 0x18) 15:14:09 executing program 5: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) 15:14:09 executing program 3: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140), 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:09 executing program 5: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:09 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc", 0x18) 15:14:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) 15:14:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) 15:14:09 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc", 0x18) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:10 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) 15:14:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) 15:14:10 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc", 0x18) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:10 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:10 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) 15:14:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) 15:14:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b16", 0x2a) 15:14:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc", 0x18) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b16", 0x2a) 15:14:10 executing program 2 (fault-call:6 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) [ 1162.300919][T28978] FAULT_INJECTION: forcing a failure. [ 1162.300919][T28978] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.343595][T28978] CPU: 1 PID: 28978 Comm: syz-executor.2 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1162.352756][T28978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.352769][T28978] Call Trace: [ 1162.366132][T28978] dump_stack+0x172/0x1f0 [ 1162.366155][T28978] should_fail.cold+0xa/0x15 [ 1162.366174][T28978] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1162.380863][T28978] ? ___might_sleep+0x163/0x280 [ 1162.385717][T28978] __should_failslab+0x121/0x190 [ 1162.390748][T28978] should_failslab+0x9/0x14 [ 1162.395258][T28978] kmem_cache_alloc_node_trace+0x270/0x720 [ 1162.401061][T28978] ? mark_held_locks+0xf0/0xf0 [ 1162.406001][T28978] ? __mutex_lock+0x3cd/0x1310 [ 1162.410769][T28978] __kmalloc_node+0x3d/0x70 [ 1162.415272][T28978] kvmalloc_node+0xbd/0x100 [ 1162.420321][T28978] tun_attach+0x754/0x1440 [ 1162.424747][T28978] ? lock_downgrade+0x880/0x880 [ 1162.429594][T28978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1162.435830][T28978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1162.442082][T28978] __tun_chr_ioctl+0x1e69/0x3e50 [ 1162.447019][T28978] ? tomoyo_init_request_info+0x105/0x1d0 [ 1162.452749][T28978] ? tun_select_queue+0x670/0x670 [ 1162.457770][T28978] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1162.463579][T28978] ? __f_unlock_pos+0x19/0x20 [ 1162.468266][T28978] ? __fget+0x35a/0x550 [ 1162.472427][T28978] ? tun_chr_compat_ioctl+0x30/0x30 [ 1162.477623][T28978] tun_chr_ioctl+0x2b/0x40 [ 1162.482037][T28978] do_vfs_ioctl+0xd6e/0x1390 [ 1162.486632][T28978] ? ioctl_preallocate+0x210/0x210 [ 1162.491743][T28978] ? __fget+0x381/0x550 [ 1162.495904][T28978] ? ksys_dup3+0x3e0/0x3e0 [ 1162.500412][T28978] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1162.506648][T28978] ? fput_many+0x12c/0x1a0 [ 1162.511417][T28978] ? tomoyo_file_ioctl+0x23/0x30 [ 1162.516352][T28978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1162.523551][T28978] ? security_file_ioctl+0x93/0xc0 [ 1162.528664][T28978] ksys_ioctl+0xab/0xd0 [ 1162.532823][T28978] __x64_sys_ioctl+0x73/0xb0 [ 1162.537416][T28978] do_syscall_64+0x103/0x610 [ 1162.542008][T28978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1162.547983][T28978] RIP: 0033:0x457e29 [ 1162.551872][T28978] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1162.571469][T28978] RSP: 002b:00007fc04aa0fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1162.579883][T28978] RAX: ffffffffffffffda RBX: 00007fc04aa0fc90 RCX: 0000000000457e29 15:14:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc", 0x18) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b16", 0x2a) 15:14:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) [ 1162.587857][T28978] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000004 [ 1162.595827][T28978] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1162.603800][T28978] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc04aa106d4 [ 1162.611763][T28978] R13: 00000000004c22b9 R14: 00000000004d4ca0 R15: 0000000000000007 15:14:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) 15:14:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:11 executing program 2 (fault-call:6 fault-nth:1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) [ 1162.791475][T28995] FAULT_INJECTION: forcing a failure. [ 1162.791475][T28995] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.814544][T28995] CPU: 1 PID: 28995 Comm: syz-executor.2 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1162.823695][T28995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.833756][T28995] Call Trace: [ 1162.837065][T28995] dump_stack+0x172/0x1f0 [ 1162.841406][T28995] should_fail.cold+0xa/0x15 [ 1162.846001][T28995] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1162.851817][T28995] ? ___might_sleep+0x163/0x280 [ 1162.856675][T28995] __should_failslab+0x121/0x190 [ 1162.861700][T28995] should_failslab+0x9/0x14 [ 1162.866208][T28995] __kmalloc_track_caller+0x2d8/0x740 [ 1162.871577][T28995] ? pointer+0x910/0x910 [ 1162.875824][T28995] ? kvasprintf_const+0x65/0x190 [ 1162.880765][T28995] kvasprintf+0xc8/0x170 [ 1162.885009][T28995] ? bust_spinlocks+0xe0/0xe0 [ 1162.889686][T28995] ? __debug_object_init+0x4aa/0xe00 [ 1162.894971][T28995] ? find_held_lock+0x35/0x130 [ 1162.899738][T28995] kvasprintf_const+0x65/0x190 [ 1162.904507][T28995] kobject_set_name_vargs+0x5b/0x150 [ 1162.909792][T28995] kobject_init_and_add+0xc9/0x160 [ 1162.914914][T28995] ? kobject_add_internal+0x380/0x380 [ 1162.920287][T28995] ? kasan_check_read+0x11/0x20 [ 1162.925141][T28995] ? netif_napi_add+0x5fc/0x750 [ 1162.929992][T28995] ? find_held_lock+0x35/0x130 [ 1162.934754][T28995] ? netif_napi_add+0x5fc/0x750 [ 1162.939621][T28995] netdev_queue_update_kobjects+0xf6/0x3d0 [ 1162.945438][T28995] netif_set_real_num_tx_queues+0x1c2/0x720 [ 1162.951340][T28995] tun_attach+0x512/0x1440 [ 1162.955760][T28995] ? lock_downgrade+0x880/0x880 [ 1162.960627][T28995] __tun_chr_ioctl+0x1e69/0x3e50 [ 1162.965563][T28995] ? tomoyo_init_request_info+0x105/0x1d0 [ 1162.971288][T28995] ? tun_select_queue+0x670/0x670 [ 1162.976315][T28995] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1162.982124][T28995] ? __f_unlock_pos+0x19/0x20 [ 1162.986807][T28995] ? __fget+0x35a/0x550 [ 1162.990965][T28995] ? tun_chr_compat_ioctl+0x30/0x30 [ 1162.996162][T28995] tun_chr_ioctl+0x2b/0x40 [ 1163.000580][T28995] do_vfs_ioctl+0xd6e/0x1390 [ 1163.005171][T28995] ? ioctl_preallocate+0x210/0x210 [ 1163.010279][T28995] ? __fget+0x381/0x550 [ 1163.014460][T28995] ? ksys_dup3+0x3e0/0x3e0 [ 1163.018888][T28995] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1163.025125][T28995] ? fput_many+0x12c/0x1a0 [ 1163.029544][T28995] ? tomoyo_file_ioctl+0x23/0x30 [ 1163.034487][T28995] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1163.040730][T28995] ? security_file_ioctl+0x93/0xc0 [ 1163.045846][T28995] ksys_ioctl+0xab/0xd0 [ 1163.050008][T28995] __x64_sys_ioctl+0x73/0xb0 [ 1163.054600][T28995] do_syscall_64+0x103/0x610 [ 1163.059193][T28995] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1163.065082][T28995] RIP: 0033:0x457e29 [ 1163.068974][T28995] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1163.088572][T28995] RSP: 002b:00007fc04aa0fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1163.096981][T28995] RAX: ffffffffffffffda RBX: 00007fc04aa0fc90 RCX: 0000000000457e29 [ 1163.104947][T28995] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000004 [ 1163.112917][T28995] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1163.120893][T28995] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc04aa106d4 [ 1163.128894][T28995] R13: 00000000004c22b9 R14: 00000000004d4ca0 R15: 0000000000000007 [ 1163.137192][T28995] kobject: can not set name properly! 15:14:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc", 0x18) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:11 executing program 3: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:11 executing program 5: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) 15:14:11 executing program 3: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:12 executing program 2 (fault-call:6 fault-nth:2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) 15:14:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc", 0x18) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:12 executing program 5: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:12 executing program 3: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:12 executing program 5: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 1163.586245][T29013] FAULT_INJECTION: forcing a failure. [ 1163.586245][T29013] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.640232][T29013] CPU: 0 PID: 29013 Comm: syz-executor.2 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1163.649395][T29013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1163.659450][T29013] Call Trace: [ 1163.662745][T29013] dump_stack+0x172/0x1f0 [ 1163.667076][T29013] should_fail.cold+0xa/0x15 [ 1163.671675][T29013] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1163.677502][T29013] ? ___might_sleep+0x163/0x280 [ 1163.682362][T29013] __should_failslab+0x121/0x190 [ 1163.687750][T29013] should_failslab+0x9/0x14 [ 1163.692264][T29013] __kmalloc_track_caller+0x2d8/0x740 [ 1163.697647][T29013] ? console_unlock+0x6a7/0xeb0 [ 1163.702504][T29013] ? find_held_lock+0x35/0x130 [ 1163.707276][T29013] ? kstrdup_const+0x66/0x80 [ 1163.711896][T29013] kstrdup+0x3a/0x70 [ 1163.715803][T29013] kstrdup_const+0x66/0x80 [ 1163.720239][T29013] __kernfs_new_node+0xb0/0x690 [ 1163.725103][T29013] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1163.730576][T29013] ? __put_user_ns+0x70/0x70 [ 1163.735178][T29013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1163.741428][T29013] ? irq_work_queue+0x36/0x1d0 [ 1163.746206][T29013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1163.752463][T29013] kernfs_new_node+0x99/0x130 [ 1163.757148][T29013] kernfs_create_dir_ns+0x52/0x160 [ 1163.762267][T29013] sysfs_create_dir_ns+0x131/0x2a0 [ 1163.767386][T29013] ? sysfs_create_mount_point+0xa0/0xa0 [ 1163.772961][T29013] kobject_add_internal.cold+0xe5/0x5d4 [ 1163.778515][T29013] kobject_init_and_add+0x101/0x160 [ 1163.783715][T29013] ? kobject_add_internal+0x380/0x380 [ 1163.789091][T29013] ? kasan_check_read+0x11/0x20 [ 1163.793946][T29013] ? netif_napi_add+0x5fc/0x750 [ 1163.798796][T29013] ? find_held_lock+0x35/0x130 [ 1163.803568][T29013] ? netif_napi_add+0x5fc/0x750 [ 1163.808420][T29013] netdev_queue_update_kobjects+0xf6/0x3d0 [ 1163.814236][T29013] netif_set_real_num_tx_queues+0x1c2/0x720 [ 1163.820141][T29013] tun_attach+0x512/0x1440 [ 1163.824562][T29013] ? lock_downgrade+0x880/0x880 [ 1163.829426][T29013] __tun_chr_ioctl+0x1e69/0x3e50 [ 1163.834450][T29013] ? tomoyo_init_request_info+0x105/0x1d0 [ 1163.840172][T29013] ? tun_select_queue+0x670/0x670 [ 1163.845195][T29013] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1163.851010][T29013] ? __f_unlock_pos+0x19/0x20 [ 1163.855703][T29013] ? __fget+0x35a/0x550 [ 1163.859858][T29013] ? tun_chr_compat_ioctl+0x30/0x30 [ 1163.865060][T29013] tun_chr_ioctl+0x2b/0x40 [ 1163.869478][T29013] do_vfs_ioctl+0xd6e/0x1390 [ 1163.874068][T29013] ? ioctl_preallocate+0x210/0x210 [ 1163.879186][T29013] ? __fget+0x381/0x550 [ 1163.883343][T29013] ? ksys_dup3+0x3e0/0x3e0 [ 1163.887754][T29013] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1163.893989][T29013] ? fput_many+0x12c/0x1a0 [ 1163.898406][T29013] ? tomoyo_file_ioctl+0x23/0x30 [ 1163.903341][T29013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1163.909578][T29013] ? security_file_ioctl+0x93/0xc0 [ 1163.914690][T29013] ksys_ioctl+0xab/0xd0 [ 1163.918859][T29013] __x64_sys_ioctl+0x73/0xb0 [ 1163.923454][T29013] do_syscall_64+0x103/0x610 [ 1163.928050][T29013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1163.934029][T29013] RIP: 0033:0x457e29 [ 1163.937923][T29013] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1163.957523][T29013] RSP: 002b:00007fc04aa0fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1163.965934][T29013] RAX: ffffffffffffffda RBX: 00007fc04aa0fc90 RCX: 0000000000457e29 [ 1163.973905][T29013] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000004 [ 1163.981873][T29013] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 15:14:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) [ 1163.989844][T29013] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc04aa106d4 [ 1163.997820][T29013] R13: 00000000004c22b9 R14: 00000000004d4ca0 R15: 0000000000000007 [ 1164.025484][T29013] kobject_add_internal failed for tx-1 (error: -12 parent: queues) 15:14:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:14:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 15:14:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:14:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:14:12 executing program 2 (fault-call:6 fault-nth:3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) [ 1164.205121][T29235] FAULT_INJECTION: forcing a failure. [ 1164.205121][T29235] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.238734][T29235] CPU: 0 PID: 29235 Comm: syz-executor.2 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1164.247907][T29235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.257965][T29235] Call Trace: [ 1164.261276][T29235] dump_stack+0x172/0x1f0 [ 1164.265714][T29235] should_fail.cold+0xa/0x15 [ 1164.270314][T29235] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1164.276126][T29235] ? ___might_sleep+0x163/0x280 [ 1164.280985][T29235] __should_failslab+0x121/0x190 [ 1164.285932][T29235] should_failslab+0x9/0x14 [ 1164.290441][T29235] kmem_cache_alloc+0x2b2/0x6f0 [ 1164.295287][T29235] ? memcpy+0x46/0x50 [ 1164.299272][T29235] ? kstrdup+0x5a/0x70 [ 1164.303345][T29235] __kernfs_new_node+0xef/0x690 [ 1164.308203][T29235] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1164.313667][T29235] ? __put_user_ns+0x70/0x70 [ 1164.318253][T29235] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1164.324488][T29235] ? irq_work_queue+0x36/0x1d0 [ 1164.329254][T29235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1164.335501][T29235] kernfs_new_node+0x99/0x130 [ 1164.340183][T29235] kernfs_create_dir_ns+0x52/0x160 [ 1164.345295][T29235] sysfs_create_dir_ns+0x131/0x2a0 [ 1164.350490][T29235] ? sysfs_create_mount_point+0xa0/0xa0 [ 1164.356049][T29235] kobject_add_internal.cold+0xe5/0x5d4 [ 1164.361596][T29235] kobject_init_and_add+0x101/0x160 [ 1164.366800][T29235] ? kobject_add_internal+0x380/0x380 [ 1164.372167][T29235] ? kasan_check_read+0x11/0x20 [ 1164.377020][T29235] ? netif_napi_add+0x5fc/0x750 [ 1164.381871][T29235] ? find_held_lock+0x35/0x130 [ 1164.386634][T29235] ? netif_napi_add+0x5fc/0x750 [ 1164.391490][T29235] netdev_queue_update_kobjects+0xf6/0x3d0 [ 1164.397305][T29235] netif_set_real_num_tx_queues+0x1c2/0x720 [ 1164.403209][T29235] tun_attach+0x512/0x1440 [ 1164.407630][T29235] ? lock_downgrade+0x880/0x880 [ 1164.412493][T29235] __tun_chr_ioctl+0x1e69/0x3e50 [ 1164.417781][T29235] ? tomoyo_init_request_info+0x105/0x1d0 [ 1164.423512][T29235] ? tun_select_queue+0x670/0x670 [ 1164.428539][T29235] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1164.434346][T29235] ? __f_unlock_pos+0x19/0x20 [ 1164.439027][T29235] ? __fget+0x35a/0x550 [ 1164.443185][T29235] ? tun_chr_compat_ioctl+0x30/0x30 [ 1164.448386][T29235] tun_chr_ioctl+0x2b/0x40 [ 1164.452801][T29235] do_vfs_ioctl+0xd6e/0x1390 [ 1164.457393][T29235] ? ioctl_preallocate+0x210/0x210 [ 1164.462502][T29235] ? __fget+0x381/0x550 [ 1164.466661][T29235] ? ksys_dup3+0x3e0/0x3e0 [ 1164.471075][T29235] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1164.477311][T29235] ? fput_many+0x12c/0x1a0 [ 1164.481729][T29235] ? tomoyo_file_ioctl+0x23/0x30 [ 1164.486678][T29235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1164.492914][T29235] ? security_file_ioctl+0x93/0xc0 [ 1164.498027][T29235] ksys_ioctl+0xab/0xd0 [ 1164.502184][T29235] __x64_sys_ioctl+0x73/0xb0 [ 1164.506785][T29235] do_syscall_64+0x103/0x610 [ 1164.511377][T29235] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1164.517262][T29235] RIP: 0033:0x457e29 [ 1164.521156][T29235] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1164.540762][T29235] RSP: 002b:00007fc04aa0fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.549178][T29235] RAX: ffffffffffffffda RBX: 00007fc04aa0fc90 RCX: 0000000000457e29 [ 1164.557144][T29235] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000004 [ 1164.565114][T29235] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1164.573083][T29235] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc04aa106d4 [ 1164.581050][T29235] R13: 00000000004c22b9 R14: 00000000004d4ca0 R15: 0000000000000007 15:14:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 15:14:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:14:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) [ 1164.604373][T29235] kobject_add_internal failed for tx-1 (error: -12 parent: queues) 15:14:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)) 15:14:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:13 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)) 15:14:13 executing program 2 (fault-call:6 fault-nth:4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)) [ 1165.002307][T29252] FAULT_INJECTION: forcing a failure. [ 1165.002307][T29252] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.004976][T29253] FAULT_INJECTION: forcing a failure. [ 1165.004976][T29253] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.026126][T29252] CPU: 0 PID: 29252 Comm: syz-executor.2 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1165.037187][T29252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.047251][T29252] Call Trace: [ 1165.050560][T29252] dump_stack+0x172/0x1f0 [ 1165.054903][T29252] should_fail.cold+0xa/0x15 [ 1165.059507][T29252] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1165.065320][T29252] ? ___might_sleep+0x163/0x280 [ 1165.070184][T29252] __should_failslab+0x121/0x190 [ 1165.075125][T29252] should_failslab+0x9/0x14 [ 1165.079631][T29252] kmem_cache_alloc+0x2b2/0x6f0 [ 1165.084481][T29252] ? find_held_lock+0x35/0x130 [ 1165.089250][T29252] ? kernfs_activate+0x192/0x1f0 [ 1165.094189][T29252] __kernfs_new_node+0xef/0x690 [ 1165.099047][T29252] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1165.104506][T29252] ? mutex_trylock+0x1e0/0x1e0 [ 1165.109278][T29252] ? kasan_check_write+0x14/0x20 [ 1165.114218][T29252] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1165.119765][T29252] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1165.125584][T29252] ? map_id_range_down+0x1ee/0x370 [ 1165.130714][T29252] kernfs_new_node+0x99/0x130 [ 1165.135395][T29252] __kernfs_create_file+0x51/0x340 [ 1165.140516][T29252] sysfs_add_file_mode_ns+0x222/0x560 [ 1165.145904][T29252] sysfs_create_file_ns+0x13d/0x1d0 [ 1165.151114][T29252] ? sysfs_add_file_mode_ns+0x560/0x560 [ 1165.156683][T29252] kobject_add_internal.cold+0x280/0x5d4 [ 1165.162339][T29252] kobject_init_and_add+0x101/0x160 [ 1165.167545][T29252] ? kobject_add_internal+0x380/0x380 [ 1165.172925][T29252] ? kasan_check_read+0x11/0x20 [ 1165.177804][T29252] ? netif_napi_add+0x5fc/0x750 [ 1165.182660][T29252] ? find_held_lock+0x35/0x130 [ 1165.187435][T29252] ? netif_napi_add+0x5fc/0x750 [ 1165.192296][T29252] netdev_queue_update_kobjects+0xf6/0x3d0 [ 1165.198118][T29252] netif_set_real_num_tx_queues+0x1c2/0x720 [ 1165.204029][T29252] tun_attach+0x512/0x1440 [ 1165.208540][T29252] ? lock_downgrade+0x880/0x880 [ 1165.213406][T29252] __tun_chr_ioctl+0x1e69/0x3e50 [ 1165.218349][T29252] ? tomoyo_init_request_info+0x105/0x1d0 [ 1165.224082][T29252] ? tun_select_queue+0x670/0x670 [ 1165.229120][T29252] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1165.234931][T29252] ? __f_unlock_pos+0x19/0x20 [ 1165.239620][T29252] ? __fget+0x35a/0x550 [ 1165.243794][T29252] ? tun_chr_compat_ioctl+0x30/0x30 [ 1165.249004][T29252] tun_chr_ioctl+0x2b/0x40 [ 1165.253948][T29252] do_vfs_ioctl+0xd6e/0x1390 [ 1165.258547][T29252] ? ioctl_preallocate+0x210/0x210 [ 1165.263657][T29252] ? __fget+0x381/0x550 [ 1165.267828][T29252] ? ksys_dup3+0x3e0/0x3e0 [ 1165.272245][T29252] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1165.278484][T29252] ? fput_many+0x12c/0x1a0 [ 1165.282908][T29252] ? tomoyo_file_ioctl+0x23/0x30 [ 1165.287845][T29252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1165.294081][T29252] ? security_file_ioctl+0x93/0xc0 [ 1165.299196][T29252] ksys_ioctl+0xab/0xd0 [ 1165.303350][T29252] __x64_sys_ioctl+0x73/0xb0 [ 1165.307947][T29252] do_syscall_64+0x103/0x610 [ 1165.312544][T29252] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1165.318428][T29252] RIP: 0033:0x457e29 [ 1165.322328][T29252] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1165.341940][T29252] RSP: 002b:00007fc04aa0fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1165.350364][T29252] RAX: ffffffffffffffda RBX: 00007fc04aa0fc90 RCX: 0000000000457e29 [ 1165.358343][T29252] RDX: 0000000020000000 RSI: 00000000400454ca RDI: 0000000000000004 [ 1165.366313][T29252] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1165.374289][T29252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc04aa106d4 [ 1165.382258][T29252] R13: 00000000004c22b9 R14: 00000000004d4ca0 R15: 0000000000000007 [ 1165.391126][T29253] CPU: 1 PID: 29253 Comm: syz-executor.1 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1165.400249][T29253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.406943][T29252] kobject_add_internal failed for tx-1 (error: -12 parent: queues) [ 1165.410307][T29253] Call Trace: [ 1165.410335][T29253] dump_stack+0x172/0x1f0 [ 1165.410356][T29253] should_fail.cold+0xa/0x15 [ 1165.410375][T29253] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1165.421530][T29253] ? __mutex_lock+0x3cd/0x1310 [ 1165.421552][T29253] __should_failslab+0x121/0x190 [ 1165.430422][T29253] should_failslab+0x9/0x14 [ 1165.430435][T29253] __kmalloc+0x71/0x740 [ 1165.430452][T29253] ? debug_object_fixup+0x30/0x30 [ 1165.430468][T29253] ? blk_mq_get_request+0x1570/0x1570 [ 1165.430489][T29253] ? sg_build_indirect.isra.0+0x11f/0xa00 [ 1165.441013][T29253] sg_build_indirect.isra.0+0x11f/0xa00 [ 1165.441030][T29253] ? debug_object_init+0x16/0x20 [ 1165.441053][T29253] sg_common_write.isra.0+0xa81/0x22b0 [ 1165.454594][T29253] ? sg_write.part.0+0x434/0xeb0 [ 1165.454622][T29253] ? sg_open+0x1820/0x1820 [ 1165.464995][T29253] ? __might_fault+0x12b/0x1e0 [ 1165.465014][T29253] ? kasan_check_write+0x14/0x20 [ 1165.465035][T29253] ? lock_downgrade+0x880/0x880 [ 1165.476266][T29253] ? check_stack_object+0x114/0x160 [ 1165.476293][T29253] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1165.486644][T29253] ? __check_object_size+0x3d/0x42f [ 1165.486678][T29253] sg_write.part.0+0x855/0xeb0 [ 1165.531493][T29253] ? sg_ioctl+0x2a00/0x2a00 [ 1165.535994][T29253] ? aa_file_perm+0x432/0xeb0 [ 1165.540680][T29253] ? kstrtouint+0x142/0x1a0 [ 1165.545189][T29253] ? find_held_lock+0x35/0x130 [ 1165.549958][T29253] ? __fget+0x35a/0x550 [ 1165.554117][T29253] ? find_held_lock+0x35/0x130 [ 1165.558881][T29253] ? lock_downgrade+0x880/0x880 [ 1165.563730][T29253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1165.569971][T29253] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1165.575603][T29253] ? common_file_perm+0x238/0x720 [ 1165.580627][T29253] ? __fget+0x381/0x550 [ 1165.584798][T29253] sg_write+0x6e/0x93 [ 1165.588779][T29253] __vfs_write+0x8d/0x110 [ 1165.593104][T29253] ? sg_write.part.0+0xeb0/0xeb0 [ 1165.598038][T29253] vfs_write+0x20c/0x580 [ 1165.602282][T29253] ksys_write+0xea/0x1f0 [ 1165.606525][T29253] ? __ia32_sys_read+0xb0/0xb0 [ 1165.611287][T29253] ? do_syscall_64+0x26/0x610 [ 1165.615959][T29253] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1165.622018][T29253] ? do_syscall_64+0x26/0x610 [ 1165.626697][T29253] __x64_sys_write+0x73/0xb0 [ 1165.631291][T29253] do_syscall_64+0x103/0x610 [ 1165.635879][T29253] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1165.641764][T29253] RIP: 0033:0x457e29 [ 1165.645665][T29253] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1165.665401][T29253] RSP: 002b:00007f3dad4dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1165.674154][T29253] RAX: ffffffffffffffda RBX: 00007f3dad4dec90 RCX: 0000000000457e29 [ 1165.682122][T29253] RDX: 0000000000000030 RSI: 0000000020000140 RDI: 0000000000000003 [ 1165.690085][T29253] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 15:14:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)) 15:14:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)) [ 1165.698047][T29253] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dad4df6d4 [ 1165.706011][T29253] R13: 00000000004c3bdf R14: 00000000004dc4e8 R15: 0000000000000004 15:14:14 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)) 15:14:14 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:14 executing program 2 (fault-call:6 fault-nth:5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:14 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) [ 1165.833972][T29368] FAULT_INJECTION: forcing a failure. [ 1165.833972][T29368] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1165.862232][T29368] CPU: 0 PID: 29368 Comm: syz-executor.1 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1165.871400][T29368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.881456][T29368] Call Trace: [ 1165.881486][T29368] dump_stack+0x172/0x1f0 [ 1165.881509][T29368] should_fail.cold+0xa/0x15 [ 1165.881531][T29368] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1165.889140][T29368] ? __debug_object_init+0x18a/0xe00 [ 1165.904796][T29368] should_fail_alloc_page+0x50/0x60 [ 1165.910013][T29368] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1165.915398][T29368] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1165.921129][T29368] ? rcu_read_lock_sched_held+0x110/0x130 [ 1165.926861][T29368] ? __kmalloc+0x5d5/0x740 [ 1165.931290][T29368] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1165.937540][T29368] alloc_pages_current+0x107/0x210 [ 1165.937564][T29368] sg_build_indirect.isra.0+0x3cd/0xa00 [ 1165.937592][T29368] sg_common_write.isra.0+0xa81/0x22b0 [ 1165.937603][T29368] ? sg_write.part.0+0x434/0xeb0 [ 1165.937636][T29368] ? sg_open+0x1820/0x1820 [ 1165.948274][T29368] ? __might_fault+0x12b/0x1e0 [ 1165.948295][T29368] ? kasan_check_write+0x14/0x20 [ 1165.948313][T29368] ? lock_downgrade+0x880/0x880 [ 1165.948328][T29368] ? check_stack_object+0x114/0x160 [ 1165.948344][T29368] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1165.948358][T29368] ? __check_object_size+0x3d/0x42f [ 1165.948378][T29368] sg_write.part.0+0x855/0xeb0 [ 1165.948396][T29368] ? sg_ioctl+0x2a00/0x2a00 [ 1165.999019][T29368] ? aa_file_perm+0x432/0xeb0 [ 1165.999034][T29368] ? kstrtouint+0x142/0x1a0 [ 1165.999057][T29368] ? find_held_lock+0x35/0x130 [ 1165.999073][T29368] ? __fget+0x35a/0x550 [ 1165.999093][T29368] ? find_held_lock+0x35/0x130 [ 1166.012745][T29368] ? lock_downgrade+0x880/0x880 15:14:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x2, &(0x7f0000000000)={0x3}) 15:14:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x5421, &(0x7f0000000000)={0x3}) 15:14:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) [ 1166.012764][T29368] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1166.012785][T29368] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1166.037479][T29368] ? common_file_perm+0x238/0x720 [ 1166.037497][T29368] ? __fget+0x381/0x550 [ 1166.037520][T29368] sg_write+0x6e/0x93 [ 1166.037539][T29368] __vfs_write+0x8d/0x110 [ 1166.037550][T29368] ? sg_write.part.0+0xeb0/0xeb0 [ 1166.037567][T29368] vfs_write+0x20c/0x580 [ 1166.060631][T29368] ksys_write+0xea/0x1f0 [ 1166.060651][T29368] ? __ia32_sys_read+0xb0/0xb0 [ 1166.060670][T29368] ? do_syscall_64+0x26/0x610 [ 1166.060697][T29368] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1166.078824][T29368] ? do_syscall_64+0x26/0x610 [ 1166.078851][T29368] __x64_sys_write+0x73/0xb0 [ 1166.078868][T29368] do_syscall_64+0x103/0x610 [ 1166.078889][T29368] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1166.078900][T29368] RIP: 0033:0x457e29 [ 1166.078912][T29368] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:14:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x2, &(0x7f0000000000)={0x4}) 15:14:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x5450, &(0x7f0000000000)={0x3}) [ 1166.078925][T29368] RSP: 002b:00007f3dad4dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1166.089642][T29368] RAX: ffffffffffffffda RBX: 00007f3dad4dec90 RCX: 0000000000457e29 [ 1166.089652][T29368] RDX: 0000000000000030 RSI: 0000000020000140 RDI: 0000000000000003 [ 1166.089661][T29368] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1166.089670][T29368] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dad4df6d4 [ 1166.089680][T29368] R13: 00000000004c3bdf R14: 00000000004dc4e8 R15: 0000000000000004 15:14:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x5421, &(0x7f0000000000)={0x4}) 15:14:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x5451, &(0x7f0000000000)={0x3}) 15:14:15 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b16", 0x2a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) [ 1166.696282][T29490] FAULT_INJECTION: forcing a failure. [ 1166.696282][T29490] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1166.741699][T29490] CPU: 1 PID: 29490 Comm: syz-executor.1 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1166.750855][T29490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1166.760919][T29490] Call Trace: [ 1166.764235][T29490] dump_stack+0x172/0x1f0 [ 1166.769630][T29490] should_fail.cold+0xa/0x15 [ 1166.774235][T29490] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1166.780063][T29490] should_fail_alloc_page+0x50/0x60 [ 1166.780082][T29490] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1166.780102][T29490] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1166.780130][T29490] ? rcu_read_lock_sched_held+0x110/0x130 [ 1166.780150][T29490] ? __kmalloc+0x5d5/0x740 [ 1166.790700][T29490] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1166.790722][T29490] alloc_pages_current+0x107/0x210 [ 1166.790742][T29490] sg_build_indirect.isra.0+0x3cd/0xa00 [ 1166.790770][T29490] sg_common_write.isra.0+0xa81/0x22b0 [ 1166.829047][T29490] ? sg_write.part.0+0x434/0xeb0 [ 1166.834005][T29490] ? sg_open+0x1820/0x1820 [ 1166.838420][T29490] ? __might_fault+0x12b/0x1e0 [ 1166.843191][T29490] ? kasan_check_write+0x14/0x20 [ 1166.848138][T29490] ? lock_downgrade+0x880/0x880 [ 1166.852996][T29490] ? check_stack_object+0x114/0x160 [ 1166.858195][T29490] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1166.864091][T29490] ? __check_object_size+0x3d/0x42f [ 1166.869301][T29490] sg_write.part.0+0x855/0xeb0 [ 1166.874074][T29490] ? sg_ioctl+0x2a00/0x2a00 [ 1166.878577][T29490] ? aa_file_perm+0x432/0xeb0 [ 1166.883251][T29490] ? kstrtouint+0x142/0x1a0 [ 1166.887763][T29490] ? find_held_lock+0x35/0x130 [ 1166.892538][T29490] ? __fget+0x35a/0x550 [ 1166.896694][T29490] ? find_held_lock+0x35/0x130 [ 1166.901457][T29490] ? lock_downgrade+0x880/0x880 [ 1166.906307][T29490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1166.912560][T29490] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1166.918190][T29490] ? common_file_perm+0x238/0x720 [ 1166.923210][T29490] ? __fget+0x381/0x550 [ 1166.927377][T29490] sg_write+0x6e/0x93 [ 1166.931366][T29490] __vfs_write+0x8d/0x110 [ 1166.935694][T29490] ? sg_write.part.0+0xeb0/0xeb0 [ 1166.940634][T29490] vfs_write+0x20c/0x580 [ 1166.944879][T29490] ksys_write+0xea/0x1f0 [ 1166.949127][T29490] ? __ia32_sys_read+0xb0/0xb0 [ 1166.953894][T29490] ? do_syscall_64+0x26/0x610 [ 1166.958569][T29490] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1166.964633][T29490] ? do_syscall_64+0x26/0x610 [ 1166.969328][T29490] __x64_sys_write+0x73/0xb0 [ 1166.973920][T29490] do_syscall_64+0x103/0x610 [ 1166.978515][T29490] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1166.984411][T29490] RIP: 0033:0x457e29 [ 1166.988307][T29490] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1167.007907][T29490] RSP: 002b:00007f3dad4dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1167.016316][T29490] RAX: ffffffffffffffda RBX: 00007f3dad4dec90 RCX: 0000000000457e29 [ 1167.024289][T29490] RDX: 0000000000000030 RSI: 0000000020000140 RDI: 0000000000000003 [ 1167.032260][T29490] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 15:14:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x5450, &(0x7f0000000000)={0x4}) 15:14:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x5452, &(0x7f0000000000)={0x3}) [ 1167.040227][T29490] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dad4df6d4 [ 1167.048194][T29490] R13: 00000000004c3bdf R14: 00000000004dc4e8 R15: 0000000000000004 15:14:15 executing program 1 (fault-call:1 fault-nth:3): r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x5460, &(0x7f0000000000)={0x3}) 15:14:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x5451, &(0x7f0000000000)={0x4}) 15:14:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x2, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) [ 1167.192207][T29504] FAULT_INJECTION: forcing a failure. [ 1167.192207][T29504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1167.241661][T29504] CPU: 1 PID: 29504 Comm: syz-executor.1 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1167.251180][T29504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.261250][T29504] Call Trace: [ 1167.264574][T29504] dump_stack+0x172/0x1f0 [ 1167.268932][T29504] should_fail.cold+0xa/0x15 [ 1167.273552][T29504] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1167.279476][T29504] should_fail_alloc_page+0x50/0x60 [ 1167.284692][T29504] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1167.290085][T29504] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1167.295818][T29504] ? rcu_read_lock_sched_held+0x110/0x130 [ 1167.301551][T29504] ? __kmalloc+0x5d5/0x740 [ 1167.305974][T29504] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1167.312396][T29504] alloc_pages_current+0x107/0x210 [ 1167.317536][T29504] sg_build_indirect.isra.0+0x3cd/0xa00 [ 1167.323112][T29504] sg_common_write.isra.0+0xa81/0x22b0 [ 1167.328585][T29504] ? sg_write.part.0+0x434/0xeb0 [ 1167.333547][T29504] ? sg_open+0x1820/0x1820 [ 1167.337987][T29504] ? __might_fault+0x12b/0x1e0 [ 1167.342769][T29504] ? kasan_check_write+0x14/0x20 [ 1167.347718][T29504] ? lock_downgrade+0x880/0x880 [ 1167.352574][T29504] ? check_stack_object+0x114/0x160 [ 1167.357785][T29504] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1167.363694][T29504] ? __check_object_size+0x3d/0x42f [ 1167.368911][T29504] sg_write.part.0+0x855/0xeb0 [ 1167.373697][T29504] ? sg_ioctl+0x2a00/0x2a00 [ 1167.378206][T29504] ? aa_file_perm+0x432/0xeb0 [ 1167.382971][T29504] ? kstrtouint+0x142/0x1a0 [ 1167.387497][T29504] ? find_held_lock+0x35/0x130 [ 1167.392266][T29504] ? __fget+0x35a/0x550 [ 1167.396424][T29504] ? find_held_lock+0x35/0x130 [ 1167.401189][T29504] ? lock_downgrade+0x880/0x880 [ 1167.406040][T29504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1167.412290][T29504] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1167.417922][T29504] ? common_file_perm+0x238/0x720 [ 1167.422948][T29504] ? __fget+0x381/0x550 [ 1167.427203][T29504] sg_write+0x6e/0x93 [ 1167.431188][T29504] __vfs_write+0x8d/0x110 [ 1167.435518][T29504] ? sg_write.part.0+0xeb0/0xeb0 [ 1167.440460][T29504] vfs_write+0x20c/0x580 [ 1167.444716][T29504] ksys_write+0xea/0x1f0 [ 1167.448967][T29504] ? __ia32_sys_read+0xb0/0xb0 [ 1167.453733][T29504] ? do_syscall_64+0x26/0x610 [ 1167.458412][T29504] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1167.464473][T29504] ? do_syscall_64+0x26/0x610 [ 1167.469160][T29504] __x64_sys_write+0x73/0xb0 [ 1167.473750][T29504] do_syscall_64+0x103/0x610 [ 1167.479039][T29504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1167.484929][T29504] RIP: 0033:0x457e29 [ 1167.488820][T29504] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1167.508425][T29504] RSP: 002b:00007f3dad4dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1167.516849][T29504] RAX: ffffffffffffffda RBX: 00007f3dad4dec90 RCX: 0000000000457e29 [ 1167.524820][T29504] RDX: 0000000000000030 RSI: 0000000020000140 RDI: 0000000000000003 [ 1167.524830][T29504] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 15:14:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b16", 0x2a) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b16", 0x2a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x5421, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x40049409, &(0x7f0000000000)={0x3}) 15:14:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x5452, &(0x7f0000000000)={0x4}) [ 1167.524839][T29504] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dad4df6d4 [ 1167.524849][T29504] R13: 00000000004c3bdf R14: 00000000004dc4e8 R15: 0000000000000004 15:14:16 executing program 1 (fault-call:1 fault-nth:4): r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x5460, &(0x7f0000000000)={0x4}) 15:14:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x401064c9, &(0x7f0000000000)={0x3}) [ 1167.641027][T29628] FAULT_INJECTION: forcing a failure. [ 1167.641027][T29628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1167.670125][T29628] CPU: 0 PID: 29628 Comm: syz-executor.1 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1167.679362][T29628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.679368][T29628] Call Trace: [ 1167.679395][T29628] dump_stack+0x172/0x1f0 [ 1167.679418][T29628] should_fail.cold+0xa/0x15 [ 1167.679436][T29628] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1167.679472][T29628] should_fail_alloc_page+0x50/0x60 [ 1167.679487][T29628] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1167.679506][T29628] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1167.679533][T29628] ? rcu_read_lock_sched_held+0x110/0x130 [ 1167.697192][T29628] ? __kmalloc+0x5d5/0x740 [ 1167.697211][T29628] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 15:14:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x40049409, &(0x7f0000000000)={0x4}) [ 1167.697231][T29628] alloc_pages_current+0x107/0x210 [ 1167.697251][T29628] sg_build_indirect.isra.0+0x3cd/0xa00 [ 1167.697277][T29628] sg_common_write.isra.0+0xa81/0x22b0 [ 1167.697291][T29628] ? sg_write.part.0+0x434/0xeb0 [ 1167.697316][T29628] ? sg_open+0x1820/0x1820 [ 1167.697329][T29628] ? __might_fault+0x12b/0x1e0 [ 1167.697349][T29628] ? kasan_check_write+0x14/0x20 [ 1167.761249][T29628] ? lock_downgrade+0x880/0x880 [ 1167.761268][T29628] ? check_stack_object+0x114/0x160 [ 1167.761287][T29628] ? __sanitizer_cov_trace_switch+0x49/0x80 15:14:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x401064c9, &(0x7f0000000000)={0x4}) [ 1167.761304][T29628] ? __check_object_size+0x3d/0x42f [ 1167.761328][T29628] sg_write.part.0+0x855/0xeb0 [ 1167.761345][T29628] ? sg_ioctl+0x2a00/0x2a00 [ 1167.761359][T29628] ? aa_file_perm+0x432/0xeb0 [ 1167.761376][T29628] ? kstrtouint+0x142/0x1a0 [ 1167.775474][T29628] ? find_held_lock+0x35/0x130 [ 1167.775494][T29628] ? __fget+0x35a/0x550 [ 1167.775511][T29628] ? find_held_lock+0x35/0x130 [ 1167.775528][T29628] ? lock_downgrade+0x880/0x880 [ 1167.775551][T29628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1167.833540][T29628] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1167.833560][T29628] ? common_file_perm+0x238/0x720 [ 1167.833578][T29628] ? __fget+0x381/0x550 [ 1167.833603][T29628] sg_write+0x6e/0x93 [ 1167.854617][T29628] __vfs_write+0x8d/0x110 [ 1167.854636][T29628] ? sg_write.part.0+0xeb0/0xeb0 [ 1167.854653][T29628] vfs_write+0x20c/0x580 [ 1167.854675][T29628] ksys_write+0xea/0x1f0 [ 1167.854693][T29628] ? __ia32_sys_read+0xb0/0xb0 [ 1167.854716][T29628] ? do_syscall_64+0x26/0x610 [ 1167.885963][T29628] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 15:14:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x3}) [ 1167.892035][T29628] ? do_syscall_64+0x26/0x610 [ 1167.896723][T29628] __x64_sys_write+0x73/0xb0 [ 1167.901324][T29628] do_syscall_64+0x103/0x610 [ 1167.905927][T29628] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1167.911822][T29628] RIP: 0033:0x457e29 [ 1167.915719][T29628] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:14:16 executing program 1 (fault-call:1 fault-nth:5): r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) [ 1167.935319][T29628] RSP: 002b:00007f3dad4dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1167.935334][T29628] RAX: ffffffffffffffda RBX: 00007f3dad4dec90 RCX: 0000000000457e29 [ 1167.935343][T29628] RDX: 0000000000000030 RSI: 0000000020000140 RDI: 0000000000000003 [ 1167.935351][T29628] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1167.935360][T29628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dad4df6d4 [ 1167.935369][T29628] R13: 00000000004c3bdf R14: 00000000004dc4e8 R15: 0000000000000004 [ 1168.022678][T29844] FAULT_INJECTION: forcing a failure. [ 1168.022678][T29844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1168.056620][T29844] CPU: 1 PID: 29844 Comm: syz-executor.1 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1168.065767][T29844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1168.065773][T29844] Call Trace: [ 1168.065799][T29844] dump_stack+0x172/0x1f0 [ 1168.065820][T29844] should_fail.cold+0xa/0x15 [ 1168.079161][T29844] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1168.079189][T29844] should_fail_alloc_page+0x50/0x60 [ 1168.079209][T29844] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1168.088086][T29844] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1168.088110][T29844] ? rcu_read_lock_sched_held+0x110/0x130 [ 1168.088129][T29844] ? __kmalloc+0x5d5/0x740 [ 1168.099085][T29844] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1168.099105][T29844] alloc_pages_current+0x107/0x210 [ 1168.099124][T29844] sg_build_indirect.isra.0+0x3cd/0xa00 [ 1168.099150][T29844] sg_common_write.isra.0+0xa81/0x22b0 [ 1168.110184][T29844] ? sg_write.part.0+0x434/0xeb0 [ 1168.110213][T29844] ? sg_open+0x1820/0x1820 [ 1168.110225][T29844] ? __might_fault+0x12b/0x1e0 [ 1168.110245][T29844] ? kasan_check_write+0x14/0x20 [ 1168.120430][T29844] ? lock_downgrade+0x880/0x880 [ 1168.120445][T29844] ? check_stack_object+0x114/0x160 [ 1168.120464][T29844] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1168.131768][T29844] ? __check_object_size+0x3d/0x42f [ 1168.131790][T29844] sg_write.part.0+0x855/0xeb0 [ 1168.131813][T29844] ? sg_ioctl+0x2a00/0x2a00 [ 1168.142773][T29844] ? aa_file_perm+0x432/0xeb0 [ 1168.142787][T29844] ? kstrtouint+0x142/0x1a0 [ 1168.142811][T29844] ? find_held_lock+0x35/0x130 [ 1168.152198][T29844] ? __fget+0x35a/0x550 [ 1168.152215][T29844] ? find_held_lock+0x35/0x130 [ 1168.152234][T29844] ? lock_downgrade+0x880/0x880 [ 1168.161883][T29844] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1168.161908][T29844] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1168.171902][T29844] ? common_file_perm+0x238/0x720 [ 1168.171917][T29844] ? __fget+0x381/0x550 [ 1168.171943][T29844] sg_write+0x6e/0x93 [ 1168.182983][T29844] __vfs_write+0x8d/0x110 [ 1168.182997][T29844] ? sg_write.part.0+0xeb0/0xeb0 [ 1168.183020][T29844] vfs_write+0x20c/0x580 [ 1168.192239][T29844] ksys_write+0xea/0x1f0 [ 1168.192256][T29844] ? __ia32_sys_read+0xb0/0xb0 [ 1168.192276][T29844] ? do_syscall_64+0x26/0x610 [ 1168.201403][T29844] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1168.201428][T29844] ? do_syscall_64+0x26/0x610 [ 1168.201448][T29844] __x64_sys_write+0x73/0xb0 [ 1168.201467][T29844] do_syscall_64+0x103/0x610 [ 1168.210336][T29844] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1168.210348][T29844] RIP: 0033:0x457e29 [ 1168.210368][T29844] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1168.219917][T29844] RSP: 002b:00007f3dad4dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1168.219932][T29844] RAX: ffffffffffffffda RBX: 00007f3dad4dec90 RCX: 0000000000457e29 [ 1168.219941][T29844] RDX: 0000000000000030 RSI: 0000000020000140 RDI: 0000000000000003 [ 1168.219950][T29844] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1168.219958][T29844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dad4df6d4 [ 1168.219971][T29844] R13: 00000000004c3bdf R14: 00000000004dc4e8 R15: 0000000000000004 15:14:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b16", 0x2a) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b16", 0x2a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0xc0045878, &(0x7f0000000000)={0x3}) 15:14:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4020940d, &(0x7f0000000000)={0x4}) 15:14:17 executing program 1 (fault-call:1 fault-nth:6): r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x5450, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0xc0045878, &(0x7f0000000000)={0x4}) [ 1168.486076][T29852] FAULT_INJECTION: forcing a failure. [ 1168.486076][T29852] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1168.520269][T29852] CPU: 0 PID: 29852 Comm: syz-executor.1 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1168.529427][T29852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1168.539504][T29852] Call Trace: [ 1168.539533][T29852] dump_stack+0x172/0x1f0 [ 1168.539556][T29852] should_fail.cold+0xa/0x15 [ 1168.539581][T29852] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1168.551869][T29852] should_fail_alloc_page+0x50/0x60 [ 1168.551891][T29852] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1168.568245][T29852] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1168.573987][T29852] ? rcu_read_lock_sched_held+0x110/0x130 [ 1168.579717][T29852] ? __kmalloc+0x5d5/0x740 [ 1168.584139][T29852] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1168.590395][T29852] alloc_pages_current+0x107/0x210 [ 1168.595520][T29852] sg_build_indirect.isra.0+0x3cd/0xa00 [ 1168.601075][T29852] sg_common_write.isra.0+0xa81/0x22b0 [ 1168.606539][T29852] ? sg_write.part.0+0x434/0xeb0 [ 1168.611496][T29852] ? sg_open+0x1820/0x1820 [ 1168.615910][T29852] ? __might_fault+0x12b/0x1e0 [ 1168.620679][T29852] ? kasan_check_write+0x14/0x20 [ 1168.625620][T29852] ? lock_downgrade+0x880/0x880 [ 1168.630473][T29852] ? check_stack_object+0x114/0x160 [ 1168.635672][T29852] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1168.641583][T29852] ? __check_object_size+0x3d/0x42f [ 1168.646785][T29852] sg_write.part.0+0x855/0xeb0 [ 1168.651558][T29852] ? sg_ioctl+0x2a00/0x2a00 [ 1168.656058][T29852] ? aa_file_perm+0x432/0xeb0 [ 1168.660730][T29852] ? kstrtouint+0x142/0x1a0 [ 1168.665239][T29852] ? find_held_lock+0x35/0x130 [ 1168.670003][T29852] ? __fget+0x35a/0x550 [ 1168.674165][T29852] ? find_held_lock+0x35/0x130 [ 1168.679013][T29852] ? lock_downgrade+0x880/0x880 [ 1168.683861][T29852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1168.690110][T29852] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1168.695753][T29852] ? common_file_perm+0x238/0x720 [ 1168.700777][T29852] ? __fget+0x381/0x550 [ 1168.704943][T29852] sg_write+0x6e/0x93 [ 1168.708928][T29852] __vfs_write+0x8d/0x110 [ 1168.713257][T29852] ? sg_write.part.0+0xeb0/0xeb0 [ 1168.718194][T29852] vfs_write+0x20c/0x580 [ 1168.722455][T29852] ksys_write+0xea/0x1f0 [ 1168.726699][T29852] ? __ia32_sys_read+0xb0/0xb0 [ 1168.731469][T29852] ? do_syscall_64+0x26/0x610 [ 1168.736146][T29852] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1168.742220][T29852] ? do_syscall_64+0x26/0x610 [ 1168.746909][T29852] __x64_sys_write+0x73/0xb0 [ 1168.751511][T29852] do_syscall_64+0x103/0x610 [ 1168.756112][T29852] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1168.762009][T29852] RIP: 0033:0x457e29 [ 1168.765907][T29852] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:14:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0xc0045878, &(0x7f0000000000)={0x4}) 15:14:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0xc0045878, &(0x7f0000000000)={0x3}) [ 1168.785520][T29852] RSP: 002b:00007f3dad4dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1168.793947][T29852] RAX: ffffffffffffffda RBX: 00007f3dad4dec90 RCX: 0000000000457e29 [ 1168.802018][T29852] RDX: 0000000000000030 RSI: 0000000020000140 RDI: 0000000000000003 [ 1168.802027][T29852] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1168.802035][T29852] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dad4df6d4 [ 1168.802050][T29852] R13: 00000000004c3bdf R14: 00000000004dc4e8 R15: 0000000000000004 15:14:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0xc0189436, &(0x7f0000000000)={0x4}) 15:14:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0xc0189436, &(0x7f0000000000)={0x3}) 15:14:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x5451, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b16", 0x2a) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:18 executing program 1 (fault-call:1 fault-nth:7): r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0xc020660b, &(0x7f0000000000)={0x4}) 15:14:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0xc020660b, &(0x7f0000000000)={0x3}) 15:14:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x5452, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2}) [ 1169.392080][T30182] FAULT_INJECTION: forcing a failure. [ 1169.392080][T30182] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.437943][T30182] CPU: 1 PID: 30182 Comm: syz-executor.1 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1169.447094][T30182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.447103][T30182] Call Trace: [ 1169.447130][T30182] dump_stack+0x172/0x1f0 [ 1169.447153][T30182] should_fail.cold+0xa/0x15 [ 1169.447170][T30182] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1169.447193][T30182] ? prep_new_page+0x26d/0x300 [ 1169.464856][T30182] __should_failslab+0x121/0x190 [ 1169.464878][T30182] should_failslab+0x9/0x14 [ 1169.464899][T30182] __kmalloc+0x71/0x740 [ 1169.464922][T30182] ? ksys_write+0xea/0x1f0 [ 1169.497985][T30182] ? bio_copy_user_iov+0xfc/0xf20 [ 1169.503013][T30182] bio_copy_user_iov+0xfc/0xf20 [ 1169.507886][T30182] blk_rq_map_user_iov+0x235/0x6f0 [ 1169.513003][T30182] ? blk_rq_append_bio+0x350/0x350 [ 1169.518112][T30182] ? find_held_lock+0x35/0x130 [ 1169.522883][T30182] ? sg_common_write.isra.0+0xaaf/0x22b0 [ 1169.528542][T30182] ? import_single_range+0x12b/0x170 [ 1169.533837][T30182] blk_rq_map_user+0x11a/0x190 [ 1169.538611][T30182] ? blk_rq_map_user_iov+0x6f0/0x6f0 [ 1169.543903][T30182] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1169.549464][T30182] sg_common_write.isra.0+0x11cd/0x22b0 [ 1169.555009][T30182] ? sg_write.part.0+0x434/0xeb0 [ 1169.559957][T30182] ? sg_open+0x1820/0x1820 [ 1169.564370][T30182] ? __might_fault+0x12b/0x1e0 [ 1169.569138][T30182] ? lock_downgrade+0x880/0x880 [ 1169.573985][T30182] ? check_stack_object+0x114/0x160 [ 1169.579186][T30182] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1169.585079][T30182] ? __check_object_size+0x3d/0x42f [ 1169.590295][T30182] sg_write.part.0+0x855/0xeb0 [ 1169.595066][T30182] ? sg_ioctl+0x2a00/0x2a00 [ 1169.599568][T30182] ? aa_file_perm+0x432/0xeb0 [ 1169.604415][T30182] ? kstrtouint+0x142/0x1a0 [ 1169.608924][T30182] ? find_held_lock+0x35/0x130 [ 1169.613690][T30182] ? __fget+0x35a/0x550 [ 1169.617846][T30182] ? find_held_lock+0x35/0x130 [ 1169.622615][T30182] ? lock_downgrade+0x880/0x880 [ 1169.627463][T30182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1169.633706][T30182] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1169.639335][T30182] ? common_file_perm+0x238/0x720 [ 1169.644359][T30182] ? __fget+0x381/0x550 [ 1169.648523][T30182] sg_write+0x6e/0x93 [ 1169.652513][T30182] __vfs_write+0x8d/0x110 [ 1169.656841][T30182] ? sg_write.part.0+0xeb0/0xeb0 [ 1169.661781][T30182] vfs_write+0x20c/0x580 [ 1169.666031][T30182] ksys_write+0xea/0x1f0 [ 1169.670286][T30182] ? __ia32_sys_read+0xb0/0xb0 [ 1169.675054][T30182] ? do_syscall_64+0x26/0x610 [ 1169.679727][T30182] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1169.685790][T30182] ? do_syscall_64+0x26/0x610 [ 1169.690469][T30182] __x64_sys_write+0x73/0xb0 [ 1169.695058][T30182] do_syscall_64+0x103/0x610 [ 1169.699647][T30182] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1169.705533][T30182] RIP: 0033:0x457e29 [ 1169.709424][T30182] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1169.729046][T30182] RSP: 002b:00007f3dad4dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 15:14:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2}) [ 1169.737456][T30182] RAX: ffffffffffffffda RBX: 00007f3dad4dec90 RCX: 0000000000457e29 [ 1169.745426][T30182] RDX: 0000000000000030 RSI: 0000000020000140 RDI: 0000000000000003 [ 1169.753401][T30182] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1169.761371][T30182] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dad4df6d4 [ 1169.769339][T30182] R13: 00000000004c3bdf R14: 00000000004dc4e8 R15: 0000000000000004 15:14:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:18 executing program 1 (fault-call:1 fault-nth:8): r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x5460, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) [ 1169.917568][T30296] FAULT_INJECTION: forcing a failure. [ 1169.917568][T30296] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.965514][T30296] CPU: 0 PID: 30296 Comm: syz-executor.1 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1169.974666][T30296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.974674][T30296] Call Trace: [ 1169.974700][T30296] dump_stack+0x172/0x1f0 [ 1169.974723][T30296] should_fail.cold+0xa/0x15 [ 1169.974744][T30296] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1170.002759][T30296] ? get_page_from_freelist+0x20c3/0x4120 [ 1170.002779][T30296] ? find_held_lock+0x35/0x130 [ 1170.002805][T30296] __should_failslab+0x121/0x190 [ 1170.013272][T30296] should_failslab+0x9/0x14 [ 1170.013290][T30296] __kmalloc+0x71/0x740 [ 1170.013308][T30296] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1170.013335][T30296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1170.022732][T30296] ? bio_alloc_bioset+0x418/0x680 [ 1170.022753][T30296] bio_alloc_bioset+0x418/0x680 [ 1170.022773][T30296] ? rcu_read_lock_sched_held+0x110/0x130 [ 1170.022793][T30296] ? bvec_alloc+0x2f0/0x2f0 [ 1170.058957][T30296] bio_copy_user_iov+0x2c7/0xf20 [ 1170.063909][T30296] blk_rq_map_user_iov+0x235/0x6f0 [ 1170.069022][T30296] ? blk_rq_append_bio+0x350/0x350 [ 1170.074131][T30296] ? find_held_lock+0x35/0x130 [ 1170.078896][T30296] ? sg_common_write.isra.0+0xaaf/0x22b0 [ 1170.084533][T30296] ? import_single_range+0x12b/0x170 [ 1170.089824][T30296] blk_rq_map_user+0x11a/0x190 [ 1170.094587][T30296] ? blk_rq_map_user_iov+0x6f0/0x6f0 [ 1170.099871][T30296] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1170.105429][T30296] sg_common_write.isra.0+0x11cd/0x22b0 [ 1170.110971][T30296] ? sg_write.part.0+0x434/0xeb0 [ 1170.115921][T30296] ? sg_open+0x1820/0x1820 [ 1170.120645][T30296] ? __might_fault+0x12b/0x1e0 [ 1170.125417][T30296] ? lock_downgrade+0x880/0x880 [ 1170.130269][T30296] ? check_stack_object+0x114/0x160 [ 1170.135466][T30296] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1170.141359][T30296] ? __check_object_size+0x3d/0x42f [ 1170.146562][T30296] sg_write.part.0+0x855/0xeb0 [ 1170.151338][T30296] ? sg_ioctl+0x2a00/0x2a00 [ 1170.155840][T30296] ? aa_file_perm+0x432/0xeb0 [ 1170.160511][T30296] ? kstrtouint+0x142/0x1a0 [ 1170.165021][T30296] ? find_held_lock+0x35/0x130 [ 1170.169783][T30296] ? __fget+0x35a/0x550 [ 1170.173938][T30296] ? find_held_lock+0x35/0x130 [ 1170.178705][T30296] ? lock_downgrade+0x880/0x880 [ 1170.183550][T30296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1170.189802][T30296] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1170.195442][T30296] ? common_file_perm+0x238/0x720 [ 1170.200471][T30296] ? __fget+0x381/0x550 [ 1170.204645][T30296] sg_write+0x6e/0x93 [ 1170.208634][T30296] __vfs_write+0x8d/0x110 [ 1170.212958][T30296] ? sg_write.part.0+0xeb0/0xeb0 [ 1170.217898][T30296] vfs_write+0x20c/0x580 [ 1170.217919][T30296] ksys_write+0xea/0x1f0 [ 1170.217935][T30296] ? __ia32_sys_read+0xb0/0xb0 [ 1170.217952][T30296] ? do_syscall_64+0x26/0x610 [ 1170.217968][T30296] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1170.217987][T30296] ? do_syscall_64+0x26/0x610 [ 1170.246678][T30296] __x64_sys_write+0x73/0xb0 [ 1170.251289][T30296] do_syscall_64+0x103/0x610 [ 1170.255895][T30296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1170.261783][T30296] RIP: 0033:0x457e29 [ 1170.265676][T30296] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1170.285282][T30296] RSP: 002b:00007f3dad4dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1170.285299][T30296] RAX: ffffffffffffffda RBX: 00007f3dad4dec90 RCX: 0000000000457e29 [ 1170.285313][T30296] RDX: 0000000000000030 RSI: 0000000020000140 RDI: 0000000000000003 15:14:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5}) 15:14:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) [ 1170.285322][T30296] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1170.285339][T30296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dad4df6d4 [ 1170.317608][T30296] R13: 00000000004c3bdf R14: 00000000004dc4e8 R15: 0000000000000004 15:14:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15:14:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x2}) 15:14:19 executing program 1 (fault-call:1 fault-nth:9): r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x1000000}) 15:14:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x1000000}) 15:14:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x894c, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2000000}) 15:14:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x2000000}) 15:14:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x20000000}) 15:14:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x20000000}) 15:14:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454d9, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e298d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0xfdfdffff}) 15:14:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0xfdfdffff}) 15:14:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0xfffffdfd}) 15:14:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e308d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0xfffffdfd}) 15:14:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x40049409, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x2000000000}) 15:14:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2000000000}) 15:14:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d030000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x100000000000000}) 15:14:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x100000000000000}) 15:14:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d040000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x200000000000000}) 15:14:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x200000000000000}) 15:14:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d290000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x4020940d, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d300000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0xfdfdffff00000000}) 15:14:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0xfdfdffff00000000}) 15:14:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:21 executing program 3: r0 = semget$private(0x0, 0x3, 0x8) r1 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x0, 0x2) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x80) inotify_rm_watch(r1, r2) semtimedop(r0, &(0x7f0000000040)=[{0x2, 0xdf2c, 0x800}, {0x0, 0x7}], 0x2, &(0x7f00000000c0)) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x4}) r4 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x94800) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000280)=""/150) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000140)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) 15:14:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4040000000, 0x880) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f00000000c0)={0x3, 0x4, 0x7fffffff, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d010800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) fanotify_init(0x1a4b3b215b72b52, 0x40000) 15:14:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d011000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x800454cf, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1fffff, 0x0) ioctl$TIOCCBRK(r0, 0x5428) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x9, 0x3, 0xe4}) 15:14:22 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x1, 0x1, 0x6}}, 0x14) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e20, 0x2, @empty, 0x3}, @in6={0xa, 0x4e22, 0x100, @loopback, 0x7ff}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x58) socket$can_raw(0x1d, 0x3, 0x1) 15:14:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d001800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:22 executing program 3: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d011800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) prctl$PR_GET_DUMPABLE(0x3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000001, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) 15:14:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d002000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0xc0045878, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x59, 0x202040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000000280)={0xb65, {{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x101}}}, 0x108) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000001c0)={0x101ff, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r2 = add_key(&(0x7f00000003c0)='ceph\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="36b8c638425749a24cc83ec0724f636ae261eb085da6eb67c4a471d54c96d3208c4023208bf866880ff952c2b247375f729caec96be8465825f24c4557b6a7c6ea515959d014a287f4a294c41ae42a6bd01cf68f3223811e91f651d67d91e514c5c0ed15804ebb612b2d4535a08a73e78a9fa6d69419c8674a3dd61c7eef11d3aed54d49690f", 0x86, 0xfffffffffffffffb) setns(r1, 0x20000) r3 = add_key(&(0x7f0000000500)='cifs.idmap\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000580)="a4b7282f8d06b80f789b5732b3aa6b82e339f7cc981ac2e614d50daf6f8fdf2bc5377cc8d65054193dae27634a49f9bf05c045c4c296bfe64b6774e6936bf631375d9afa5b047ae6ed7cf3672a2e9e6091214b825ff3215f65f6ac7fd5eca01aa174890d6e7f3230521a91c10c23be5717d8505dd45dd3b63548f310f07336407640fdc2139097b86db7cf721f2c8a9b52d5f3ba", 0x94, 0xfffffffffffffffb) keyctl$unlink(0x9, r2, r3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer\x00', 0x2, 0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x4000201) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x10000) ioctl$KIOCSOUND(r4, 0x4b2f, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0x1, @remote, 0xffff}, @in={0x2, 0x4e20, @rand_addr=0x9}, @in6={0xa, 0x4e22, 0x691, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, @in6={0xa, 0x4e20, 0x0, @mcast1, 0x5}, @in6={0xa, 0x4e23, 0x8001, @remote, 0x4}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0xf4b, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}, 0x200}, @in={0x2, 0x4e20}], 0xcc) 15:14:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d012000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:23 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x6, 0x18, [0x7fff, 0x7db9, 0x7, 0x9, 0xfffffffffffffffc, 0x0]}) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) 15:14:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0xc0045878, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x4, 0xa}) 15:14:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d002800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x4c0080, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x4}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0x3e, 0xdd, 0x1f}) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x109000, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000001c0)=r2) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@reserved}) 15:14:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0xc0189436, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d012800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:24 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x40800, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) fcntl$setflags(r0, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000100)=""/53, &(0x7f0000000140)=0x35) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3}) open(&(0x7f0000000180)='./file0\x00', 0x10400, 0x143) 15:14:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x6, 0x6}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x8000, 0x0) getsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) fcntl$setflags(r0, 0x2, 0x1) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x7, 0x4) 15:14:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0xc020660b, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d003000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:24 executing program 3: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x1, 0xfffffffffffffffe}) 15:14:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x2000}) 15:14:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) clone(0x21000000, &(0x7f00000000c0)="d14f819049ea9ec07154ccd4d1a09ba57c03666846c03aed47c72e4c54eae84751230c8e9a3e9ae919d2e38a1e8df32fd870760bd801d36901d72cf121ebcd41f7b3396a75415f9d1f6114d5e69015695dac0936f3dcc58f187ed5d04f1f7246a8635eb732e53af935a621606e4f7693ec5c437c22286f8956c40579186e875ef870d08fbe8cfeaca184b3da6bcf5b7ffa4498570067464c641c4888b68023d2fc06737b422aaa7d06afd484c745107e6356dfa4eb375cc047664398c1e62b", &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0)="f769449feb0d1cad271c8d4d53caf78d9cfa38c4ba746b11ca08c946b598a72964211027a5ec02ce981062f17795bb0ab9baaef329cd3e825888061a7ee7998e06fcf670f3134b72b04d76b83c9e79a821023fc4aff9e9b76dd5d4b1772c58ff5395defc09880372c2cc202fc8c9625b788be4aff7ad4c3fc5292d53acdf8ab4164482df8ea55bf7c7712020b0d669005fe66040cfb20d9d81a690a9061eee4761f0953a9fb9eae3831f7cb9bd1e4739586d255f078da604a33cc34c2d4ce0b5923dfba9c4d1569f977bb59f30dd7b88863c861c1efb5f07") 15:14:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'v%t\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d013000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d003800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc, 0x2) write$P9_RUNLINKAT(r1, &(0x7f00000000c0)={0x7, 0x4d, 0x2}, 0x7) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ve%\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d013800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:25 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001200)='/dev/dlm-control\x00', 0x41, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001240)={0x0, 0x8, 0x4, [0x882f, 0x8, 0x2, 0x6d43f87b]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000012c0)={r2, 0x7}, &(0x7f0000001300)=0x8) 15:14:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d004000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x02\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:25 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0xfffffffffffffcb2, 0x4}}) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x8, 0x3}, &(0x7f0000000340)=0x0) timer_getoverrun(r1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x3}) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x37, 0x2, @thr={&(0x7f0000000000)="c25d63441e18e704c30ad2bebe7ba73b76f72b489e48cf404f3899beb3c3ba9b4da7a289e689af7cfbf929f5cbc63efda59eb8744b623195fabcb1b78734c9acd5960e0e0e2b5eecd4e6aaedb0240242ed73", &(0x7f0000000140)="fc4c7e66bc60aec3eb1e561e2b366a731926f733d79846e37d9be968be2e6be19da32939345e3be16c9291c46118e300eebd6f7a532c2c7394d99adce1cca69216c7e5509ce2bc2fbf165f771f7696429edb6a6e2cb41df52f1134c32a193e5afa3d1f7402c2f43921148dacb9a7430f52e05fed280cc8f0e54fe865c4e8a215e2cfa793eda809d2a378b5e627f7a10da86d5ab70da5f788eddaeb9835a850bd8f548340b6d5b382deaf3026506d6b206904e8156e5dc2dcee1e830d2ac9969c9cefcc253be76fb2135daf2c4c46d44865e56256ac5020b60fd4aff72cc5e2ad3c"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r2) r3 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x80000000, 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f00000002c0)) 15:14:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d014000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d014600000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x1, 0x6, 0x0, 0x10001}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, 0x0, &(0x7f0000000080)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x202000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0xbc, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3f800, 0x0, 0xd, 0x0, "f2563f32eb17c591966c9bbca358b8b666a6fd80f1c3778a65bcad526947f1cae6daa67d33d0469773ca6acf192e957fed0151696845e556462e31927cf731f0", "162c758c1fc411e08133595757aff4c8cb7353fe24bb1eaca09069345a2491dd", [0x3f000000, 0x5]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 15:14:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:25 executing program 5: setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000140)='/dev/dri/card#\x00', 0xfffffffffffffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x1, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81803) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) pwritev(r1, &(0x7f0000000740)=[{&(0x7f00000006c0)="7f4f9e4441e5fde52edc685a02026a252c6da4be1369d72fd0678e9ece3f9139673853780a4f684c86250d54e55875330aab0d1179efc99cafa34ed41972bd941983cc2c8073e6e5337e6fc52fa7fde809", 0x51}], 0x1, 0x0) sendfile(r1, r1, 0x0, 0x2000005) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x33) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket(0x8, 0x7, 0x100000002000000) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x7fffffff}, &(0x7f0000000540)=0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d004800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x03\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, 0x0, 0x0) 15:14:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x4, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) umount2(&(0x7f0000000040)='./file0\x00', 0x1) 15:14:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d005000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, 0x0, 0x0) 15:14:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d005800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1, 0x305000) accept4$alg(r1, 0x0, 0x0, 0x80800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) accept4$tipc(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80800) 15:14:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, 0x0, 0x0) 15:14:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x04\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000000c0)={0xe, &(0x7f0000000040)=""/14}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000140)={0x61e0c61, 0x9, 0x8, {0x0, 0x1c9c380}, 0x5, 0xe3c}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d006000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040), 0x0) 15:14:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1000000009, 0x212001) signalfd(r0, &(0x7f0000000040)={0x8}, 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0xffffffffffffffff) 15:14:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040), 0x0) 15:14:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d006800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x9, 0x101000) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000180)={0x6, "355a0787867db2f21069e3ce81f44a99e511077b965cc88221fc7f0301823917", 0x5, 0x1802, 0x7, 0x1f, 0x11, 0x3, 0x7, 0x8}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xffffffffffffa8d3, 0x10000) r3 = getpgid(0xffffffffffffffff) setpriority(0x2, r3, 0x3ff) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f00000000c0)={0x0, "ae808812c85547d2a85294b1e30dc754c4f03cd19963d4e92075ec15a5bf18ce", 0x4, 0x0, 0x1ff, 0x6, 0x10, 0x3, 0x9, 0x8}) 15:14:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040), 0x0) 15:14:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x05\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d007000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x100}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000100)=0x6, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d007800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 15:14:26 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x5, 0x200) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000140)=0x7fff) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x10000) r2 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x22002) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3}) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000180)={@default, @bcast}) 15:14:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d008800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 15:14:26 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x06\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d009000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0xe2, 0x0, 0x10003, 0xd6b1}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000000c0)={r1, 0x419c}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 15:14:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d009800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x4, 0x7fff) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xe2e0, 0x4000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80, 0x0) getpeername$tipc(r1, &(0x7f0000000180)=@id, &(0x7f0000000100)=0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000140)=0x1053, 0x4) 15:14:26 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="bd"], 0x1, 0x0) msgrcv(r0, 0x0, 0x100000000000000, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 15:14:26 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x200) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000400)={0x1, 0xc5, "dac334ec328a063a82155f279e0305920b89570d3c25e20a0197b1ddcc4ef84a7da27d864c9b9f644ae225321003631ad83d75852bd1efc87272be19c4b991fb60c9b36b28a88feb67850fbf7a396140fa77555acadc859e6827316adddff79b6b580fd9518e42af8e7e4fe92169880d3b992b4d12c176ef8d51a50a8108cc2c3ac04d6d86802bbc44b6601d1f1c8c1a178db6408ae29899430b7f6e4b6fe29df4145d7aea2157ff840a5359e8ae87823d6f03cc4be72a7f8931255767249feb239bff865e"}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x6, 0x80040) 15:14:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d00a000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\a\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x10}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) lseek(r0, 0x0, 0x6) 15:14:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:26 executing program 4: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x80, 0x0) fcntl$setpipe(r0, 0x407, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) readahead(r1, 0xff, 0x5) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x1, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r2, &(0x7f0000c40ff8)={0x3}, 0x8, 0x0) msgrcv(r2, &(0x7f0000000040)={0x0, ""/4}, 0xc, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x1f, 0x64f, 0x0, 0x7, 0x0, r0}, 0x2c) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') msgrcv(r2, &(0x7f0000000000), 0x8, 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000240)=0x3) pause() 15:14:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d00a800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:26 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)="1811eb1381e8427d", 0x8, r0}, 0x68) 15:14:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d00b000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x3) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x6de, 0x2200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="f975fb2b35bd165323e16e75fa0a891e", 0x10) 15:14:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, 0x0, 0x0) 15:14:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\b\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0xf2f7, 0x3, 0x0, {0xf, @win={{0xfffffffeffffffff, 0x6, 0x9d, 0x1}, 0xd, 0x9, &(0x7f00000000c0)={{0x40, 0x4d1, 0x0, 0x81}}, 0x5, &(0x7f0000000100)="3c76c1bdfd1768618633da7d3c728f13b1f0d5d83d31fa83b62fdb3eebddf8f11d86f7cf300f087cac083ab90d87d953e10c4345f44cef2c620dbcdaf6def79cc58b2cc4b25b469fdecc30a71ea11592d8eb09a04059928a494d66e9384f511ee4ae764a6ce70033a8359d068dae6f62f8bfd76165ec8c4d0bd24cb8603163a513e82f", 0x9}}}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000002c0)=0xffffffff7fffffff, 0x4) 15:14:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d00b800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00ec000008000000"], 0x1}}, 0x0) 15:14:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, 0x0, 0x0) 15:14:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x8001, 0x4}) 15:14:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070") socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000580)={'veth0_to_hsr\x00'}) 15:14:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d00c000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x2, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x81, 0x23, 0x3, 0x81}, {0x20000000, 0xd543, 0x3, 0xaca}]}) 15:14:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000047) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ffe91ccd0922bb9fe7f05e2ffad14a94"}, 0x1c) sendmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380), 0x3}, 0x5}], 0x169, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000000c0)=""/75) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1000000000002}) 15:14:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d00c800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, 0x0, 0x0) 15:14:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vetH\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:27 executing program 5: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/98, 0x62) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040), 0x0) 15:14:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x3, 0xb1) getsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000534000), &(0x7f0000000000)=0x4) 15:14:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d00d000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040), 0x0) 15:14:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x7) 15:14:27 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a555) socket$inet(0x2, 0x3, 0x21) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10006, 0x0) 15:14:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d00d800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:28 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x208000, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000180)=0x5) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) sendto$isdn(r1, &(0x7f0000000240)={0x8, 0xcc, "c44b592fb0d79f08cf9a381bdb212989e344416dab9f7181994cf9143af418d89771f2b693e78148d4a30a692378e40dfcf5e148b3fb637cbba07be72409a891e057f1da8d7d0e3ffd3bc0a3ec5012"}, 0x57, 0x10, 0x0, 0x270) 15:14:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040), 0x0) 15:14:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d00e000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vetL\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:28 executing program 5: syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xffff, 0x40) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x800, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 15:14:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040), 0x0) 15:14:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 15:14:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d00e800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x2, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x81, 0x23, 0x3, 0x81}, {0x20000000, 0xd543, 0x3, 0xaca}]}) 15:14:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000040)=""/148, &(0x7f0000000140)=0x94) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f, 0x100f}}, 0x20) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r2, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x88}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000081}, 0x40) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000100)=0x100) 15:14:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 15:14:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d00f000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'veth\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, 0x0, 0x0) 15:14:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d00f800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x1, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) 15:14:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4, 0xfffffffd}) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x8, 0x400000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1ff) 15:14:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020300000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 15:14:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) uname(&(0x7f00000000c0)=""/4096) 15:14:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vetl\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) lookup_dcookie(0x6, &(0x7f0000000180)=""/35, 0x23) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2080, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@mcast2, @remote, @mcast2, 0xff, 0x2b, 0x1, 0x100, 0x4, 0x80020, r2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020400000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) [ 1180.162543][ T5700] Unknown ioctl 35083 15:14:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x1}], 0x1) 15:14:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15:14:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x400, 0xa, &(0x7f0000000640)=[{&(0x7f0000000180)="fef58c5ac93e8d332a4c5a6064db2427c300e679c9923a37abc67f13a6db6b4d51cbec02a259", 0x26, 0xfff}, {&(0x7f00000001c0)='T%\n', 0x3, 0xff}, {&(0x7f0000000200)="3375e3179e8dde4875e91b06d054692e97878559d2655d19faa60e18d23c6ca8a25ea630e92012fa2b7d11818cfecf05278b9774db6ac517e1dc9d243609e4327ac079fee5705292e84f5f21dd76ae45a61cfbacfcbe005b7012b20c750d813f036699b950758018fdefe7f7897d6a9b2a5ba9980e293482f92623ea", 0x7c, 0x80000001}, {&(0x7f0000000280)="6f65646dfeaa67762d90444501e7669a3d40ae1bafbf76794e44c4a0681ff7e0ea4d89864cb1d2b83d867b262d", 0x2d, 0x80}, {&(0x7f00000002c0)="33915b98765e3969a70e1b2831efc9364bd27df0f89f847df1cf93d60fb6935b74caf9d6fa06318c3854473a3b29cb040d5016a92c291fd7251936b6825fcad46aed13bab2efa6800ae0a776558bbeec7b1afa4e8b62c5a49c9bf2877e6b4257c87e6973136dce3545fc57d54133cc8b1ed6a687467806f3fc3b16a892fc7a2c4ad84b6bdcdc5219248b4b104dbd", 0x8e, 0x4}, {&(0x7f0000000380)="ba2be846e21b20e611639b16ca105442bb52d4c45e31ba5a56341c9621a19e50b9235d73f8529a6955413921a32b9cbc795a141cc96c3af0ca3aad7430976f5c04b7da24c9c80ac70aa49e696aca7f00d7c7ca9d58768c33091b7b0339cac4217f531013daaebc02e9f432ff4bf206c57e4fa87883b8253fb68c758a8499c0b4", 0x80, 0x1000}, {&(0x7f0000000400)="c57b251e74150167453deff6538af87546b526fa5ade66562a4d217c869a58ad0923cc36d556a151ab8c6e5b546c270c204a68ad60e0bc9867092a37b5f035baa60464328efebbd7a9a4cb9a917ee148aacf8bf3cac3d37748", 0x59, 0x100}, {&(0x7f0000000480)="c2c99c269aed", 0x6, 0x9}, {&(0x7f00000004c0)="34555718168df2d2c70c566d4996b59326cadb975eeeb5d0f59d4286d4c16395cf2c696c6b333fecc941aba729bc4bb501654ceed38e4a41af605347940a4dc5e767c2c61f7231c44711cfef868e841bcc685ee37e15c9e91d7eb6c0951b5af31769c67ce0190f251dd374c65c59d1fc45bb27f110ba0ac888190c61895bc6baf2d0ecbb7db58e302028e7b7a2b83a1f65d977c9fdbd64eed0df54620f98649a01042df152afb95b034f", 0xaa, 0x3f}, {&(0x7f0000000580)="2f743e1e7ece76212d0bca0f21a55edcdb09bd517dcea60727b764466f2d9b53dcc346d73ef5010f17455fe6e0fef0f1d6e123879e40549b735e71a13474a41e9a85c9c4ca04048147a4433967190fd357d873c84fb9c5798b77038a627409bf442bd140e17848173614c0eb41521345f592ad7a1795993ade785c40cfd827f5e8d5de46acbaff87a8fefffd7f828c8323945ad4c247a35c8f5d3c9c493f13b29b118b4f0d1661355b3a96dc41163fcfa71c1a95831405c599dbb501", 0xbc, 0x200}], 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="73686f72746e6102000000000000002c757466383d312c736d61636b6673726f6f743d2e2c00"]) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x7) 15:14:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020500000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4}) 15:14:29 executing program 4 (fault-call:4 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) [ 1180.382200][ T6009] FAT-fs (loop5): Unrecognized mount option "shortna" or missing value [ 1180.393004][ T6013] FAULT_INJECTION: forcing a failure. [ 1180.393004][ T6013] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.408621][ T6013] CPU: 1 PID: 6013 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1180.418133][ T6013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1180.428206][ T6013] Call Trace: 15:14:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:29 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x10000, 0x80000) write$P9_RFSYNC(r0, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) fstat(r0, &(0x7f0000000200)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="01204780", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000003c0)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={r2, 0x840}, &(0x7f0000000400)=0x8) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xffffffffffffffcb, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000380)={0x5}) [ 1180.431524][ T6013] dump_stack+0x172/0x1f0 [ 1180.435873][ T6013] should_fail.cold+0xa/0x15 [ 1180.440493][ T6013] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1180.446327][ T6013] ? ___might_sleep+0x163/0x280 [ 1180.451193][ T6013] __should_failslab+0x121/0x190 [ 1180.456144][ T6013] should_failslab+0x9/0x14 [ 1180.460658][ T6013] kmem_cache_alloc_trace+0x2d1/0x760 [ 1180.466041][ T6013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1180.472307][ T6013] sg_read+0xa5c/0x1830 [ 1180.476468][ T6013] ? fsnotify+0xbc0/0xbc0 [ 1180.480801][ T6013] ? fsnotify_first_mark+0x210/0x210 [ 1180.486099][ T6013] ? sg_remove_device+0x3a0/0x3a0 [ 1180.491134][ T6013] ? security_file_permission+0x94/0x380 [ 1180.496783][ T6013] do_iter_read+0x4a9/0x660 [ 1180.501467][ T6013] ? dup_iter+0x260/0x260 [ 1180.505812][ T6013] vfs_readv+0xf0/0x160 [ 1180.509985][ T6013] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 1180.516066][ T6013] ? kasan_check_read+0x11/0x20 [ 1180.520943][ T6013] ? ksys_dup3+0x3e0/0x3e0 [ 1180.525372][ T6013] ? wait_for_completion+0x440/0x440 [ 1180.530667][ T6013] ? __fget_light+0x1a9/0x230 [ 1180.535354][ T6013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1180.541605][ T6013] do_readv+0xf6/0x290 [ 1180.545680][ T6013] ? vfs_readv+0x160/0x160 [ 1180.550104][ T6013] ? do_syscall_64+0x26/0x610 [ 1180.554786][ T6013] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1180.560851][ T6013] ? do_syscall_64+0x26/0x610 [ 1180.565537][ T6013] __x64_sys_readv+0x75/0xb0 [ 1180.570134][ T6013] do_syscall_64+0x103/0x610 [ 1180.574733][ T6013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1180.580619][ T6013] RIP: 0033:0x457e29 [ 1180.584512][ T6013] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1180.604116][ T6013] RSP: 002b:00007f36107f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1180.612528][ T6013] RAX: ffffffffffffffda RBX: 00007f36107f1c90 RCX: 0000000000457e29 [ 1180.620501][ T6013] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 1180.628469][ T6013] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1180.636444][ T6013] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36107f26d4 [ 1180.644411][ T6013] R13: 00000000004c494f R14: 00000000004d8510 R15: 0000000000000005 15:14:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vett\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15:14:29 executing program 4 (fault-call:4 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020900000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xda, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x30d3fb6, 0x1}) [ 1180.782012][ T6299] FAULT_INJECTION: forcing a failure. [ 1180.782012][ T6299] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1180.824430][ T6299] CPU: 1 PID: 6299 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1180.833503][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1180.843565][ T6299] Call Trace: [ 1180.846885][ T6299] dump_stack+0x172/0x1f0 [ 1180.851239][ T6299] should_fail.cold+0xa/0x15 [ 1180.855853][ T6299] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1180.855874][ T6299] ? ___might_sleep+0x163/0x280 [ 1180.855899][ T6299] should_fail_alloc_page+0x50/0x60 15:14:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x200000008, 0x1}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x290, 0x4) 15:14:29 executing program 0: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) [ 1180.866534][ T6299] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1180.866557][ T6299] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1180.866583][ T6299] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1180.877121][ T6299] alloc_pages_current+0x107/0x210 [ 1180.877143][ T6299] pte_alloc_one+0x1b/0x1a0 [ 1180.877163][ T6299] do_huge_pmd_anonymous_page+0x9f6/0x1730 [ 1180.877181][ T6299] ? __lock_acquire+0x55d/0x4710 [ 1180.877199][ T6299] ? kernel_text_address+0xd1/0xf0 [ 1180.889127][ T6299] ? __thp_get_unmapped_area+0x190/0x190 [ 1180.889142][ T6299] ? pmd_val+0x100/0x100 [ 1180.889165][ T6299] __handle_mm_fault+0x2d5e/0x3ec0 [ 1180.889185][ T6299] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1180.889200][ T6299] ? find_held_lock+0x35/0x130 [ 1180.889215][ T6299] ? handle_mm_fault+0x322/0xb30 [ 1180.889240][ T6299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1180.889269][ T6299] ? kasan_check_read+0x11/0x20 [ 1180.955938][ T6299] handle_mm_fault+0x43f/0xb30 [ 1180.960720][ T6299] __do_page_fault+0x5ef/0xda0 [ 1180.965496][ T6299] do_page_fault+0x71/0x581 [ 1180.970014][ T6299] page_fault+0x1e/0x30 15:14:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020d00000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) [ 1180.974178][ T6299] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 1180.980505][ T6299] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 1181.000126][ T6299] RSP: 0018:ffff888085107aa8 EFLAGS: 00010203 [ 1181.006197][ T6299] RAX: 0000000000000004 RBX: ffff888091b3aa40 RCX: 0000000000000004 [ 1181.014173][ T6299] RDX: 0000000000000004 RSI: 0000000020e94000 RDI: ffff888099ec8800 [ 1181.022146][ T6299] RBP: ffff888085107bf0 R08: 1ffff110133d9100 R09: ffffed10133d9105 [ 1181.030109][ T6299] R10: ffffed10133d9104 R11: 0000000000000003 R12: 0000000000000001 [ 1181.030119][ T6299] R13: ffff888099ec8800 R14: 000000000000003e R15: ffff888095ab4e80 [ 1181.030159][ T6299] ? sg_read+0xa9d/0x1830 [ 1181.030181][ T6299] ? fsnotify+0xbc0/0xbc0 [ 1181.054745][ T6299] ? fsnotify_first_mark+0x210/0x210 [ 1181.060054][ T6299] ? sg_remove_device+0x3a0/0x3a0 [ 1181.065102][ T6299] ? security_file_permission+0x94/0x380 [ 1181.070753][ T6299] do_iter_read+0x4a9/0x660 [ 1181.075271][ T6299] ? dup_iter+0x260/0x260 [ 1181.079619][ T6299] vfs_readv+0xf0/0x160 [ 1181.083788][ T6299] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 1181.089865][ T6299] ? kasan_check_read+0x11/0x20 [ 1181.094731][ T6299] ? ksys_dup3+0x3e0/0x3e0 [ 1181.094756][ T6299] ? wait_for_completion+0x440/0x440 [ 1181.094776][ T6299] ? __fget_light+0x1a9/0x230 [ 1181.109118][ T6299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.115373][ T6299] do_readv+0xf6/0x290 [ 1181.119459][ T6299] ? vfs_readv+0x160/0x160 15:14:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)) [ 1181.123972][ T6299] ? do_syscall_64+0x26/0x610 [ 1181.128656][ T6299] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1181.134728][ T6299] ? do_syscall_64+0x26/0x610 [ 1181.139504][ T6299] __x64_sys_readv+0x75/0xb0 [ 1181.144124][ T6299] do_syscall_64+0x103/0x610 [ 1181.148726][ T6299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1181.154617][ T6299] RIP: 0033:0x457e29 [ 1181.158516][ T6299] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1181.178118][ T6299] RSP: 002b:00007f36107f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1181.178134][ T6299] RAX: ffffffffffffffda RBX: 00007f36107f1c90 RCX: 0000000000457e29 [ 1181.178143][ T6299] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 1181.178153][ T6299] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1181.178162][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36107f26d4 15:14:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f00000000c0)={0xa, {0x400, 0x80, 0x0, 0x80000001}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d021000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) [ 1181.178172][ T6299] R13: 00000000004c494f R14: 00000000004d8510 R15: 0000000000000005 15:14:29 executing program 0: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15:14:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vetz\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:30 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x24}) 15:14:30 executing program 4 (fault-call:4 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d022900000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:30 executing program 0: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15:14:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2000, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) r2 = dup(r0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x4, 0x0, [{0x4, 0x8, 0xffff, 0x20, 0x8}, {0xd, 0x7f, 0x9, 0x1f, 0x800}, {0xb, 0x3, 0x8000, 0x1, 0x5}, {0x40000001, 0x5, 0x7, 0xfffffffffffff801}]}) [ 1181.422992][ T6752] FAULT_INJECTION: forcing a failure. [ 1181.422992][ T6752] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.472076][ T6752] CPU: 0 PID: 6752 Comm: syz-executor.4 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1181.481238][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1181.491302][ T6752] Call Trace: [ 1181.491332][ T6752] dump_stack+0x172/0x1f0 [ 1181.491355][ T6752] should_fail.cold+0xa/0x15 [ 1181.491379][ T6752] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1181.503579][ T6752] ? ___might_sleep+0x163/0x280 [ 1181.503604][ T6752] __should_failslab+0x121/0x190 [ 1181.514236][ T6752] should_failslab+0x9/0x14 [ 1181.514258][ T6752] kmem_cache_alloc+0x2b2/0x6f0 [ 1181.523651][ T6752] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1181.523672][ T6752] ptlock_alloc+0x20/0x70 [ 1181.523693][ T6752] pte_alloc_one+0x6d/0x1a0 [ 1181.543557][ T6752] do_huge_pmd_anonymous_page+0x9f6/0x1730 [ 1181.549376][ T6752] ? __lock_acquire+0x55d/0x4710 [ 1181.554321][ T6752] ? kernel_text_address+0xd1/0xf0 [ 1181.559443][ T6752] ? __thp_get_unmapped_area+0x190/0x190 [ 1181.565074][ T6752] ? pmd_val+0x100/0x100 [ 1181.569329][ T6752] __handle_mm_fault+0x2d5e/0x3ec0 [ 1181.574453][ T6752] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1181.580008][ T6752] ? find_held_lock+0x35/0x130 [ 1181.584776][ T6752] ? handle_mm_fault+0x322/0xb30 [ 1181.589730][ T6752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.595974][ T6752] ? kasan_check_read+0x11/0x20 [ 1181.600913][ T6752] handle_mm_fault+0x43f/0xb30 [ 1181.605684][ T6752] __do_page_fault+0x5ef/0xda0 [ 1181.610460][ T6752] do_page_fault+0x71/0x581 [ 1181.614969][ T6752] page_fault+0x1e/0x30 [ 1181.619122][ T6752] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 1181.625446][ T6752] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 1181.645043][ T6752] RSP: 0018:ffff8880a05dfaa8 EFLAGS: 00010203 [ 1181.651103][ T6752] RAX: 0000000000000004 RBX: ffff8880886b0340 RCX: 0000000000000004 [ 1181.659067][ T6752] RDX: 0000000000000004 RSI: 0000000020e94000 RDI: ffff8880a16f4300 [ 1181.667033][ T6752] RBP: ffff8880a05dfbf0 R08: 1ffff110142de860 R09: ffffed10142de865 [ 1181.675000][ T6752] R10: ffffed10142de864 R11: 0000000000000003 R12: 0000000000000001 [ 1181.682966][ T6752] R13: ffff8880a16f4300 R14: 000000000000003e R15: ffff88805bdd19c0 [ 1181.690970][ T6752] ? sg_read+0xa9d/0x1830 [ 1181.695301][ T6752] ? fsnotify+0xbc0/0xbc0 [ 1181.699632][ T6752] ? fsnotify_first_mark+0x210/0x210 [ 1181.704921][ T6752] ? sg_remove_device+0x3a0/0x3a0 [ 1181.710130][ T6752] ? security_file_permission+0x94/0x380 [ 1181.715774][ T6752] do_iter_read+0x4a9/0x660 [ 1181.720289][ T6752] ? dup_iter+0x260/0x260 [ 1181.724628][ T6752] vfs_readv+0xf0/0x160 [ 1181.728787][ T6752] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 1181.734850][ T6752] ? kasan_check_read+0x11/0x20 [ 1181.739713][ T6752] ? ksys_dup3+0x3e0/0x3e0 [ 1181.744129][ T6752] ? wait_for_completion+0x440/0x440 [ 1181.749417][ T6752] ? __fget_light+0x1a9/0x230 [ 1181.754093][ T6752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.760332][ T6752] do_readv+0xf6/0x290 [ 1181.764405][ T6752] ? vfs_readv+0x160/0x160 [ 1181.768821][ T6752] ? do_syscall_64+0x26/0x610 [ 1181.773502][ T6752] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1181.779566][ T6752] ? do_syscall_64+0x26/0x610 [ 1181.784249][ T6752] __x64_sys_readv+0x75/0xb0 [ 1181.788853][ T6752] do_syscall_64+0x103/0x610 [ 1181.793447][ T6752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1181.799330][ T6752] RIP: 0033:0x457e29 [ 1181.803221][ T6752] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:14:30 executing program 5: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d023000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) [ 1181.822819][ T6752] RSP: 002b:00007f36107f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1181.831226][ T6752] RAX: ffffffffffffffda RBX: 00007f36107f1c90 RCX: 0000000000457e29 [ 1181.839197][ T6752] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 1181.847179][ T6752] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1181.855146][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36107f26d4 [ 1181.863119][ T6752] R13: 00000000004c494f R14: 00000000004d8510 R15: 0000000000000005 15:14:30 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15:14:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000140)=0x4) ppoll(&(0x7f0000000180)=[{r0, 0x8000}, {r1, 0x2500}], 0x2, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f0000000200)={0x7ff}, 0x8) 15:14:30 executing program 4 (fault-call:4 fault-nth:3): r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d025100000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:30 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x20, 0x40000) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:30 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15:14:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020003000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:30 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x46, 0x0}}], 0x1, 0x0, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f0000000080)='fd/4\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netstat\x00') preadv(r1, &(0x7f00000017c0), 0x10000000000001f7, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:30 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15:14:30 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000140)=0x1) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x100) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x2b, 0xffffffffbffffffe}) 15:14:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xe8\x03\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15:14:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020005000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15:14:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020009000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) pipe(&(0x7f0000000240)) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000200)={r1, 0x5, &(0x7f0000000100)=[0x5, 0x2, 0x4, 0x80, 0x4d], &(0x7f0000000140)=[0xffff, 0x2, 0x0, 0x80, 0x80], 0x21, 0x4, 0x8c6, &(0x7f0000000180)=[0x7, 0x0, 0x40, 0x12d0], &(0x7f00000001c0)=[0x100000000]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4, 0x8}) 15:14:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x05\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15:14:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000180)={r1, &(0x7f0000000100)=""/105}) 15:14:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x23}], 0x1) 15:14:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02fa0c000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0xffffffffffff5b19, 0x7, 0x28], 0x3, 0x100, 0x2, 0x401, 0x1, 0xb602, {0x7, 0x1, 0x100, 0x40, 0x4, 0x7ff, 0x9, 0x80, 0x200, 0x7fff, 0x9, 0x800, 0x100000000, 0x6, "421876c0cdb8ca3bea4d05b26b283b6e9475f52c93a42c31d45135842e5378b7"}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:31 executing program 0: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15:14:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x06\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x4) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x5, 0x7, 0x4, &(0x7f0000ffe000/0x2000)=nil}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x8, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb8, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x800) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000200)) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xffffffff, 0x40001) getsockname$netlink(r3, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3ff, 0x3, 0x81, &(0x7f0000ffe000/0x2000)=nil, 0x9}) 15:14:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02000d000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x24}], 0x1) 15:14:31 executing program 0: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15:14:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8002, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)) fcntl$getown(r0, 0x9) r2 = getpgrp(0x0) r3 = getpgid(r2) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x52e, 0xa0d6, 0xc4, 0x9, r3}) 15:14:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020020000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:31 executing program 0: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15:14:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001c80)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000001d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001dc0)={'team0\x00', r2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\a\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x94}], 0x1) 15:14:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020029000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:14:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000100)=[0xffffffffd20211f0, 0x6], 0x2, 0xff, 0x8000000, 0x3, 0x1, 0x1, {0x387, 0x8, 0xdd8a, 0x98f, 0xac, 0x5, 0x5, 0xfb44, 0x5, 0x1, 0x0, 0x7fffffff, 0x90b6, 0x5, "3ed7b3c35222001cf4333bf80c8a75f0c5e3e09b3a4acddf567aa068911d2e6a"}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) 15:14:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:14:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020030000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x20e9403e}], 0x1) 15:14:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet#\x0f\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x2000000, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x23b9}}, {@rq={'rq', 0x3d, 0x986}}, {@timeout={'timeout', 0x3d, 0x5}}, {@common=@noextend='noextend'}, {@timeout={'timeout', 0x3d, 0x66e2}}, {@common=@access_user='access=user'}, {@sq={'sq', 0x3d, 0x80}}, {@rq={'rq', 0x3d, 0x6}}, {@sq={'sq'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0x7f, 0x35, 0x35, 0x77, 0x32, 0x73, 0x31], 0x2d, [0x0, 0x0, 0x7b], 0x2d, [0x35, 0x35, 0x77, 0x75], 0x2d, [0x77, 0x64, 0x62, 0x73], 0x2d, [0x35, 0x35, 0x37, 0x65, 0x0, 0x62, 0x37, 0x77]}}}, {@uid_eq={'uid', 0x3d, r1}}, {@appraise_type='appraise_type=imasig'}, {@measure='measure'}, {@appraise='appraise'}, {@subj_type={'subj_type', 0x3d, 'md5sumcpuset'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x37, 0x39, 0x39, 0x30, 0x0, 0x38, 0x7d], 0x2d, [0x31, 0x36, 0x65, 0x7f], 0x2d, [0x63, 0x63, 0x61, 0x35], 0x2d, [0x61, 0x39, 0x65, 0x31], 0x2d, [0x66, 0x39, 0x77, 0x66, 0x37, 0x3f, 0x61, 0x63]}}}, {@dont_measure='dont_measure'}]}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:32 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x7}) 15:14:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020040000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) 15:14:32 executing program 5: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3}) 15:14:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x7ffff000}], 0x1) 15:14:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x0, 0x2}) 15:14:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020051000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:32 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) connect$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x2, 0x6, 0x7, 0x39, "7353106a0fb1ecfa4e5619a95059aed5af9f256290531c90fb0ceca74ce07d79f82eced149136062b9466fbad20ddb66bd122761a6a8819986e35f071ae013", 0x7}, 0x60) recvfrom$inet(r0, &(0x7f0000000180)=""/188, 0xbc, 0x2, 0x0, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x100000004, 0x1}) 15:14:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x1f\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7, 0x40000000000000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x0, 0x2}) 15:14:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020cfa000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x2) 15:14:32 executing program 5: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) write$P9_RREADDIR(r0, &(0x7f0000000180)={0xc5, 0x29, 0x1, {0x200, [{{0x8, 0x0, 0x2}, 0x0, 0x1ff, 0x7, './file0'}, {{0x4, 0x2, 0x2}, 0xfff, 0x81, 0x7, './file0'}, {{0x6, 0x4, 0x7}, 0x4f, 0x1, 0x7, './file0'}, {{0x2, 0x1, 0x4}, 0x2, 0x0, 0x7, './file0'}, {{0x80, 0x3, 0x6}, 0xffffffffffffffc1, 0x8, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x4, 0x3, 0x7, './file0'}]}}, 0xc5) 15:14:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mprotect(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0) setsockopt$sock_timeval(r1, 0x1, 0xd, &(0x7f0000abaff9), 0x1000000c1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x0, 0x2}) 15:14:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000200000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x3) 15:14:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00 \x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x244540, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x2000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02a000800000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x4) 15:14:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x0f#\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:33 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x84, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f00000001c0)=0x6e4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000080)={0x3, {{0xa, 0x4e23, 0x0, @local, 0x1}}, {{0xa, 0x4e20, 0x4, @local, 0xfb}}}, 0xffffff8a) 15:14:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000040)={0x5000, 0x3000, 0x401, 0x3, 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x3, 0xffffffffffffffff}) 15:14:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000100003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x244540, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x2000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x6) 15:14:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00H\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000300003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x244540, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x2000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x8) 15:14:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)={0x9, 0x0, 0x10003, 0x8000}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x580, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000100)=""/217) 15:14:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8c003, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 15:14:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x244540, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x2000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000400003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00L\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x94) 15:14:33 executing program 0: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x244540, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x2000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2000, 0x0) 15:14:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000500003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:33 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x400002) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x248, 0x0, 0x3}, {0x2a2, 0x0, 0x5}]}) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0xffffffffffffffff, 0x2}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000100)={0x40, 0x15a}) 15:14:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x103800) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000140)={@null, @null, 0x2, 0x56}) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000100)='!trusted-\\wlan1self\x00', 0x14) 15:14:33 executing program 0: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x244540, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x2000}) 15:14:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x87`\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x300) 15:14:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000800003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0xdc6) connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x10f, 0x7, 0xb4, 0xfff, 0x9, @random="7c9e1bf04d31"}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lapb0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) write(r1, &(0x7f0000000140)="d0e2078ee16e1c6aab09ce47528aeebf285ccc9e67e4349d4afd659391496311c6bfceecb4ea3cdaef81e74aa125fc8d36b8f2aef55cd7e52ea710d9fdcc7ba51a48e7acf5c60bb346456267d56a796351c21746fe4197a9b79834f6961430d5246f4b1b9234ba91", 0x68) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4, 0xfffffffffffffffc}) 15:14:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000900003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:34 executing program 0: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2000}) 15:14:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0xffffff1f) 15:14:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_DISCONNECT(r1, 0xab08) 15:14:34 executing program 0: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2000}) 15:14:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000d00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00h\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) 15:14:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xad}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x35}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100000000000}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4fe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2c0b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:34 executing program 0: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2000}) 15:14:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000001000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:34 executing program 5: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x101, 0x200080) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0xbd64, 0x4) 15:14:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x5e41d22ac2e500b3, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000280)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) 15:14:34 executing program 0: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2000}) 15:14:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000002900003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00l\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) getsockname$tipc(r1, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:34 executing program 5: timerfd_create(0x7, 0x800) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000100)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:34 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2000}) 15:14:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000003000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:34 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x109001, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000100)={0x800000000000054d, 0xffffffff, 0xffff}) timerfd_gettime(r0, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x4}) 15:14:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x7f, 0x4, [0xf3, 0x9, 0x4, 0x9]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000180)={r2, 0x3}, 0x8) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3aa}], 0x1) 15:14:34 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2000}) 15:14:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000004000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = socket$inet(0x2, 0x0, 0x100) sendto$inet(r1, &(0x7f00000000c0)="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", 0xfd, 0x8000, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000200)='[@#.wlan1)ppp0%bdev\xf2/em1,posix_acl_access]keyring!cgroupprocselinuxsecuritycpusetneth0\x00', &(0x7f0000000280)='cpusetppp1!cgroupem1lo@\x00', &(0x7f00000002c0)='posix_acl_access\x00', &(0x7f0000000300)='.:ppp1vboxnet0\x00', &(0x7f0000000340)='em0@\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='/dev/dri/card#\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='/dev/dri/card#\x00']) 15:14:34 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2000}) 15:14:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000005100003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00t\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@local, @dev={0xfe, 0x80, [], 0x26}, @mcast2, 0xe, 0x1e63fbd5, 0x4, 0x400, 0x7fff, 0x80000, r2}) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/233, 0xe9}], 0x1) 15:14:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x2, 0x480082) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) fallocate(r0, 0x10000050, 0x2, 0xf3) getsockname$netrom(r1, &(0x7f0000000140)={{0x3, @rose}, [@netrom, @default, @null, @default, @bcast, @netrom, @remote, @null]}, &(0x7f0000000080)=0x48) 15:14:34 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2000}) 15:14:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200000, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1f, &(0x7f00000000c0)=0x4, 0x4) 15:14:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02008000a000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:35 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2000}) 15:14:35 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x4, 0x100) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000600)=[@in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x52}, @in6={0xa, 0x4e23, 0x6, @ipv4={[], [], @loopback}}, @in6={0xa, 0x4e22, 0x81, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000001}], 0x54) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000005c0)={0x4, &(0x7f0000000100)=""/211, &(0x7f0000000540)=[{0x9, 0x12, 0x6, &(0x7f0000000200)=""/18}, {0x6851, 0xdf, 0x3, &(0x7f0000000240)=""/223}, {0x5, 0xef, 0x913a, &(0x7f0000000340)=""/239}, {0x7, 0xd0, 0x5, &(0x7f0000000440)=""/208}]}) 15:14:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00z\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d0200000cfa00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x10001, 0x4000) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f00000000c0)=0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:35 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2000}) 15:14:35 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)='vmnet1\x00'}, 0x30) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x200000000007, 0x20000000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4400, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000100)={0x4205, 0x3, 0x5}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02fffffffb00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x10801) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200000, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000000c0)=""/234, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r2 = add_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="78c19ca5b88390b08c61c311d4d83c29d295ee8d54b9666d1259ba39afa6f39115043d853f2c7bc4eb5882c6009839bb36b61f953d1102ac1dac8659d4d1a08144f9881d4f3d80fde83052e9e4f1e04a3239439e521c3e186d083b609974d9395631707823add57e2f68160a7e16e12d8c0aa813edcb9152f3eb7d22368b35e7cbd07407b2", 0x85, 0xfffffffffffffffd) keyctl$invalidate(0x15, r2) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x80, 0x0) 15:14:35 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2000}) 15:14:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x03\xe8\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x1, 0x4001, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 15:14:35 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:14:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x2, 0x401, 0x401, 0x3, 0x101}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4}) 15:14:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02fbffffff00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000040)={r1}) 15:14:35 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:14:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000380)="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", 0x113) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000180)) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020003000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:36 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0xe07a, 0x8, 0x0, &(0x7f00000000c0)}) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000140)={0x5, 0x0, [{}, {}, {}, {}, {}]}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0xa0000, 0x0) 15:14:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xea\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020004000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vfio/vfio\x00', 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@caif=@rfm={0x25, 0x6, "5f6108d16251d099b45b41a2397d1205"}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="1a0cedef8e9762f50c4d576cfbdea40b8b762771b703431bb0b594b8027728024f284d102d8c81447a82ac4bef042f819a40acfb53fac839d9ecc1dd5f13f74ee3879f8d4c5ea6661338e1696365106748", 0x51}, {&(0x7f00000001c0)="dac834a1156fb50e4ae020f58f41f6fa61d0029087c8acf8b4b30ed0651424b8a959a858a50f7a6c13e3c39abbcb8b7fae783f0032631bc2e9da0f113c62cf61d5d5512a429b856e0f0edb922e4b2503b3e150889d93db26a43b872f326e1493b20c8f1e5f58ad7bc0163620a35281fde650b5f1587f4d8ed397a3cd4d14bcc4713c072a9983ad91dc54e405e294d3f0321876bd6160abea5e64b896db6d7d57ab408025", 0xa4}, {&(0x7f0000000280)="20518ee7b160e7a35c46e5f4999e41aaf5197a3dd0ed39e6117bd046e6a5368456a218befa638c0ddd", 0x29}, {&(0x7f00000002c0)="10dbb13012c5f24d36e0227a4ec2a9518414a7e03208f127118c5a5b380cbc458b", 0x21}], 0x4}, 0x20000004) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) [ 1187.375061][T15129] sg_write: 2 callbacks suppressed [ 1187.375076][T15129] sg_write: data in/out 167162/229 bytes for SCSI command 0xc2-- guessing data in; [ 1187.375076][T15129] program syz-executor.4 not setting count and/or reply_len properly 15:14:36 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:14:36 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020005000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000180)={r1}) 15:14:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020008000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:36 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000100)=""/79, &(0x7f0000000040)=0x4f) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x4}) 15:14:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) fcntl$setlease(r0, 0x400, 0x1) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) r1 = semget(0x0, 0x2, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000080)=""/82) fchdir(r0) 15:14:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000800003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020009000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xeb\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:36 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) fgetxattr(r0, &(0x7f0000000040)=@random={'security.', '\x00'}, &(0x7f00000000c0)=""/76, 0x4c) 15:14:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8001, 0x40000) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000140)={{0x5, 0x5, 0x2, 0x5, 'syz0\x00', 0x1ff}, 0x3, 0x8, 0x9f, r2, 0x1, 0x2, 'syz0\x00', &(0x7f0000000100)=['/dev/dri/card#\x00'], 0xf, [], [0x9, 0x7, 0x3, 0x2]}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 15:14:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02000d000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020008000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0)) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8, 0x10400) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x17}, 0x7, 0x1, 0xff, 0xf, 0xffffffff, 0xb7}, 0x20) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f00000001c0)="809f66b49ea5092a22b90d5150c99076cbc9c2a7d2f90701cfbd7d70333101977f02b48ff6356ac8e60d6c47a8a7bbf6816740ca50d4f6a17fc131c253e3380f03aaedd775ae39492630259bc09ca8") ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000180)=0x8) 15:14:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) socketpair(0x18, 0x0, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, r2, 0x1}, 0xc) 15:14:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020010000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008006) r1 = dup2(r0, r0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000200)) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x10) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0)={0x77359400}, 0x10) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) r4 = getpgrp(0xffffffffffffffff) ptrace$getenv(0x4201, r4, 0x0, &(0x7f0000000080)) 15:14:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02000d000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xec\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020029000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000740)='/dev/dri/card#\x00', 0x4, 0x101001) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x81, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000000c0), 0x4) socket$rxrpc(0x21, 0x2, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) fanotify_mark(r1, 0x10, 0x4000000a, r1, &(0x7f0000000100)='./file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e0000000400000060040000a002000070010000000000007001000000000000900300009003000090030000900300009003000004000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000a685c64afeba1cbac277b72c1e65cfad00000000000000000000000000000000000000000000000000004e77bf73ebdec4b1d38a54cdbcc12a97dd42e65cfe4f36aca3a7e32df1968f2869eaad6643ebb7664002dbc9"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030017001000000000000000000000000000000000000000000000000300066726167000000000000000000000000000000000000000000000000000000010000070000008100000000020000380071756f74610000000000000000000000000000000000000000000000000001000000000000000000000000000000030000000000000040004c4f47000000000000000000000000000000000000000000000000000000c8181e27a6ff26a26879bad7afe1836d1c965b871c9939eb110ffeb13defcadfe53794dcc4f2e85ec5b32c9d322b6ca0ff020000000000000000000000000001ffffffffffffffff00000000ffffffff0000000000000000ff000000ffffffff626f6e6430000000000000000000000069705f7674693000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000708000000000000000000000000000000f00030010000000000000000000000000000000000000000000000002800736f636b6574000000000000000000000000000000000000000000000003af0000000000000040005443504f505453545249500000000000000000000000000000000000000007000000ff0300000300000001000000a0000000c0ffffff0300000080000000fe8000000000000000000000000000aaff020000000000000000000000000001ff000000ff00000000000000000000ffffffff0000000000ff000000000000ff687372300000000000000000000000006e657464657673696d30000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000003b00040100000000000000000000000000000000c800f00000000000000000000000000000000000000000000000000028004d41524b000000000000000000000000000000000000000000000000000200010000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4c0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0], 0x1}) 15:14:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020010000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020030000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x5, 0x80000) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x224) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 15:14:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x270bee1, 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x6}) 15:14:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x3) 15:14:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020051000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7, 0xfffffffffffffffc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) [ 1188.745528][T16795] sg_write: data in/out 167162/500 bytes for SCSI command 0xff-- guessing data in; [ 1188.745528][T16795] program syz-executor.4 not setting count and/or reply_len properly 15:14:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xed\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:37 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x962be631b4429fea, &(0x7f00000000c0)=""/190, &(0x7f0000000180)=0xbe) socketpair$unix(0x1, 0x2000008000000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x40000000002, 0x3, 0x2) unshare(0x400) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfe33) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1) ioctl$SIOCGSTAMPNS(r3, 0x8906, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000030000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xe53b, 0x80) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x78) [ 1188.953565][T16988] FAULT_INJECTION: forcing a failure. [ 1188.953565][T16988] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.987109][T16988] CPU: 0 PID: 16988 Comm: syz-executor.0 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1188.996277][T16988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1189.006353][T16988] Call Trace: [ 1189.009673][T16988] dump_stack+0x172/0x1f0 [ 1189.014035][T16988] should_fail.cold+0xa/0x15 [ 1189.018648][T16988] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1189.024483][T16988] ? ___might_sleep+0x163/0x280 [ 1189.029387][T16988] __should_failslab+0x121/0x190 [ 1189.034347][T16988] should_failslab+0x9/0x14 [ 1189.038864][T16988] kmem_cache_alloc_trace+0x2d1/0x760 [ 1189.044259][T16988] ? aa_file_perm+0x40b/0xeb0 [ 1189.048952][T16988] ? __might_fault+0x12b/0x1e0 15:14:37 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x288000) bind$llc(r0, &(0x7f0000000100)={0x1a, 0x303, 0x100000000, 0x8, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x6, 0x3ff, 0xa053, 0x80000001}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x8, 0x5}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) accept$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000340)={@initdev, 0x0}, &(0x7f0000000380)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) accept4$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000880)=0x14, 0x800) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x1dc, r2, 0x308, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xef}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x84}, 0x40000) [ 1189.053744][T16988] udmabuf_create+0xd1/0xd20 [ 1189.058356][T16988] ? lock_downgrade+0x880/0x880 [ 1189.063220][T16988] ? unmap_udmabuf+0x30/0x30 [ 1189.067830][T16988] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1189.074090][T16988] ? _copy_from_user+0xdd/0x150 [ 1189.079156][T16988] udmabuf_ioctl+0x13d/0x260 [ 1189.083759][T16988] ? udmabuf_create+0xd20/0xd20 [ 1189.088638][T16988] ? __fget+0x35a/0x550 [ 1189.092814][T16988] ? udmabuf_create+0xd20/0xd20 [ 1189.097685][T16988] do_vfs_ioctl+0xd6e/0x1390 [ 1189.102292][T16988] ? ioctl_preallocate+0x210/0x210 [ 1189.102310][T16988] ? __fget+0x381/0x550 [ 1189.102330][T16988] ? ksys_dup3+0x3e0/0x3e0 [ 1189.102351][T16988] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1189.122346][T16988] ? fput_many+0x12c/0x1a0 [ 1189.122373][T16988] ? tomoyo_file_ioctl+0x23/0x30 [ 1189.122389][T16988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1189.122410][T16988] ? security_file_ioctl+0x93/0xc0 [ 1189.143106][T16988] ksys_ioctl+0xab/0xd0 [ 1189.147284][T16988] __x64_sys_ioctl+0x73/0xb0 [ 1189.151901][T16988] do_syscall_64+0x103/0x610 [ 1189.156523][T16988] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1189.162530][T16988] RIP: 0033:0x457e29 [ 1189.166539][T16988] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1189.186156][T16988] RSP: 002b:00007ff8c1cf3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1189.194597][T16988] RAX: ffffffffffffffda RBX: 00007ff8c1cf3c90 RCX: 0000000000457e29 15:14:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2200, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000140)={0x7, "6c35721face805fd6c2a6b48f22f66429e15be1295c0665a364ecad0392ca95d", 0x3, 0x9, 0x1, 0x7, 0x1000000, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x8, 0x200000000}) openat$cgroup_ro(r1, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) 15:14:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) getsockopt$inet_buf(r1, 0x0, 0x25, &(0x7f0000000180)=""/159, &(0x7f00000000c0)=0x9f) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000080)) 15:14:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000050000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) [ 1189.202593][T16988] RDX: 0000000020000140 RSI: 0000000040187542 RDI: 0000000000000003 [ 1189.210667][T16988] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1189.218658][T16988] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8c1cf46d4 [ 1189.226647][T16988] R13: 00000000004c23ca R14: 00000000004d4df0 R15: 0000000000000004 15:14:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000100)=0x7) 15:14:38 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) [ 1189.355737][T17524] QAT: Invalid ioctl 15:14:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xee\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:38 executing program 3: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x10001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4797}) 15:14:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000090000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:38 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x117, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xd6cc, @empty}, {0xa, 0x4e23, 0xf84, @rand_addr="e11474a2481c0ab835a2b4154d42b799", 0x413}, r2, 0xfaa9}}, 0x48) 15:14:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x103000, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f00000000c0)=0xf000) 15:14:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d0200fa0c0000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:38 executing program 3: getpeername(0xffffffffffffff9c, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000001c0)=0x80) accept4$alg(r0, 0x0, 0x0, 0x800) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:38 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x2, &(0x7f0000000140)) [ 1189.577220][T17888] Unknown ioctl 28675 15:14:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d0200000d0000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1f, 0x3, 0x1ff, 0x7, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) 15:14:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[0x20, 0x2, 0x8, 0x2]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xef\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:38 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7ff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000001c0)) 15:14:38 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x5421, &(0x7f0000000140)) 15:14:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000200000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="080026bd7000ffdbdf2560020f000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40440d0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000300)={'team_slave_0\x00', 0x80000001, 0x6}) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\x04}'}, {}, {0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}, {0x20, 'cgroupvmnet1md5sum'}], 0xa, "2c2215b83938b34ec45b9f3476c2cb39d19d8eb28540e374f81d214392519d2c31f17af655851af78efc1494214e5234bbd6826a4da2e77dcc4f517df92a278d7907e43a266f93a7018935be5ac4fa"}, 0x85) 15:14:38 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x18) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) 15:14:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000290000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:38 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x5450, &(0x7f0000000140)) [ 1189.976141][T18678] sg_write: data in/out 1818846731/85 bytes for SCSI command 0x67-- guessing data in; [ 1189.976141][T18678] program syz-executor.4 not setting count and/or reply_len properly 15:14:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xf0\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x402002, 0x0) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x8000) 15:14:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4}) 15:14:38 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x5451, &(0x7f0000000140)) 15:14:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000300000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RLINK(r1, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:38 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x5452, &(0x7f0000000140)) 15:14:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) write$smack_current(r1, &(0x7f0000000140)='/dev/dri/card#\x00', 0xffffffc0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000180)={0x100, 0x3, 0x8, {r2, r3+30000000}, 0x26, 0x6}) 15:14:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000400000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:38 executing program 5: r0 = socket$inet(0x2, 0x80003, 0x7fffffff) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0xfff}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x7, 0x4) 15:14:38 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x5460, &(0x7f0000000140)) 15:14:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000510000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xf1\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="240000001e0007031dfffd946f610500070000000500000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x571fee3c) unlink(0x0) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) 15:14:39 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40049409, &(0x7f0000000140)) 15:14:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02000cfa0000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:39 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000180)) r2 = userfaultfd(0x800) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000002000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:39 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40087543, &(0x7f0000000140)) 15:14:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x80) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x7) 15:14:39 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x9, 0x6, 0xa}) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d0200a0008000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x9, 0x10008002) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xf2\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:39 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x4020940d, &(0x7f0000000140)) 15:14:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x80000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0xfffffffffffffbff, 0xfffffffffffffffa}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0xfffffffffffffffc}) 15:14:39 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x80000, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x6011, r0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x40) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x802, 0x4}) syncfs(r1) 15:14:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000001003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:39 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0xc0045878, &(0x7f0000000140)) 15:14:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x40a00) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000240)=0x1) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x80) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) chdir(&(0x7f00000002c0)='./file0\x00') ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000180)) write(r2, &(0x7f00000001c0)="aa7f3699e3ef5d1cf590117f7fb3fe468e2bb8928234ae67f3a78636f62156f2519cab6db78b4c7a53fbdc94bb1834a31aa742f1bb0d89969b93782c1b9a2cfcd772aaec6ad9a97874b692a585839b863ff8d9b230c629511e0ae8a6848c6f8b626700dec5e234d96a1c6689c9b40b1a9396c79e77e78b", 0x77) 15:14:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000003003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) [ 1190.853725][T20269] sg_write: data in/out 475918271/71 bytes for SCSI command 0xb7-- guessing data in; [ 1190.853725][T20269] program syz-executor.4 not setting count and/or reply_len properly 15:14:39 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0xc0045878, &(0x7f0000000140)) 15:14:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x260881, 0x0) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f00000000c0)=0x9) 15:14:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) r1 = getpid() fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0xffffffffffffffff, 0x40, r1, 0x0, r2, 0x0, 0x2, 0xeb9}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000004003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xf3\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:39 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0xc0189436, &(0x7f0000000140)) 15:14:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/147}, {&(0x7f0000000280)=""/58, 0x80}, {&(0x7f00000002c0)=""/89, 0x16b}, {&(0x7f0000000340)=""/175, 0x4d}, {&(0x7f0000000580)=""/211}], 0x2ad) 15:14:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000005003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000100)="6bd13477e923bf804eefe95eded0b30ae28efe1e618dd5e6bc934eb093ca3723776ab4c518145e44d30d8cc1c079ed64884e35fe30a99359a59997b79218f0f4a612c1bd92a816029fd5c1b12ffe2ea806149c8bae900041aa3cc2f74ddbfd176d81df0dd33bbb508c540e0010151160464a26cacecd3af5872cbe4e3c9e", 0x7e) 15:14:39 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0xc020660b, &(0x7f0000000140)) 15:14:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000002680)={0x2, 0x0, 0x2080, {0x4, 0x100000}, [], "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", "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"}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000100), &(0x7f00000000c0)=0xfffffffffffffee5) socket$netlink(0x10, 0x3, 0x16) r3 = syz_open_dev$dri(&(0x7f00000021c0)='/dev/dri/card#\x00', 0x1, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002280)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000002440)={0x0}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000180)={r6, 0x3, &(0x7f0000002480)=[0x73, 0x9, 0x4], &(0x7f00000024c0)=[0x1, 0xfffffffffffffe33, 0x9, 0x0], 0x10, 0x8, 0x2, &(0x7f0000002500)=[0x4, 0x0, 0x3, 0x4, 0x81, 0x3, 0x8, 0x5], &(0x7f0000002540)=[0x3, 0x81, 0x3ff, 0x4, 0x241, 0x1]}) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x220500000001, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r5, 0x1) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r5, &(0x7f0000000000)='[', 0x1, 0x4000, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000340)={{0x3, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$inet6(r5, &(0x7f0000000140)="85", 0x1, 0x4000, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000200)="fe", 0x1, 0x4000, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000022c0)={0x5, 0x6}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002300)={0x0, 0x0}, &(0x7f0000002340)=0xc) mount$overlay(0x0, &(0x7f0000002200)='./file0\x00', &(0x7f0000002240)='overlay\x00', 0x1000010, &(0x7f00000025c0)=ANY=[@ANYBLOB="6d657461636f70793d6f6e2c75707065726469723d2e2f66696c65302c6d657461636f70473d6f66662c6d657461636f70793d6f66662c69886465783d6f66662c78696e6f3d6f6e2c696e6465783d6f6e2c6e66735f6578706f72743d6f6e2c6e66735f6578706f7235e54746b5f7defdb5f47d0aeb43743d6f66662c78696e6f3d6f66662c686173682c7569643c", @ANYRESDEC=r7, @ANYBLOB=',obj_user=/dev/snapshot\x00,\x00']) 15:14:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000008003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:39 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:40 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x4000}) 15:14:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000009003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xf4\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:40 executing program 5: pipe(&(0x7f0000000100)) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:40 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x400000}) 15:14:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2d8, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff71}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd780000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe51a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff34e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x154, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffe00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @empty, 0xfffffffffffff557}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffffffff984d5b55, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3d}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @local, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x401, @remote, 0x100000000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x40}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x759a}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x40000000, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) pipe2(&(0x7f0000000180), 0x80800) r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x1000, 0xc0084) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000040)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @default, @netrom={'nr', 0x0}, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) rt_sigqueueinfo(r3, 0xe, &(0x7f00000000c0)={0x2a, 0xb7bb, 0x7f8}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x4}) 15:14:40 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x8000a0}) 15:14:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02000000000d003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:40 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xf5\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000010003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:40 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0xa0008000}) 15:14:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0x2, 0x8000) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x4, 0x10}, &(0x7f0000000380)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000003c0)={r2, 0x6}, 0x8) syz_emit_ethernet(0x106, &(0x7f0000000100)={@remote, @remote, [], {@llc={0x4, {@llc={0xe, 0xfe, 'h', "51780af1f10782311774dd38f30966480311028509f8634182ed26a8abf6369f1f0d3decebc35b17e43a9e0ef594da6914c50ef58cbbbc038b0e80c61d9b55f21481099cf6504ff762e1eff70dbeae97213407ecacbe067b127ee4eed612f836b9911a60d4f72380495a47fddcc39fd069057863705df0871c23a999f116c6952d8a8bf29752e085b3ec76bda822116c085867122138c2154fc9267d061177f6244d7aafc720f9f252737faeaecc165402288ec360dfdefefa1d4fd4334449e914b225b2ee49b19a597ea5ca4823a1658e1551f60a16454d66ff0fbfbe870965633859c1b3b2df509a1a9e4517b3b7041bacb1591c"}}}}}, &(0x7f0000000000)={0x1, 0x2, [0x5d7, 0xf85, 0x711, 0x75f]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x67c, 0xfffffffffffffffd}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000500)={0x2, 0x0, [], {0x0, @reserved}}) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x3, 0x800, 0x0, 0x6a, 0x0, 0x20, 0x104, 0x4, 0x4, 0xffff, 0x6, 0x80000000, 0x5, 0x3, 0x6508800000000000, 0x7, 0x8, 0x72a2, 0x8001, 0x9, 0x5d, 0x790, 0x80000001, 0xc6, 0xffffffffffffff7e, 0x6, 0xfffffffffffff065, 0x9, 0xf3bf, 0x4, 0x8, 0xffffffff00000001, 0x0, 0x8c24, 0x5, 0xd3, 0x0, 0x1, 0x6, @perf_bp={&(0x7f0000000040), 0x7}, 0x200, 0x4, 0x9, 0x1, 0x800, 0x40, 0x8}, r3, 0xf, 0xffffffffffffffff, 0x2) 15:14:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000029003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x1cf, 0x101, 0x1, 0x20a, 0x1c0, 0xa4, 0x2f5, 0x2}, "33c029f7733b9bfdf8304af7ddf660bb66619012c77c3b993c0fb3", [[], [], [], []]}, 0x43b) 15:14:40 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x40000000000000}) 15:14:40 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x20001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$packet(r0, &(0x7f0000000180)={0x11, 0xf5, r1, 0x1, 0x7a9, 0x6, @random="6b6ff1af6f39"}, 0x14) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r2, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x100000000, 0x98, 0xffffffff, 0x4, 0x9}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e22, @multicast1}}, [0x367, 0xe44, 0x10000, 0xfff00000000, 0xfffffffffffffc01, 0x6, 0x3, 0x6236, 0x8, 0x7, 0x1ff, 0xd9, 0x5, 0x2, 0x7fff]}, &(0x7f00000003c0)=0x100) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000000)=0xe324) readv(r2, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000030003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:41 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x8000a0ffffffff}) 15:14:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xf6\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0xffffffffffffffff, 0x891bfe54cef73edd) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) accept4$x25(r0, &(0x7f0000000180)={0x9, @remote}, &(0x7f0000000580)=0x12, 0x800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, r2, 0x0, 0xf, &(0x7f00000002c0)=']${systemwlan1\x00'}, 0x30) sched_setattr(r3, &(0x7f0000000340)={0x30, 0x0, 0x1, 0x80, 0x3b29, 0x37, 0x4, 0x800}, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000240)=0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000480)={'syz1', "e49f637f3b2d3863f70911208bd288cb4a5127f3eba93bb7308c3e4e27902579211cb3ce8d7055dd1b8606d0648609ad5db92d137c129b0aadde13aaba28cee8b90737d2b5a2600fd35dbb24108b2d44e606465725d695318deef47834a484bc352b31a329a4bc21ce68aa38d910ff9af2fa0d99b392d5ac7edcc1420c173257970309eb5aeb40fa3759d5d1ac387b00d2898b29d5fd94aa9dfc96e142d209cd3a071f45f7e5188d2e5f6ed20132f020a82f21dc46f32b1c3f27bad857258c42d31a704be54c9d58f781c2dac88b"}, 0xd2) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400041, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYBLOB="d17e2bfcadbd1cf281856600e7dbac14c54962cadb2e0a0000000000000000007483374651dfb4f36d1fd9a8d89076f09465635b8e65e84a1f6c38d3d46edf3f17300c7c80d58af66c061ad9a51ada514dbfeec0f55b0167a5d29f8edb26dc5088d5f06376fb9cbdb2fb51e8c99f1ee2f6f31ba951113db9a90ebca8ada437bb770d32244db879dcc9f823646fb3bae6215de50a13ce935a87944da149faf291688f68e6bec56adc2ff3a6d84af8fedf74bab21126e2235ad0cc9ed5b6612e866a0d3e"], 0xa) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x8000000004, 0x401, 0x8, 0x3, 0x201}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000140)=0x200, 0x4) 15:14:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000040003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:41 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @window={0x3, 0x1, 0x48db}, @window={0x3, 0x6, 0x8a}], 0x3) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 15:14:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x6, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:41 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffa0008000}) 15:14:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x280200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000000c0)={{0xfffffffffffffff7, 0x100000000}, 0x0, 0x3, 0x7, {0x1, 0x4}, 0xde, 0xffffffffffffffc0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000051003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x200, 0x7f}) 15:14:41 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x4000}) 15:14:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xf7\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d0200008000a0003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:41 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x4a, 0x8000) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000200), &(0x7f0000000240)=0x4) write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:41 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x400000}) 15:14:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x60) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x202) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x2}) 15:14:41 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x8000a0}) 15:14:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000cfa003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:41 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) recvfrom$x25(r0, &(0x7f00000000c0)=""/6, 0x6, 0x10000, &(0x7f0000000100)={0x9, @remote={[], 0x2}}, 0x12) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0xcd30) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendto$ax25(r0, &(0x7f0000000280)="14d4851048e998acb88652114cffb3e5bf9828b92f6429d687ca5c4cf0a425254f8a7c490390890f2f1aa107c36b0ba019ae5080fd54028b3931b6c9837ccea6b6647c031305ce299a3c6d57c3beb0ff22991e65f64654a920", 0x59, 0x40805, &(0x7f0000000300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200110}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010829bd7000fddbff25f2ffffff"], 0x14}}, 0x4040000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xf8\xe2\x03\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) fcntl$dupfd(r0, 0x0, r0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xfffffffffffffff9, 0x42000) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:41 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xa0008000}) 15:14:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d0200fffffffb003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x2f, @multicast2, 0x4e22, 0x4, 'lblc\x00', 0x31, 0x5, 0xb}, {@broadcast, 0x4e20, 0x4, 0x452, 0x7fffffff, 0x9}}, 0x44) sendfile(r2, r1, &(0x7f0000000140), 0x8001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x1ff}) 15:14:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x6, 0x20000) accept4$ax25(r1, 0x0, &(0x7f0000000180), 0x80000) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000140)={0x1, [0xff]}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 15:14:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d0200fbffffff003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:41 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x40000000000000}) 15:14:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xa0\x00\x80\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000030000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:41 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x8000a0ffffffff}) 15:14:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xffffffffffff0000, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x80000000}, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1, 0xfffffffffffffffd}) 15:14:42 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xffffffffa0008000}) 15:14:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 15:14:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000040000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x01\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000050000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:42 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 15:14:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffff651, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x400000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x3}) 15:14:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000080000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x309, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:42 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x400000}) 15:14:42 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000001c0)=""/139) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x400, 0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000090000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000002b00)='/dev/vcs#\x00', 0x73, 0x2000) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000002b40), &(0x7f0000002b80)=0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x02\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:42 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8000a0}) 15:14:42 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) write$P9_RREAD(r0, &(0x7f00000000c0)={0x88, 0x75, 0x2, {0x7d, "26ad5feb2bf2118d0c0a68733d3a9a7ded4103fb3ad84a787ada631ad4183d52a26473c5c664867bc563f5b7c9a3a039436b0cf72807c359695088167e07626b71a1bb72894aa4e16a0fc2baf40792a7bd77f28038b176bbc8553d7f6b1dbb8067d5ef6e688c789c7853ac355554b325cd9cc381e1068f0efe6ecb32ad"}}, 0x88) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000180)=""/76) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/230, 0xe6}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f0000000700)=""/152, 0x98}, {&(0x7f00000007c0)=""/110, 0x6e}, {&(0x7f0000000840)=""/80, 0x50}], 0x9, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000200)={0x3, 0xb0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d0200000d0000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:43 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000b40)='/dev/dsp#\x00', 0x200, 0x40200) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {0x401, 0xffff, 0xa7, 0x7}, 0x15, [0xfffffffffffffffe, 0x2, 0xff, 0x80, 0x2, 0x0, 0x1, 0x8, 0x5, 0x5, 0x40, 0x0, 0x9, 0x9, 0x81, 0x3, 0x400, 0x7fff, 0x3f, 0xa73, 0x81, 0x6, 0x8, 0x100000000, 0x9, 0x8, 0x10000, 0x1f, 0xfffffffffffffff9, 0x0, 0x800, 0x2, 0xfffffffeffffffff, 0x378, 0x1f, 0xfffffffffffffff9, 0x80000001, 0x7, 0x6, 0x0, 0x3, 0x400, 0x1ff, 0x5, 0x0, 0xffffffffffff7fff, 0x6, 0xfffffffffffffff7, 0xc74, 0x1, 0x9, 0x9, 0xc03f, 0x1, 0x100, 0x0, 0x8, 0x4, 0x6, 0x4, 0x1, 0x1, 0x7, 0x88b], [0xffff, 0x946, 0x9, 0x8001, 0x8000, 0x2, 0x9, 0x3, 0x2080, 0x8, 0x101, 0x5, 0x7f, 0x4, 0x7f, 0x6, 0xf11, 0x7fffffff, 0x0, 0x867, 0x20, 0x1, 0x401, 0x100, 0x8, 0x9, 0x8, 0x9, 0x4, 0x6, 0x1, 0x3bb28073, 0x5, 0x10001, 0xee, 0x101, 0x268, 0xffffffffffffffa5, 0x6, 0x100000001, 0x3, 0xbfd, 0x6ff5, 0x401, 0x1, 0x5, 0x3, 0x8, 0x0, 0x400, 0x2e24, 0x1, 0xfe, 0x5, 0x2, 0xfb, 0xfffffffffffffffc, 0x1, 0x80000000, 0x2, 0x100000001, 0x7, 0x2, 0x3000], [0xa8, 0x6, 0x7fffffff, 0x0, 0x2, 0x26, 0x401, 0x401, 0x9, 0x5, 0x9, 0x800, 0x6, 0x9, 0x5, 0x100, 0x2, 0x10001, 0x6, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x3, 0x2, 0x6, 0x0, 0x20, 0x101, 0x6, 0x0, 0x10000, 0x7fffffff, 0x40, 0x9, 0x8, 0xcaab, 0x1000, 0x6ff, 0x400, 0x387bc823, 0x3f, 0x3, 0x4, 0xba, 0xc000000000000000, 0x5, 0x6, 0x3, 0x6, 0x1, 0x6, 0xfff, 0x6, 0xca, 0x2, 0x7ff, 0xaf, 0xffffffffffffffe0, 0x7f, 0x48a, 0xfffffffffffffff9, 0x4f32, 0x7], [0x7, 0x1, 0xd375, 0x1ff, 0x740, 0x3f, 0x800, 0x3, 0x1, 0x3, 0x19, 0x4, 0x5, 0x1f, 0x0, 0x7, 0x0, 0x3, 0x3, 0x1000, 0xfffffffffffffff8, 0x4, 0x25a, 0x480000, 0x3, 0xffffffffffffd699, 0x4, 0x1, 0x1, 0x10000, 0x10000, 0x5, 0x4, 0x1, 0x0, 0x1, 0x7, 0x1, 0x9, 0x0, 0xaf2, 0x20, 0x40, 0x5, 0x7, 0x6, 0x1f, 0xa522, 0x5, 0x2, 0xffffffffffffffff, 0x9, 0x6, 0x10001, 0xff, 0x7, 0x40, 0x2, 0x1, 0x8, 0x3, 0x0, 0x24000000, 0x8001]}, 0x45c) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000ac0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0xfffffffffffffda7) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000180)=""/142, 0x8e}, {&(0x7f0000000240)=""/148, 0x94}, {&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000400)=""/215, 0xd7}], 0x5) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x2, 0x3}, 0x10) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000a40), &(0x7f0000000a80)=0xc) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x60}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000b00)={r3, 0x3, 0x29, "3eda7fc9a8004e3ce53c4778e95b306213884f512fbfb782df6f01aa9be9c66e2d2c8c6ab5427bfb75"}, 0x31) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:43 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xa0008000}) 15:14:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x03\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x3f, &(0x7f00000003c0)=""/174, &(0x7f0000000480)=0xae) ptrace$setregs(0xd, r1, 0x7, &(0x7f0000000280)="e557ce4ea4ef06dc90bed1ea758727b49eae0e2ac239ff1f20806c60071b75a5a29cbc96f1b7748fb7e4b9fa32606467110afc7e9ebb2565009f8bb69e81b056ede0c7248ac3854c390190a97e3913ec9355ce39ef27d108ccc9f2f827081fbd3d5e6155fa83a703e5fa7aac9a7bb3b4986971ff76ed45314f5b462460443e4726641ece4fbcaca453eb7e38e8f85dba3f5ee67febb21a94a940a733a081275581f867f6cb7a15b2bb3d97e51016a2139d99c998b4d54ec4b65d6e9e3b4abbbd803a62166e3eed0450b8bfb4785b24701d6311501e2e5455e192c7d1e44dd5") ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8001, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000001c0)={0x17, 0xf4, &(0x7f00000000c0)="cbc0cd950908111442e0ab462185b3ac415ec00c17c1077feebccfba8fd76f980b215e0b7da5d7979a338045a4211b1c083d1e344a7fc64ff806b6aa54478d26b1a3a32a4e83a428f334b5ae77aace6a5c863791d90418a092e7dae6ab6beb4722271d15057bce02c468406ddff7f351c9cf9e2aededba4b637cb06a2041074691aaa716877b84c9e4d4691a756605b846bd194574ff15f103767fd57e126d84ff6ae04fcf08995d078edeeb7192416c0073f8ea9509471fcee7c8012612fc4c086cb4e822877e996a292859c43d34cfdb2408b00f0af164039ed19337fd2aec41c8ebe5349d2c0da444a2f063658e71273ae50b"}) 15:14:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x800, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) fchown(r1, r2, r3) sendto$inet(r1, &(0x7f00000000c0)="1ebfdc17c70c0f6e03b6151898ccefeaf261cc4b2ee6b67511", 0x19, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000180)={0x37, &(0x7f0000000140)=""/55}) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000001c0)={0x3, 0x5}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000100000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:43 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x40000000000000}) 15:14:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000290000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:43 executing program 4: write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20000, 0x0) setrlimit(0x9, &(0x7f0000000180)={0x1, 0x3}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x254, r2, 0x402, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x48, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x58}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000580)={'nr0\x00', 0xfffffffffffffff8}) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x1, {0x7fffffff}}, 0x18) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0xffffffffffffffbe}], 0x1) signalfd(r0, &(0x7f0000000540)={0x100000000}, 0x8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) 15:14:43 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8000a0ffffffff}) 15:14:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x80000000, 0x5}) 15:14:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0xe8b5, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000200)=0x4) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0xfffffffffffffffd) pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="fd59497e5962ec4baf65ba91288e17ce4ee183777e4f46b1984572a422aeae5c2d92d49a8e1aacd6ca03edc02ef216da51b12f50f78999ac88fe78b7c95fbc6cd39f5a3f9d197abf51bc96cfbcd688a549f6b394295611f178a8d165f9c907491cd260d49787a12caf92c7c816c6957859f0caba26901b8ddf0c6c6e77a8157cfc46491877247e04c40809f4dc6d38f485a28f9a27330dd9bf7c52024e2be2799ee9c2b7e82422d92ade61ddb6db7c57c41d43455958119c50f7bb593c6684273897ef19257f6d2e37234e1617eae6b2626710df447de2682b0c9cfa82f24270ba838247aa601361d007", 0xea}, {&(0x7f00000001c0)="c479b5d95eb78f72dec68e7c26196189ac5814801dc7aa27581de07d29591d868e4f6e9bd3213ceafab59a4d3b2de4b09a56a06f5e20feef4958e812002557fcf0fd524c346f65586005215ef2b88c6f3c1dd81351d14fd163e9a0c8fea31b5386f6ae24472f1124", 0x68}, {&(0x7f0000000240)="20b523a8d9b95526616f5bb333b50caf7228febf45c0ed910ca21e9ad528301f66c37f5b1de4ff859f2bf8978418894296fec9aaccd9fe0f00a34a2f13f2d0187f77bda15e4d6cafe1cad3dff66d576e1dfdc478666cf931354a8e16a2665c0ad28798a03b9d5b6809dfb2ec85008cb21e774c3d52a45d50a14e4aab56bc647d44d937ecb0e0829a88b12bc73db31b1eb3e6c91c35e508b0aea887d20069158cbcf57759bc791597e42db49921", 0xad}, {&(0x7f0000000300)="dc526316066115e76a3c3bb8396a1eaeed273fd00b4f5bad375b49b65550ffb039fbb5b272383252a51d9e58e9f75521f09c8dc5c801ba511877a3af5a53a52e10d33a9bf89d889d73b0d5e5cac17ead6b735df785b771f3086dc5887410a2c313da474c36f188a307e5e6da037a66a4f5e5cd206ef41d1b24e13cadb581fffb225383ae4e34bf5136cf7bf0211dc512400fb593098946d1af5ae3e7488eb222d416477978e6f3b6a6955f", 0xab}], 0x4, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4}) 15:14:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x04\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:43 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffa0008000}) 15:14:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000300000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = accept4(0xffffffffffffff9c, &(0x7f00000000c0)=@isdn, &(0x7f0000000040)=0x80, 0x80000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, r2, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xefd4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) 15:14:43 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) fsync(r0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x20000) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x20000000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000510000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:43 executing program 4: write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x1}) 15:14:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x05\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x40000000203, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:43 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x4000000400000, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) r1 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x2, 0x10000) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x64e9) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff, 0xff, 0x0, 0x17, 0x12, 0x4, "4f9346950dbaa35deddae0f2ea6b0cd3a3071e4d530bbd8d10e32a091aff386a19de6c083e5d3bd2d8f8be2033ce0c5525024993b242b7d2f815afa97e2ffec2", "f54ecd63facf1df56d936656b5e0526c1ef007e2246a8834b29de47821fde01a7ab4a0ed40a043ef2c62c697b6d210f842c151b9a9d85f7e4e84414993f12887", "2d16c702be0ecb90a1dab86714f80e7ee6f476efd5fe44d9db299cc905ad1c9c", [0xffffffffffffffff, 0x1]}) r3 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x9, 0x80001) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000280)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000340)={0x4}) 15:14:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000300003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:43 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'ip6gre0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)) 15:14:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1}) 15:14:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000080)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000500003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/25) 15:14:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x06\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:43 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x2000, 0xfffffffffffff000}) 15:14:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000900003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000200)={0x3, 0x3}) rt_sigaction(0x2c, &(0x7f0000000100)={&(0x7f0000000040)="c402e1dfb806000000f0216539f3a4c4c178171512000000c462c3f5e545de4995660f3a1410bbc4a3fd00c1006583e26742da7595", {0x8}, 0x80000005, &(0x7f00000000c0)="66400fd8190fea9703000000c441edf652840fbbe1660f62adb8f01b810f01dac4814d660427c4e17e6f1766430f3a20eb2fab"}, 0x0, 0x8, &(0x7f0000000140)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) accept4$alg(r1, 0x0, 0x0, 0xdc41dd3451c719e) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) write$P9_RATTACH(r2, &(0x7f0000000240)={0x14, 0x69, 0x1, {0xc, 0x3, 0x6}}, 0x14) 15:14:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x44143370, @mcast1, 0x81}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}], 0x2c) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:44 executing program 0: r0 = socket(0x2, 0x803, 0x800) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000005c0)=0x6, &(0x7f0000000600)=0x2) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x168, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffff0000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3c8}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0xcc, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd8b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x101, @ipv4={[], [], @remote}, 0xfffffffffffffffc}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x800}, 0x20000840) getgroups(0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xee01]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r1, r2, r4}, 0xc) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000540)={'ipvs\x00'}, &(0x7f0000000580)=0x1e) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000140)) r6 = fcntl$dupfd(r5, 0x0, r0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000280)={0x200, 0xfffffffffffff000, 0x4, 0x100000001, 0x18, 0x1, 0x6, 0x20, 0x101, 0x0, 0x6, 0x200}) 15:14:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x4, 0x9, &(0x7f00000000c0)="7f8378ece90ed1b929"}) gettid() ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000fa0c00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\a\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) shmget$private(0x0, 0x5000, 0x4, &(0x7f0000ffb000/0x5000)=nil) 15:14:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)={0x0, 0x2}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x7, 0x7, 0x6}) r1 = dup3(r0, 0xffffffffffffff9c, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x20, 0x8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000280)=@bpq0='bpq0\x00', 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000300)={0x6, 0x7, 0x3, "67beb7750972813df6015d9b0165fff0d2dcfdac684d1af5f8b2fc1d7a0c3ad1", 0x7f7f5f5f}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180), 0x4) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f00000000c0)=0x3) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000340)={{0x0, 0x1, 0x2, 0x3, 0x5}, 0xfffffffffffffff8, 0xffff, 0x6}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000d00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:44 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x20000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x101, @empty, 0x7}}, 0x7, 0x1000, 0xe15, 0x9de, 0x66}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="fffb09000004ff7ff8ffffff0300a600d100ff000001"], &(0x7f0000000100)=0x1a) 15:14:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x20, 0x101000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x2, @rand_addr="d0e6774dc9854e53cb43a152b88d855b", 0x6b0b}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x0, @local, 0x5}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x1ea2, @ipv4={[], [], @remote}, 0x401}], 0x84) r2 = getgid() fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setresgid(r2, r3, r4) 15:14:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000002000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, {0x6, 0x7b16e62a, 0x11b1, 0x6c3e, 0x0, 0x1f}, 0xfffffffffffff311, 0x9}, 0xe) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) accept4$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) recvfrom$packet(r1, &(0x7f00000000c0)=""/17, 0x11, 0x2, &(0x7f0000000200)={0x11, 0x9, r2, 0x1, 0x9, 0x6, @local}, 0x14) 15:14:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x3, 0x3}) 15:14:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\b\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:44 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x10000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x101}, 0x8) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3}) 15:14:44 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x43) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) epoll_create1(0x80000) 15:14:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000002900003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:44 executing program 3: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4040, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000000c0)={0xe, 0x4, 0x6, 0xfffffffffffff946, 0xa6, "a29e1337baac97bae1ed97e5d806b45e79e83bca26a0a67f0c28694783606d30e808d0c2cad53dde67ebbf29437cc4bade752ad1afcd8fed90526185e697b969818eea0bc3d0208e6c172b82a3b3733d1de101a971918cc7f4914789e40599b6ea8bdea01aaab7602e46b5afae255b94a3a89699f9422a075e29363d744dcf05e8e906c044399abb1408f0361eaaa24095c5bf6f00f21ae548e59aefbafc11715b069cf2a965"}, 0xb2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x1}) 15:14:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x4d9e) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) 15:14:44 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000003000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:44 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x20ac00, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000280)={r1, 0x20}) r2 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3}) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000002c0)=""/95) syslog(0x9, &(0x7f0000000240), 0x0) write(r2, &(0x7f00000000c0)="db58b796facbb55de2e300d59867e02966cfda5c7292aa498fcca88e9a16f95ca9d674b5cc85a04b189a3267c58faf2fcec86282292fb2d9f92d363167ed73ba04b64a3c2dd4fda8154c1f7d20f23f97f9d904ecbc53e04b6dafed36476209d2ae48e3923b7d830b60d4302f456d4f49d817b6c8ef616737bfcf3b2d8d0e6583e97a2718e0af124e89b55df5e5bfee1fc11c0fc03aa56a5b9f7cc74b495a0ce79072160996f81715eb7a952cc426eeb296b79994d128c61f8b768f452ded23ffd33e5d057e54bfbd3895f773332dc8938b755ab1498df329a2a3067d31d4d017d7b5f18cb89ddf5b2f2d22f25af1b90e26", 0xf1) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default}) 15:14:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x1f\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x22, 0x80000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x20000000000, 0xeb8}, &(0x7f0000000180)=0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:44 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x2a4, @ipv4={[], [], @local}, 0x3}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x3, 0xa, 0x200, 0x6, r2}, 0x10) 15:14:44 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x80) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000680)=ANY=[@ANYBLOB="0000c599d6455e4b938f2a189f9ff81ffc8db0fc9300001345c0f27512ee757f09dc238052759650b469eb3283b43501800000e128772961aca1c93ae297296d5286520000003a4c0e8dc078000000000000005ae30000000000"]) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r1, 0x0, r1) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002040)={0x53, 0xfffffffffffffffc, 0x5a, 0x6, @scatter={0x9, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000840)=""/208, 0xd0}, {&(0x7f0000000940)=""/85, 0x55}, {&(0x7f00000009c0)=""/133, 0x85}, {&(0x7f0000000a80)=""/118, 0x76}, {&(0x7f0000000b00)=""/196, 0xc4}, {&(0x7f0000000c00)=""/211, 0xd3}, {&(0x7f0000000d00)=""/32, 0x20}, {&(0x7f0000000d40)=""/140, 0x8c}, {&(0x7f0000000e00)=""/4096, 0x1000}]}, &(0x7f0000001ec0)="6c0d8b8d78d993134217193a4b0445267270946ad3c60d5bd55bb49803b3bdf1f695afd7c570bbb71d850e13d56ca11ecc460b812920a61b3d4a38662670f38dcac015f945b75e24535f0c34cb71f63428db856dc715f440d1c6", &(0x7f0000001f40)=""/160, 0x9, 0x10016, 0x0, &(0x7f0000002000)}) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="107b09c822d93a", 0x7}, {&(0x7f0000000180)="d2e8eda57c52827210ee163b04bcf350e126d9eb5c037cdb1ac08a83a6092e303e763ae0dd8799d6e7e0c23bbf9986ad0432daa3fe34a233852d63c4ac80134f9cd35bd81b0441a22528433d2bb744703f3d26550e03678c3b2edfbaebd39a1a232672905c5c8830fea44cb00b513d9063eb4865a317f4b59f5354d31ada5116f932c7b197bc80e1fb90f909a9423a2d956efc6942ef5e91abcb12d3feeaeaea2840d43fcc17e28210806ccfcb7d2438c7cba0c98e223d419666d8cc1c90cd6fcfc084339ff249f0f31c258f45c05c2d930dedb7ce7328472fe090a4d9ccd74082385ac3c7d97c", 0xe7}, {&(0x7f0000000280)="2acfdd63546f936890cdc7af5474e2a4ebb4fada96689e860aec64661000cb29e8bfb13deb121fde8bae6deca0ab1dbb2aebd3ab60ffe1361aa1a496e28ee12323d02c63faa3eb8b92386a1ed1561a1d4880f334a2f82f4229db009935083276003fc159e8606991cb0ed4397e4ddcf74eb7a574a37f72c174b16e24190bea71883d203457bc311b7167f56550bb82b76a36e98b2473e433adc291d0410ffe00cc1f590ad56239402661a6", 0xab}, {&(0x7f00000000c0)}, {&(0x7f0000000340)="f4f086ea80260ebda657c235e00d92325bfa57d7eea28c1fe76714d7f0cd9b4a9ff306f9e06ec916aa7f0095aca5c5a5327427e132e3b6b61120b00f1f7bc4197a4da604a8b0598b31cca557ae524185d51874e559983dac010b84746e7fb73afd63c8fffa0f1eba6e732b5fe6b6119cb4c8da143abea2a81d9322f8c6f492f15ea245b2d34643f95cbf869bd84e06bf9039310bb70efeb48ff62953450a0c6de17172c3efef348cfad23b8f046ca97e38b938521a237932d6e210143fd0554f3b380d41ba495637486057ab8f3cf232537398c585a64bacd1b4ea0033cb74f52e464e6596336bfc4eef8e3c379b44f329cf703928", 0xf5}, {&(0x7f0000000440)="acf73303c63d61c4799f6c59713694194165e7c440319bd021ac35f729bd4d64cca9be4f700eec4c1e2f9572fb15151c7c43f045d6951a4c55f030965dcbb62eb9c273b635fff998c00cc63eda64ab684ecda0920baf74cec3bd88d39916adc3cd212b370279641483bf035e0e9a6c7c7818ee0785eeeb87057a8700c7c6b0e74990b16df64c8edeb945964ae4fb42d54710dd12ece31922361fff7345e134fbc7cfe7cecab9deaa995c11718ef069c17c68735aa8f035dc4b45c5e25757800253a927af71a8585e78134fa0f0a02e65973df311df69", 0xd6}, {&(0x7f0000000540)='x', 0x1}], 0x7) prctl$PR_SET_SECUREBITS(0x1c, 0x15) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r0, 0x10, &(0x7f0000000600)={&(0x7f0000000700)=""/223, 0xdf, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=r2, 0x4) 15:14:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000004000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) [ 1196.115121][ C1] sd 0:0:1:0: [sg0] tag#435 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1196.124594][ C1] sd 0:0:1:0: [sg0] tag#435 CDB: opcode=0x6c (reserved) [ 1196.131610][ C1] sd 0:0:1:0: [sg0] tag#435 CDB[00]: 6c 0d 8b 8d 78 d9 93 13 42 17 19 3a 4b 04 45 26 [ 1196.141128][ C1] sd 0:0:1:0: [sg0] tag#435 CDB[10]: 72 70 94 6a d3 c6 0d 5b d5 5b b4 98 03 b3 bd f1 [ 1196.150645][ C1] sd 0:0:1:0: [sg0] tag#435 CDB[20]: f6 95 af d7 c5 70 bb b7 1d 85 0e 13 d5 6c a1 1e [ 1196.160158][ C1] sd 0:0:1:0: [sg0] tag#435 CDB[30]: cc 46 0b 81 29 20 a6 1b 3d 4a 38 66 26 70 f3 8d [ 1196.169669][ C1] sd 0:0:1:0: [sg0] tag#435 CDB[40]: ca c0 15 f9 45 b7 5e 24 53 5f 0c 34 cb 71 f6 34 [ 1196.179181][ C1] sd 0:0:1:0: [sg0] tag#435 CDB[50]: 28 db 85 6d c7 15 f4 40 d1 c6 15:14:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @random="edc5d99063e7"}, 0x10) 15:14:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0xbc, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @remote}, &(0x7f0000000100)=0xc) 15:14:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000005100003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00 \x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="f7b63db85e1e8d02000000009137b6ba70d99aa05a00acf99a2129d16988930e932f00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a613b87f3a4290f841fc273c66c510576481583bb0861d0c5e630adc7140c87a25c5b7e26ecffa8987c1065ecb856d563ccb9cb10167c78ac87618702699d516d6da95e4c2fcec0a12dba4934e370f83ad6c6a08ef1fdb274dbec1fde800547efbed77270d19aa501911ca1ea6a4b36d34d85f4fa57b18d083f4bb27a", 0xc3) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe322) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:45 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x30080, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xffffffff, 0x0, 0x10002, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r2, 0x4}) 15:14:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000fa0c00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d0200000cfa00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x0, 0x80000000}) [ 1196.451615][T29090] sg_write: data in/out 42802746/149 bytes for SCSI command 0x3e-- guessing data in; [ 1196.451615][T29090] program syz-executor.4 not setting count and/or reply_len properly 15:14:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x0f#\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:45 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xa0008000}) 15:14:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000020003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:45 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) bind$x25(r1, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) 15:14:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x2, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:45 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xa0008000}) 15:14:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x2}}, 0x12) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000a00080003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:45 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x101, 0xe040) ioctl$RTC_PIE_OFF(r1, 0x7006) 15:14:45 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xa0008000}) 15:14:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x1c4) 15:14:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000013ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00H\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:45 executing program 5: ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xa0008000}) 15:14:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfffc, 0x0) getsockopt$inet_int(r1, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000140), &(0x7f0000000180)=0x4) 15:14:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000033ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:45 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) recvmmsg(0xffffffffffffff9c, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x3, &(0x7f0000003180)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004180)=""/223, 0xdf}, {&(0x7f0000004280)=""/183, 0xb7}, {&(0x7f0000004340)=""/253, 0xfd}, {&(0x7f0000004440)=""/231, 0xe7}, {&(0x7f0000004540)=""/216, 0xd8}, {&(0x7f0000004640)=""/69, 0x45}, {&(0x7f0000000100)=""/47, 0x2f}], 0x7}, 0x7}, {{&(0x7f0000004740)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000004c80)=[{&(0x7f00000047c0)=""/144, 0x90}, {&(0x7f0000004880)=""/71, 0x47}, {&(0x7f0000004900)=""/209, 0xd1}, {&(0x7f0000004a00)=""/194, 0xc2}, {&(0x7f0000004b00)=""/80, 0x50}, {&(0x7f0000004b80)}, {&(0x7f0000004bc0)=""/136, 0x88}], 0x7}, 0x3}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004d00)=""/217, 0xd9}, {&(0x7f0000004e00)=""/142, 0x8e}, {&(0x7f0000004ec0)=""/211, 0xd3}, {&(0x7f0000004fc0)=""/50, 0x32}, {&(0x7f0000005000)=""/8, 0x8}, {&(0x7f0000005040)=""/2, 0x2}], 0x6, &(0x7f0000005100)=""/147, 0x93}, 0x5}, {{&(0x7f00000051c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000005740)=[{&(0x7f0000005240)=""/139, 0x8b}, {&(0x7f0000005300)=""/134, 0x86}, {&(0x7f00000053c0)=""/101, 0x65}, {&(0x7f0000005440)=""/139, 0x8b}, {&(0x7f0000005500)=""/250, 0xfa}, {&(0x7f0000005600)=""/57, 0x39}, {&(0x7f0000005640)=""/160, 0xa0}, {&(0x7f0000005700)=""/58, 0x3a}], 0x8, &(0x7f00000057c0)=""/4096, 0x1000}, 0x955}, {{&(0x7f00000067c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000068c0)=[{&(0x7f0000006840)=""/118, 0x76}], 0x1, &(0x7f0000006900)=""/4096, 0x1000}, 0xfffffffffffffff8}, {{&(0x7f0000007900)=@nl, 0x80, &(0x7f00000079c0)=[{&(0x7f0000007980)=""/41, 0x29}], 0x1}, 0x6}, {{&(0x7f0000007a00)=@un=@abs, 0x80, &(0x7f0000008e80)=[{&(0x7f0000007a80)=""/4096, 0x1000}, {&(0x7f0000008a80)=""/148, 0x94}, {&(0x7f0000008b40)=""/150, 0x96}, {&(0x7f0000008c00)=""/166, 0xa6}, {&(0x7f0000008cc0)=""/44, 0x2c}, {&(0x7f0000008d00)=""/207, 0xcf}, {&(0x7f0000008e00)=""/87, 0x57}], 0x7, &(0x7f0000008f00)=""/87, 0x57}, 0x7}], 0x8, 0x2123, &(0x7f0000009180)={0x0, 0x1c9c380}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000009200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000009300)={&(0x7f00000091c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000092c0)={&(0x7f0000009240)={0x68, r2, 0x9a8aeeeaaeb48c27, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x39a8, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:45 executing program 5: ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xa0008000}) 15:14:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x4}) 15:14:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000043ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00L\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:45 executing program 5: ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xa0008000}) 15:14:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0xffffffffffffffff, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000080)={0x1e, 0x5, 0xb, 0x5, 0x81}) 15:14:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4, 0x4}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x10103, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000000c0), 0x4) 15:14:45 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400000, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000040)="15b443001000004c96c351") r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) umount2(&(0x7f0000000080)='./file0\x00', 0x1) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)) 15:14:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000053ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:46 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xa0008000}) 15:14:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @multicast1}, {0x307, @local}, 0x8, {0x2, 0x303, @dev={0xac, 0x14, 0x14, 0x19}}, 'dummy0\x00'}) 15:14:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x5, 0x4, 0x4, &(0x7f0000ffd000/0x3000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00h\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000083ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:46 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x9, &(0x7f0000000400)=ANY=[@ANYBLOB="850000002f00000018000000030000000000000001000000850000004f000000950000000000000018000000090000000000000007000000181f0000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x6, 0xa3, &(0x7f0000000180)=""/163, 0x41f00, 0x1, [], r2, 0x7}, 0x48) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x3fe}) 15:14:46 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xa0008000}) 15:14:46 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xa0008000}) 15:14:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000000c0)={r1, 0x1}) 15:14:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000080), 0x0) 15:14:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000093ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:46 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x81) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x1fb3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x10a0002, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={r2, 0x1}) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040)=0xfff, 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000140)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) sendto(r0, &(0x7f0000000240)="52c793807916eee005c461a00c778346607d8401df9e14e938c8dc54af89e7e0e952544204ff1d98b4c44da7d3eba646497a55929e818b18e0e8ac1716c104864fdf0dc7459f59436620f59db5bd4eec8b74c504df7641f3629a9a30775667a374c1f0447534e4d0a55b1c3388ea8a92943e26d804ea8a18030648094c317671397e84a559827cd864831fa48f21263a72c39e1c9bb8ade089fa7ea2ddf89f21208d22945bbcdf5b6d5661c43fd35d", 0xaf, 0x80, &(0x7f0000000340)=@ll={0x11, 0x1d, r4, 0x1, 0x9}, 0x80) 15:14:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00l\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:46 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xa0008000}) 15:14:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d0200000000000d3ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:46 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r2, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c001) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) 15:14:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000103ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0x8ee, 0x7596}) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/62, 0x3e}], 0x10000000000000a8) 15:14:46 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xa0008000}) 15:14:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000293ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:46 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xa0008000}) 15:14:46 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x80000000, 0x40) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000001c0)) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x4}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) accept4$unix(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x80800) 15:14:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00t\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:46 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1f1, 0x80) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040), 0x4) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000303ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000180)=0xfffffffffffff483, &(0x7f00000001c0)=0x1) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000080)={0xb, 0x5bda, {0x0, 0x1ff, 0x7, {0x6, 0x4}, {0x1, 0x2}, @rumble}, {0x57, 0x2f, 0x4, {0x100000000, 0xffffffff}, {0x7, 0xffffffffffffffc0}, @cond=[{0x80000000, 0x8000, 0x4, 0x6, 0xfffffffffffffc01, 0x8001}, {0x7ff, 0x0, 0x4, 0x2, 0x3, 0x3}]}}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:46 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:14:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000403ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x1c4) 15:14:46 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x2000000000}) getresgid(&(0x7f0000000000)=0x0, 0x0, &(0x7f0000000040)) setfsgid(r2) 15:14:46 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x80) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x200001, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000200)={r2, 0x1}) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r1, 0x0, r1) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000513ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:46 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:14:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x1c4) 15:14:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00z\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000008000a03ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:47 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:14:47 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x60000) sendfile(r0, r0, &(0x7f0000000380), 0x3) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1bdee82e29932dfe}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x103, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r2, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r3 = fcntl$dupfd(r0, 0x4000, r2) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000000)=0xe324) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f00000003c0)="f992dfeb140d63ce452f716c6d9a15b3219045d31d9244aa7821b94701d9bcd73ddcb914eb4beb619846c866737903411271e871259a133759e1cb786b0ec55df365bcea1bac10e347f88483deb8cc4d057a7f98471c4f4166e1dc5fe360cf8c86a58c6d8f181715680b7b5e476bc0d3da55e220c7230f35c6ca5f13f37ab873782c05b6e0c08893111db29e158beab006d93775cfe45da5700a3122df54dcbb33f04697338dcf4241f87a3d47dc03b21ad5468746b366256bda") readv(r2, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-control\x00', 0x8000, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x500, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) 15:14:47 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x400040) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x1c4) 15:14:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02000000000cfa3ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:47 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000fffffffb3ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000080)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0xffffffffffffffff, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00`\x87\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:47 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:47 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x8, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x480, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00000001c0)=0x5) 15:14:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000fbffffff3ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:47 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000b40000004dd3eca7866b58b992f9715fbed1424d89871c0a983b7efc9525bc92bb914241a1e12a86ebd52ad2af1d60f512fa6a7e302b80f7f91036df5b75cfecc5409c1f2e572eaac9c00c1ff7b337edd3fa56870f529271956b957d6b0a0e56bd64193151023f6bbeb062e1156104a53a819113d4c73980b148a1c48d8148f751aae4143a61492c3016374a0596e5afabfb9fe352fc45ac5adebf8894fc43c098a6aaa0ecefff551c2279c49d9bf14a4a11beb157100f8e3b5848c5"], &(0x7f00000002c0)=0xd8) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000180)=0x1000) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000300003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x80\x00\xa0\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:47 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x60000) sendfile(r0, r0, &(0x7f0000000380), 0x3) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1bdee82e29932dfe}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x103, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r2, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r3 = fcntl$dupfd(r0, 0x4000, r2) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000000)=0xe324) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f00000003c0)="f992dfeb140d63ce452f716c6d9a15b3219045d31d9244aa7821b94701d9bcd73ddcb914eb4beb619846c866737903411271e871259a133759e1cb786b0ec55df365bcea1bac10e347f88483deb8cc4d057a7f98471c4f4166e1dc5fe360cf8c86a58c6d8f181715680b7b5e476bc0d3da55e220c7230f35c6ca5f13f37ab873782c05b6e0c08893111db29e158beab006d93775cfe45da5700a3122df54dcbb33f04697338dcf4241f87a3d47dc03b21ad5468746b366256bda") readv(r2, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-control\x00', 0x8000, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x500, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) 15:14:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000400003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) getresgid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000006c0)={0xffffffffffffffd9, 0xfb, 0x2, 0xffffffff, 0x16, 0xc9, 0x6, 0x0, 0x5, 0x3f}) getresgid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000600)=[0x0, 0xffffffffffffffff, 0xee00]) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x1, 0x2}, [{0x2, 0x2, r2}, {0x2, 0x0, r3}, {0x2, 0x4, r4}], {0x4, 0x7}, [{0x8, 0x1, r5}, {0x8, 0x2, r6}, {0x8, 0x4, r7}, {0x8, 0x2, r8}], {0x10, 0x1}, {0x20, 0x2}}, 0x5c, 0x2) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:48 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10083, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r2, 0x310, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02000000000cfa3ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000500003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xff\xff\xff\xe4\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="f108c9aa476ac7c993527ef9273f2535ea6b6f4a28832894b4ffdad94b7e46b7a56da207a34515d44d0f68952160008e0d", 0x31, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f00000001c0)='/dev/sg#\x00', &(0x7f0000000200)) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:48 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x8, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x480, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00000001c0)=0x5) 15:14:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000800003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:48 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e24, @multicast1}}) 15:14:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x8000010008002) io_setup(0x7, &(0x7f0000000080)=0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x10000, 0x0) r3 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x0, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x2000) io_submit(r1, 0x4, &(0x7f0000000580)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x100000001, r0, &(0x7f0000000180)="dbb315ba64d59c977bb416d5fb68c4c8150cc4e8bfe5d9ecbbbb90072663a564d4d67650f54a11b4008111226e19942c565f60a8ff7a230745c48bc9028b88b9145ac1ed52a3b4adf2f5672cb5cad59c9f7ac24d2b8f76537c5eff4652c961de0609e940abd50dc4b97e3c3ea3c448585aec62e43243822b0a55c8ead60d000000000000000000000000000000", 0x8d, 0x7, 0x0, 0x2, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000280)="6ae010716a7f427e4e44629f", 0xc, 0x81, 0x0, 0x2, r3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x5, r3, &(0x7f00000005c0)="0637310b5b89b15177db87c13eb8b7759b0590aaed0379a82aab820fcde95b9858316eed8a919c88fc674e46d6bd19", 0x2f, 0x2, 0x0, 0x1, r4}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x80, r0, &(0x7f0000000600)="c1f7a3351e84ef347e7c136634871342c45155d6161538b078947d5910a84e154ee706b184547bdb219696550725eacfeba2d37d2e102039df990f84b0afedc7b097d5e807a1de00ccdb621aa6b66f2595bd976dd23df0b0afadd6a45c1c3ef07f575e348b31052ffb157118064f00e2f682a3f44377eb108bbd91a6a0a789355092915a947ceecc010a2a0611854d3cba6848c923043ecfe0cdd01811f80bafbe4520bb3ee72b1dfc2f0997b2bb56464ef21495c3a042c643a8790285bef9b07f9bd3241c04d07002c7e773a223e5e62d14d381b8788203f60156858ec83b60d4b4025edfacf19289ae46", 0xeb, 0x0, 0x0, 0x0, r5}]) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000900003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:48 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x3, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000040)="7309b169dbca6fba7aeb2390361263499687615a9e298109c4c90397c43ce8ca449256558dcf31c1670ab98d7482c99a20ba9a654cdb3516f7e4e4", 0x3b) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={r0}) 15:14:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000d00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x03\xe8\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000001000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:48 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) 15:14:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) timerfd_create(0x9, 0x80000) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x8000010008002) io_setup(0x7, &(0x7f0000000080)=0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x10000, 0x0) r3 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x0, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x2000) io_submit(r1, 0x4, &(0x7f0000000580)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x100000001, r0, &(0x7f0000000180)="dbb315ba64d59c977bb416d5fb68c4c8150cc4e8bfe5d9ecbbbb90072663a564d4d67650f54a11b4008111226e19942c565f60a8ff7a230745c48bc9028b88b9145ac1ed52a3b4adf2f5672cb5cad59c9f7ac24d2b8f76537c5eff4652c961de0609e940abd50dc4b97e3c3ea3c448585aec62e43243822b0a55c8ead60d000000000000000000000000000000", 0x8d, 0x7, 0x0, 0x2, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000280)="6ae010716a7f427e4e44629f", 0xc, 0x81, 0x0, 0x2, r3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x5, r3, &(0x7f00000005c0)="0637310b5b89b15177db87c13eb8b7759b0590aaed0379a82aab820fcde95b9858316eed8a919c88fc674e46d6bd19", 0x2f, 0x2, 0x0, 0x1, r4}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x80, r0, &(0x7f0000000600)="c1f7a3351e84ef347e7c136634871342c45155d6161538b078947d5910a84e154ee706b184547bdb219696550725eacfeba2d37d2e102039df990f84b0afedc7b097d5e807a1de00ccdb621aa6b66f2595bd976dd23df0b0afadd6a45c1c3ef07f575e348b31052ffb157118064f00e2f682a3f44377eb108bbd91a6a0a789355092915a947ceecc010a2a0611854d3cba6848c923043ecfe0cdd01811f80bafbe4520bb3ee72b1dfc2f0997b2bb56464ef21495c3a042c643a8790285bef9b07f9bd3241c04d07002c7e773a223e5e62d14d381b8788203f60156858ec83b60d4b4025edfacf19289ae46", 0xeb, 0x0, 0x0, 0x0, r5}]) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000002900003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xea\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000180)="b63db85e1e00020000000000003ef0011dde606aed69d2bc7037f7cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x31) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/166, 0xffffff39}], 0x1) 15:14:49 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) r1 = openat$udambuf(0xffffffffffffff9c, 0xfffffffffffffffe, 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)) [ 1200.402139][ T2322] sg_write: data in/out 131066/1 bytes for SCSI command 0xff-- guessing data in; [ 1200.402139][ T2322] program syz-executor.4 not setting count and/or reply_len properly 15:14:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000003000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:49 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) 15:14:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000900003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0xfffffffffffffffc, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) ioperm(0xffff, 0x6, 0x2353bda8) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x2, @remote}}, 0x1e) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) 15:14:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000005100003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:49 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x2000000000}) getresgid(&(0x7f0000000000)=0x0, 0x0, &(0x7f0000000040)) setfsgid(r2) 15:14:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xeb\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000003003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:49 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x208200, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000280)=""/195) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000000c0)={@dev, 0x0}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', r1}) sendmmsg$alg(r0, &(0x7f0000002fc0)=[{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)}, {&(0x7f0000000380)="8d7b1d689dc8ae701f48b544bee45aff67d940985e4ad04bd32214d88a0fd32804a4631e1e819d4ac524dc20efa6140a453b82a40fe00a792049b0ec1e33148a1ac8ee67c0fbd0ea7576e5afa4304a2037502d964451dc35d20313be89b0ef6ea1aa5b10556c89b908c23440f32e24fe61d2f810f310c462f56722c8c9df28434deb30ef02b357ba0e1beae0b58f8c6572d0bac46041cff72485ec77c820ebf73f136d5a2bc8e3215097599855dd918153d265c4826551841b92670729f1e9f163cb93bc8db5ec90177a10490f06163fbdc56897cf21c933af8e47d4ae8cfbee9493332f", 0xe4}, {&(0x7f0000000480)="b73927a6bc8874c26eddb62937609b898aea9d0e04180ec0b6caca93ce3f6fc8d3f8811a665a829030dce1f9b54860b66b730d87a273b7f92668e7a1259c2c86cad6d921fb9d6c058a9f96ea0e2cbe60760c7bea3f873a6c4f6bf08537df82e9bce3fc131fa6991e371b50db52b15783324513a067b969f94eb7fc8d156189e3328a5fd3447ff1bba9fb162d24aa75", 0x8f}, {&(0x7f0000000200)="559e6a56eb13088b44623b558631a36c649dd3aeb2f60abbec0742b38bfd", 0x1e}, {&(0x7f0000000540)="5c3f2152f8239865e8dcefeb0cbad16ac6f15cfc14a7092e5e0d2984492bbf880b261f29d95638fed0699313b4604badfc172ddef30c5193441a6197ff13cc8a7cde868bff236af51c6a93cde8b93356e5778ae2bbd1836404d50d26b4a9e00068d674de915cd3b01f826d81c04d724269656f1e0303065781e36439705b498dfeb2030346256f7c9cdda7806d378cdfb95b3807f99e5d13bd607290228de6692d9f5f183af2783c8e0eb5594aafcf8587a1de0c04a22700f2d3c6a93d4e04ed81316b237eacb338b9791a5fc7a27afa575e4b13696127f894ec6031d4b6559f385d545319bf4d5f354ba648bfed47fb768e106bf659440de8721b600052ec1d51bc06c23c10d3aa54c73e84767219054801706b733073c5fc2c2dcb20dfbee52850a24c6ab652643fb479b23d52edf4c8fe5543283a28300ec47a5875aac76d75c5f7552141f8818247ceb9520e2fb76b316e13f171f325ba7cac62c40d3e20cead9775dafae4f0be309ef04805413999beb30560e52f3874a2e7be05dcdfd9499357580f67ce9a140e9850ca87d55ad70db8194304ebd8146cfe71b31cc6d3b468e733f68e319142fadb02475cb58c26b614228718a8a273eeaa3ee4354cdd8aa0af9fc3cf6cbacf32428e7c36d01f54dcb4fc535a8dacee01d9d0cb3bb0029ccb15443ad148c81d3119e6fbaa8f769ad6ca59ddb855386d610906becc69313bfdc97cbb6149c944c8f4051de34e003cf85525fa5861aefc051ec1b6bb85b96c016b69b92a2c01db5db510feab3f922aa7425df666cd7f89e92aa1d55ca88c5e1fea684bb37e8b6c644aabfbe20e65412377ed60dd2dffc436d2cb5b72a68bf78c8466368ad7db01a968b91d967805122ba9ac1de32943fde8b4e81c088d4c60b8e78c5c98e300a208b59c1e5189dbf177714a6560fa13b475a59863961252385d99b83caef90742a739e72be773ab4b3e4ba20479f236674f2190ac285c1d629a95a67f5ac9c824e06f6b8b5677b642f9beb3a2ca26ed9e336cb2eac6c3ced257dffa21c2d72a8a96814708571b6a5dd5d30fe398e4052890c23c74e214bc15f9ee054b56f5e34722bb54b68d52f1d31a0acd1ee2623c9c0b72315422d1d031a81bd4d1ad901a281765e66430b6dd18b715d4cbe122c1ed3b8f8ac6544a78ef7efa5b1d44c502ca3032e98e1c581e1a6f8be0c18fc166fd88c54bfee8ff5f2147e6b4fe338782c602ba493e7477ef8d67f8f796aa50d3082e758998dc7ba056b57814626f4868f8779af23b09fc564bb5fc0fc684c9f1c41c612b46e6befea1e8cd928b5de27d5a822ef8a6924d7d83a7708b2a30d3b484ef0afef569084259e2b4259de96ab16605406996ed62f6dc16a0f58bae933d6b0c9f75476b30c1499a51ce1b71643bfb3783363ac0209bdc8a7122ff0d9aec9688073564cf2bcfd34409c99d152927ff04920998296e3b732a1b751df4f868d2f161a089026bdc9183b9cd9d8b9c326edf9aee67244226ace5a46e2f5f597e1c02e83022143253a82dfc4fa613a93ff306218b3555cae54ebad7d813737c3364d437f0b6f74e931be3eb46420b59062ff28de22e4de83c57776de00c60e28488e5c37005c42ee4f0f9d0b221c3ab2b30bd3f7334d86ea64898136e7b2feed2522219704fe3965b76351e47c3451036560fc85c0d554b002219d62d6fb95da6b32d4e8a6a4d1e440a080da716010bd45deda827946d6f1b6d038ed109c72d679a1bee5c71233ac2aec3a3fc8e6eaf364621a8bdc6d1472138bae4b72e168418b0a1cfe7cd4c1359f87643aed0f914dd94cf70321dd87b760e1fe70d43904b917720953f32f547d1d608d09bd0e6bc1c49415decf601b8aed550365b97c4783b65db9184b52bf3147e8ce0c6300689e3149e49f0883d7f8f287b3ddfe78b18d2d0b542966d4a12e0de3cc0222e0957c4562028ed7e09e821ad26b10a28a447f512a123e105001d1ae4734b3f8d9d7b0a9bedcc27a0bba1469c05ce9b9344859966c04805c87f505e2443f331b34132b902840ca78da701b1ca0115e0d784ac0ebe1b5ac7440db46d4708ced460f63b24a86d778cfee23cacac03ffa45166d41303d3764103100ec5d0e518f041523026df340d29666d798578aad3698158607453a74cefa485cfe80a064c70151093df9bdf99767a1aca970069026ddea4ad99cc9ece669c261ad459c24484f7ad42b297b78a2b2c95eb23e876fd5b4a64242828e9b7a45727c20248271e51ccfbff7472e911cc45d6c7d09fefafdfd3caf21f6c1cd4aec0b40d53d43145daf411b218d762bfdbc0dc85860afab2de1726712ab6b7c0b2f0e9e57aa466f44e96c5d6b6d4ac908b064726caff89e17a9ee71c970c831eee3cd30f4a73985575af3d8478a0884b7d5b92649e18fb1b07a42f74968d3a75c29fdb3b1d94b64857eb308bdb004cfe89142d490ce5b5e9db34427bc3096cdd7c512cc62da67cb62167fd9205d14247ab1971b6565de35493202f248248f8a45d0cfcc8efbb96f296af928eb6841b045a44f085f202e033bc2972b7470ce96904c4995fd59f0e11186eea790a8675c562d30b4188d8e7944e4b2515dcce8514fb4f675799e78b738cc9f99a6b49d1a77e759e49fabc2ddf4d675114af1541d1de19582fbf46e29d7fd9e8a886efdd4ff1873b2b1b72bb3f896b40a229396ca2f2d007ae5b8eda9583c4d443bb6c13a3b7b3a997bbcbdbc28b120e003c91663145b7f95ba456e050128127cb31365674a72cbc6238c6b1783c00c80f542ee31eb9c76e7343dbd91e4a10fcf4cab6b628f3cc88fde84346c171fc33269d7d242e038a32472e7f31f47678af4d16b1d6947e38f373633375184965ec96f8c519480f2a69cfdb99511407d552e8270754a031040ead93f1d177ca1b5ba04cd2dee34968f85ecdfad1b594b3659660b5837668e600460bd89eb2627f42fd7cdefdb7c973e2d0116df0d8d5a07b4bf411dbae7a69c9edd044bbf5f5e4296eed1395c04b0345875301099df45efb30af8faeb74cf9e3ef3029494f7c2486827425bd43eb17a11085ddb7403736adf239e1c498cf87bb2b96d28c36dfe7e9fc6ca523b8fbde75abe0e2ea2d8e8711827325a332771b7ec9fa9405c024dd7447384e0a05345c390f366a0c8c6c4db3e1e7b7eebedf964df47e3d8db736718226aa81766918ddb102a24f37955737d3eafb490daf344bb1fc47b761ac925e95475a9acfc5d151473de7fb88eac887ea6537811197a3a28f08e8d6b559b9374ae976617d173f0d3f2b4249392863fba737a099d168f776b2054382e3ace9d62e28a0cc9200c795ad2eed888ec01a601148cfbf25a8d03b2a382ef5c284f905c4fe93ecb539bb7732b8a8673752a48773e0f20917f0043c89378a3434c6c76615423c99f9b37ce559b98e3e3a61be669d9108eaeb2017f65829e96c72058b5d4b8ac0bef5bfe736df5513214518ffd98255453d4ca12d9a2770680dc13794df9cc198b4f7824ccf4b3e10dc3285990c85fb36159dfb8c70875481f2aa95f7acf0dd1b5359e08ee644a88259d3107c0ab43e92bd252d1cc2756cce7d11c3a866380f7c617b53672da656532708732eba2ac67db00e77f18db480049874c4ea90973f931aa0cb5e1115d2e3c1f5ff69b62b149f2d8971e3c70b286f890aab25962244b4c4c7d5f329bde08575775a25992445da76611138ba08106162a1d82606f60a0de90734d33a0b05d2800ac9594beeec06e88ce73ec925c5aa79de016dff27bfb2d1ec6058fd9a56325be9c9792cfd75f7c00f62997c2c65912df19de101641a6f05a1b494f9c76a97d94547a507a9409b9c6d6f29b024af99ce173afd28477068dbfe97a573217b7172aab59690104c51476c437c30bf7b68592caea91f8efa20f45988122e810c323832e2cba59f2abedfec28674a12db7a0f8fb3f8650621e3b675200c926e554fb8aaa04bbae9ab351f94f26ee5f7a1ea59e82c50a201621487b643d32b9debea1024e0129d717ef681d87f61ab06931070782b71ecddd6961697a24e94caad77a71e61e2f8811d8ec174fb20a4260498e6210ab9bae07edfa93c326280f8ef0ce94c6a5f106c2d8b1f80abd66242f3dc87d9c301a334654d83ffccf57df5670ee4a242fd1537c8598439e4d70a03ded91608d3a0a8559d428ac0d7f847ab19ee20ed0bfdf24933d994ae72f0bf32f6605a5d3e4c6a063c2d51d628e75b69cc16d120bbc1700939797fcb03d42eabacb0a638711cabd34de54bfae829d6e94eb9a3baea1446b097e40c15717f6b586a79a43ebe3f172f60e9b39ed45f469f26fcc0288e8d7aba4c5f2f58a3bb3303d66210f03f80e77c81602da2e1c2ba24077e1cde8238d59e3878b18242b45b7f1fdd94a51b8d027a8cd250626766a55489ece481f435252a7093bc43b465c401992b896bc6c81a08fd7f0a15dc29c7fa792ca0594fc4e3815d2fee212dc01600fc8880ae36faf74f00472ceadebdec3525b5d287427a2cb8d492d7f4e39400a665f0198fc8d91f5aeb8c20592d0e95eb885350702d6cc4ed2f14a39cf99101570c7b90f81312f4fc571ce1c981acfbc504766a24b78a3b560d25ba3814f20c201446f5d28ebbe930bb0a66e024016e84dd079a70b19e1a21cb0df5ad9465553b7a7bab419cec7861209d85c1a96b46d6f043beece3c6e857cafd5623c78483f539f414fa25b7d4ea22275dc7fd17dcaf75480dc686cf9033cdc8cd701e1181358c60aaca88a1c7cfbf2cd13a95703567b2570f7671c02d2d396bbe79c9b17980ce987b987a5a3c470e2609dd5046d3195051d529b681b1c53e1d14fc84c22068e5d215cca9f2c64596e4e531f4585d01eb0dac61c0d46c75468220ab4c8ac37f46962efef82f57034fea2a7a43775ead1d0d0f7b71c05a3de8ad011c7ad13599836e745a2ae84c42ccd951d6fe7989f164f6c7fa58247e2288779d8c9fe4efefa18b4f2e255abea0a49024862e91e7732ff8e937d0a3f2b18940444ab72f044c5df30f6d1059f3b76355cecca5db116e2a9a69b63e8e35ac3ab54bf8b1689d3d364aa1fd394ecc25851bd37f0a23ee500c0a14cfbc96c00e64a2f3619b2cc2895f1b817fe331a2dd1919c3b599f5facfef301b95dfcf525fb4cb4142ba01c89fe15695ceb689f08e16ed0a93d810509f7d8ec00a25f41588a63e7fad988349aa7c614115aa9efd32256bbff5be3ee627e601b197057f90febd486728e64fd87cde80b3c8efc34ff94897e48712f2de4c6c2a1823341e5ac7960b2ededf0779f7d8a778d6438bc957bcf2c2dd4541ccaec623c8c41f0d69aa71bafa7e9615798679e5a4fef44f747f6ab4627b498c1a15a4741292a8521293337b85071a2e384d644887b110effddd3eaa9971594c1a8da0ae643ddad44723cc07f2c75da6331de9ba937dc9338b8dc91c7ecda5ac2da1b3a06e588774a4da4a3f54e7711643029701dda38aa5c67c18ca8218620ab09f90f98c331dfd536eeb0ec6571bee30754b9a71b781583073fc3a8cebad00d8b9e3a04379949ee1ba8b6c10d2175c0689939189e6c1f9df38b004057cc47532bef38927c7e53bd2cbfbf2dbde064073738891cc3939cd4f4f2b8f82fd981bb78ad4eef724891cf088650710ae388b72ade4e8c2927d706568eda0e97e24b321c949aed12f57f4510774d0ef469f66a9b181dbf072b6e553ff8f56eceed7f4166494254765d361c5bb018a60ae060d0b60acd3720bc1ff55627d5df6c97f79dc565a74", 0x1000}], 0x5, &(0x7f00000015c0)=[@iv={0x100, 0x117, 0x2, 0xe6, "8a3fc613438ee69dfc15088e25271713fc1dddf040e7979714b1b5eba24855130466a91eb2949ccf2d02ce94b34614486a6fc58279588a73fb8038ad467d5650bc5d153a4767570e93a0679c8c11b5b6c4b9da6c322d5d5b0fb551af45b7046b2848323d534b3e0e03859d7cc761c466d65feb1bf506ac1293a861457c820743daa465a1a987fe92da74090bf98818ece4bea875d3011063a3a326ab088c2c031a6dd13cff61bb98e16abcadae79aa06766f9ae9be892af03ca5f2e78792f90ba66d4e81026e5d9d2a8bc47bce5427767334c6ae84868e90b23372f5f147e31047f67fd23eb0"}, @iv={0x100, 0x117, 0x2, 0xe5, "47ee3629235a0e52e61272a0e559788bc4f6a7291cc6ec6dac3bd5d0f871b4fdd34a07853bc1e9d94d1d0c540f3dadc1c4d9289b8ed188cef79c7405ba6e117db9b0a93b16c7bfc767e2f3aacdaa4144409577e6c6d947c4f077e0b0b1a6efbc8232489d445b95fa55ce6e8762f4f7bdf7de4270d43582bdb6803813654a4715a3331ae3d045ce87a616d7ea81ecf1af71de24f16c3b0ea52a475c3239094313704becea43fe200e5dbdc8ab5a268f8c66a727084df604faab16c46404765cfe155ba80438ff293da7587f3dd71a9f3925e4504c8f3336738642b245c412be82c58bb4e166"}, @iv={0x28, 0x117, 0x2, 0xf, "ace912f6352d51275253a9b6a11f23"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xc0, 0x117, 0x2, 0xac, "c240960f9fcaf417edf53a46e4dc6c77521aacbf1563944bfd13923e604e5673178e84b48c572a6089f1c2ba63ce02a2fcd64336bac993bd73fec0bf88b136900def8e60dfbae674681c1f0237c41e830b01d1c94a2715e800b62e5614b74b57763c2856a5bbbaf6598c070064807ca4b3ca2be5d5c16911fc6e00f10cc686036a88e732a09ba6c120abfd5ff8ca8fd56238e44a3431c4c96c86511af47e06916b06b5a67e6badc0b5bdac04"}, @assoc={0x18, 0x117, 0x4, 0xed}, @op={0x18, 0x117, 0x3, 0x1}], 0x348}, {0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000240)="3439bd", 0x3}, {&(0x7f0000001940)="d51748f1c15f86114fc5a06009a4277270e4acca7be61e24d6a2acb210f509955ea237b8f2d6a666e40a0836e9aaa64f754d9299f5c708c5305d4c31cf8d04e212c4e6cdff5b9eba482b7538ee44b17c7106f379a98e1cb0a0891af0fd21222fb04c53d42704cee35336de06119a2b21dad82dcfe68fec45274ad1f6244db76a80771744028f72f2fba628d8f1ffd5575e8c2424da11044a25fa48a6650f24af5d99b6ce592eb91b0a5e74733c289603e0918aefca4105d3ae8801e074", 0xbd}, {&(0x7f0000001a00)="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", 0x1000}], 0x3, 0x0, 0x0, 0x4000}, {0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a40)="936d3e7ef603b4d9e70311d56605121deb70cf88aeed10fb357a84e715970ee366261b6f4916fd6687aec654e9ffcef7a5401ec02a07471aeb8eb2c62700aa23adc0075157b5482e9c853e695c5c36180621b6e8eb9a4060fc8e76ee4b71cc07f8ba6235c62f8f4c502e5587883242f0ee7121a284c110b0670b09b7df3eb67f6824f3734386a300d424fa6d7c201797b9649852b02b3a1ab970628c38948f1f70d5eea659c57916e919a5c99b71bf8506f9ce801233212a721c8ad92c5c8f306afca2d39910d63de76ee79876124111", 0xd0}, {&(0x7f0000002b40)="df821fc3a5cf02ec358ac41b99f3aa6ef07e487b47715300a77edda7b0a8df608da6f6df0208fc9feb8b443e1c0ff7", 0x2f}, {&(0x7f0000002b80)="b1695a5f2baff470505ba5afdd5934d83031a4ac013aca3165c0eee7cd120db0303ade9df48956cfed8dcc7e19c1e9e6b7899de3ed6802ea5b306fb4de3ca16e5c31a74f9f71202d2ad479e132003f0e", 0x50}, {&(0x7f0000002c00)="d7994629ea9c4e24dbedf3a8126b43e81204a72b15251951ea3182dbbab2ed625a732ecca2e97fa938833970403eebaceae989d779d5382a7038f7e16dcf14a906d9e2c947ba16ffd78f8453ad3754de32fbcb6e0781607884999c0f0770c4309fad00fa094efa528396ccffd86a7373d756e30bd4ce8b182468ffbd2cca39b998b3fe35f95dd54e62", 0x89}, {&(0x7f0000002cc0)="575f7360d993deef15e571e7f198859d2668d4bb0f5f86965550fc9a7d632a3b7dbfc1b057c9f22950c85b1ce0c01869530362cb5c6e4bc7f33a436f2a72dd451742a9da0eb3402ce634995f33df5823a9d35f227dcd89436a6e54758477736ad32b8eb18ec6143f554d618bda1e6692993a85837effcf2c376efb67e720b0f642c3715c8de86ead2ffcb93994aa75a1962267796296ebbcc22308807706a0ccf1b819741121c817cb70e024ea564363778759d63a9dafb0d7", 0xb9}], 0x5, &(0x7f0000002e00)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x24008014}, {0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e80)="35892d4b3fe9c3a53950c1e81ada7fe10dc3498a4ef33d17db4344cfca0dde92207a5510f48fb2fa6fa0e4927a2cd13c1f1784a404e2bde03fde62a07ebed4b529220814d502944ce33d6e9ee933cde2a31f85e0f9c6198394b1792a4149394306c1d9354c588859525f65dbe779dcfbe9caf101ce8d09a1cfd76c241bd0767d740721121efd54e4051960b22d97ae2eb29f8393697083e503b7440295e5ae2ef3407d9214ab454154882774671d5dc7b3a013efeaa107a7b825d1d000056dececbaaa50ef879939ef87847a55fc617923b273fce0950326f8b1c0a82ea876acbddddbac9dda18ebb798e70b40d44a756f2ddc74", 0xf4}], 0x1, 0x0, 0x0, 0x40}], 0x4, 0x8080) 15:14:49 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x2000000000}) getresgid(&(0x7f0000000000)=0x0, 0x0, &(0x7f0000000040)) setfsgid(r2) 15:14:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0xfffffffffffffffe, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x100000000000015a) 15:14:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xec\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:50 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x2000000000}) getresgid(&(0x7f0000000000)=0x0, 0x0, &(0x7f0000000040)) setfsgid(r2) 15:14:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000005003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7, 0x100) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x40400) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:50 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x1}) 15:14:50 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x2000000000}) getresgid(&(0x7f0000000000), 0x0, &(0x7f0000000040)) 15:14:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000009003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:50 executing program 3: write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:50 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x80, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x20}}, 0x4040) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)) 15:14:50 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x2000000000}) 15:14:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xed\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3c}], 0x0) 15:14:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02000000fa0c003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:50 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2000000000}) 15:14:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02000000000d003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:51 executing program 3: write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0xd5) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={r2, @rand_addr=0x401, @rand_addr=0x9e45}, 0xc) 15:14:51 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x1}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10003, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000180)={0x3, 0x3, 0x8001, 0x20000, 0x9}) setitimer(0x3, &(0x7f0000000080)={{0x0, 0x7530}, {0x0, 0x2710}}, &(0x7f0000000100)) 15:14:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xee\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:51 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2000000000}) 15:14:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000020003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:51 executing program 3: write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:51 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2000000000}) 15:14:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000029003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:51 executing program 4: write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) timer_create(0x3, &(0x7f0000000080)={0x0, 0x33, 0x7, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:51 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:51 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000140)={{0x0, @addr=0x40}, "3c0436350a5c869046c1c16c1db2cd10133e35a9e518f73c39050dfc2cd26ea3", 0x1}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x0, 0x1000000000000}) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x8, 0x100000001, 0x1b8, 0x2, 0x1ff, 0xfffffffffffffffd}, 0x4}, 0xa) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000)) 15:14:51 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x2000000000}) 15:14:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000030003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xef\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:51 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:51 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x2000000000}) 15:14:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'team_slave_0\x00', {0x2, 0x4e23, @local}}) 15:14:51 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = accept4(0xffffffffffffffff, 0xfffffffffffffffd, &(0x7f0000000000), 0x800) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000040)={0x9, 0x0, 0x8, @local, 'bcsh0\x00'}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000040003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:51 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:51 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x2000000000}) 15:14:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000051003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xf0\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)) 15:14:51 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x2000000000}) 15:14:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:51 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10000, 0x8000) ioctl$TIOCSTI(r1, 0x5412, 0x6) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000180)) 15:14:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000cfa003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:51 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x2000000000}) 15:14:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x3ffc) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = syz_open_dev$media(&(0x7f0000002200)='/dev/media#\x00', 0x0, 0x8c00) write$P9_RCREATE(r1, &(0x7f0000002240)={0x18, 0x73, 0x2, {{0x0, 0x2, 0x7}, 0x1}}, 0x18) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x4) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000180)={0x0, 0x0, 0x2080}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000080)) 15:14:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000003003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:51 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x2000000000}) 15:14:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xf1\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:51 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x2, 0x2) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x6) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x3}) 15:14:52 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2000000000}) 15:14:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000004003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) r1 = msgget(0x3, 0x8) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000ff6cca9010dfe4d2b3e77981ec27033e9a0b9f0f855b6e7dd137850d583166a08f8a373883fc858083906527c31cb4dff81b75a105b0a5edf97af2c81637089303493e93b8ec3d1bf22f4d4caef614796ffc3cf9aa751d33e5f38c0000000000"], 0x74, 0x800) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) r2 = semget$private(0x0, 0x0, 0xcf2dc516cc310148) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000180)=""/104) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:52 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2000000000}) 15:14:52 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180)="e118e0f12911f1822094c80632d5d259d824c4bcd279d18a73275828144c3fb939c8819a5b1e0cbab5fc316b2e536fe00a17a982c986e63921df5d6cf702f031ade62daaa7536a52c03ec2008eadbcc967db6c8a918d8e1e4687baa134ff656f3384dfe0557baeeddd7ed3e3", 0x6c, 0xfffffffffffffff9) r2 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x4, 0x10000) connect$x25(r2, &(0x7f00000014c0)={0x9, @remote={[], 0x3}}, 0x12) r3 = add_key$keyring(&(0x7f00000016c0)='keyring\x00', &(0x7f0000001700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000001640)='user\x00', &(0x7f0000001680)={'syz', 0x3}, 0xfffffffffffffffd, 0x0, r3) r4 = syz_open_dev$video(&(0x7f0000001500)='/dev/video#\x00', 0xffffffff, 0x80000) r5 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000200)="1a41c5837457e65bb9194984625fe7ff467677663e33650e11566e16e45c9a7786ff26d8640b7a69787d1abdb577a6ef0edca462737fd5d2820118899f9f7c4dbb1cdbbc3a4863880b2ee2dd32b716a9729eb9902b1a0f54832379ad86cb1f792c651a5a7bef783cd504eb0fe39c3fbf584e6861dd384055549e6b51cc664a6de8abc4030ca20e41248273a6c20d12fd5dd0c4171a5821c2c03436fcbd0ef389e51701fae45d15615ec2", 0xaa, 0xfffffffffffffff8) ioctl$VIDIOC_S_JPEGCOMP(r4, 0x408c563e, &(0x7f0000001540)={0xe99, 0x0, 0x1d, "feecab92b69c77566f3bc8a1136877b396aa5ca11eb785fb7e0c2f3f851b3da746030f9378a69113af2dfc68ba1978e6ea0f3158bc6aacd67eb83685", 0xe, "375a5b93633fd0b52c6044f8a2549bcb18949fee789c7c64504fb36f205818e0e48f1664eec954c087bafa8065629a9ad991f9ddf1ad608396614832"}) openat$urandom(0xffffffffffffff9c, &(0x7f0000001600)='/dev/urandom\x00', 0x80, 0x0) r6 = add_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340), 0x0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000380)={r1, r5, r6}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000001480)={&(0x7f00000013c0)={'nhpoly1305-avx2\x00'}, &(0x7f0000001400)="edc2533af512330d5fbc8a3b3f5e304e8c9011ae0ebcbc8bc90597ed0ee96f0c3e0a71868d5240a3292cc52777548d7debf214b3dd3f9617103e26420bf17b6aedbed420751ca2567bca907183b8ca5cce8f2b02c555a1dd34771a1f8e832aef848f58cd9f5705a8c27c07cc10", 0x6d}) 15:14:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000005003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xf2\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:52 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2000000000}) 15:14:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000008003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:52 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x250000, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x20) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x800, 0x0) 15:14:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000080)=@bpq0='bpq0\x00', 0x10) 15:14:52 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x2000000000}) 15:14:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000009003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xf3\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02000000000d003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:53 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x2000000000}) 15:14:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x80, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:53 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:53 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={r0, 0x0, 0x2000000000}) 15:14:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000010003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:53 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x0, 0xa3, 0x9d50, 0x6, 0x9, 0x5, 0x20, {0x0, @in={{0x2, 0x4e22, @local}}, 0x6, 0x1ff, 0x6, 0x1, 0xd9}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000240)={r2, @in={{0x2, 0x4e21, @rand_addr=0x7}}}, 0x84) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000080)) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1}) 15:14:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x240) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000029003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:53 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:14:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xf4\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:54 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) read(r0, &(0x7f0000000000)=""/45, 0x2d) 15:14:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000030003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:54 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:14:54 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:14:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000051003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:54 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/mixer\x00', 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000001240)={&(0x7f0000000a40)=@ipx, 0x80, &(0x7f0000001100)=[{&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000bc0)=""/248, 0xf8}, {&(0x7f0000000cc0)=""/104, 0x68}, {&(0x7f0000000d40)=""/187, 0xbb}, {&(0x7f0000000e00)=""/43, 0x2b}, {&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000f40)=""/136, 0x88}, {&(0x7f0000001000)=""/247, 0xf7}], 0x8, &(0x7f0000001180)=""/170, 0xaa}, 0x10002) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) r7 = getegid() setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={r5, r6, r7}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bpq0\x00', r3}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:54 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2000000000}) 15:14:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x444100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000002b00)) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f00000000c0)) r2 = fcntl$dupfd(r0, 0x0, r0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@random="056b3a837b84", @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x2ba, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) r7 = getegid() fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="02000000010001000000000002000400", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="904034afa8578cd558e28758a9e4e9fc079e171777812ff70b9f6fdadd463372d7548d72757f1c566779a77980880a382586108c76bb0d524396f1b3a09fd9f2f954b646c4b9aece94fa5f12c700ee91c36432f35c35bae8f40f44f977a8a65d6a240c44cb5cd622fad1558561cc783e6c0017999b7a92721b6feadb765a4f5a348e076a819d8ad70364d2d355c81858ddcbf285dbfd25f39f639c694be7eb6bfc8c355ee74ec381a4e6681e", @ANYRES32=r5, @ANYBLOB="040004000000000008000400", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="10000200000000002000010000000000"], 0x4c, 0x3) sendmsg$tipc(r1, &(0x7f0000002980)={&(0x7f0000000600)=@nameseq={0x1e, 0x1, 0x0, {0x3, 0x2, 0x3}}, 0x10, &(0x7f0000002840)=[{&(0x7f0000000640)="677cc2cf5c071f07199cd90b9d1c106cc0e78a900022328c68c2983f25069d141667d044eb546ccac1fc5e4b824a8256288beb23023cd83a296d1f43d0ec9ea26abb07f312d4aa76e103f57a5c5224e90b61aa90b7bafb1ca506de3491be3439cf011fb0858bf5a5013bf36a351981d82b465dead6e2a1c226dfdaa56b09bc8837b1c80461cfd2200be6e0123f212d61c5f2e58a973a5c4bd89034582bf860466f9710e23f32dc7b96d794dd0e699abe2379fe760c7ee84522d355c9bb7e1b48db8754f27995ebab22d0fdc2ade960935d4340717dd0108e5c565ce94ef047f21d0cec10200617b5a8cb19299922", 0xee}, {&(0x7f0000000740)="6a851628a51861adfb0bcd7df8e3319b47f730d8fd1462722e8beca4175efea3551f6a8f586ea4f327bf2d6371c2d183c1269a1a6872871a79784f4c842e1f0e08df40f5717c0250466364edd61aff00008115d01a2330ec173d0116c4e27cb0fe1d985cbe6272b2fde6dae2329ddaaa6719075a3182fbdda2e729f9c22b482f553cfb7906263b3f26b03b45eb666cf2aa0d093e35441fd9ed8fb301e084c64c0beae09e3a518a8d9168967427e63b74b9826bd8242ecc37680e52ce8d65d3f50d125c13b992b35241836eca56c2580c5ec0bced20582d5266408da9ff4acda41558", 0xe2}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="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", 0x1000}], 0x4, &(0x7f0000002880)="c179af7f697319319ed80b6b285492c14aeb22b406027a1678491c0eaa6d542f4234861adb465284931f9fb18d67093c968ee6037f82460e7472e752cf9efd881cb9d202aebca875a16d4c1db886be49c9a8b34109f33b2decccc6be4aa6ece7e23b4f298c47ed5de6388a15683d0cf1673bcee98ed858bb9b568ec8032f36b230c717e2b70ed14c1701b9526c81bfb10c6c02c977048536ce72d36c2ec2e7a5421b89a3bafe7b0833e586e6b0f3a9b5a07c2d1fd18a88d7fb11f2f614699722652f0293c777fe2f052cc6e45fb59f", 0xcf, 0x24000004}, 0x4000800) lsetxattr$security_ima(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)='security.ima\x00', &(0x7f0000002a40)=@v1={0x2, "b052b1f22dad1b60ec6589d51114c90aa84ed7"}, 0x14, 0x1) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xf5\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000033ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:55 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2000000000}) 15:14:55 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x10000000000, 0x80000000000, 0x2002}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x7f}) 15:14:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000053ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) syz_emit_ethernet(0x154, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0x0, 0x1, [0xe18, 0x2ef, 0xa, 0x9af]}) r1 = fcntl$dupfd(r0, 0x0, r0) fsetxattr$security_capability(r1, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x0, 0x5}, {0x20, 0x400}]}, 0x14, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0xffffffffffffff6e}], 0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000380)={0x1, [0x0]}, 0x6) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=@fragment={0x2, 0x0, 0xca, 0x8, 0x0, 0x1f, 0x68}, 0x8) connect$netlink(r1, &(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) 15:14:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xf6\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:55 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2000000000}) 15:14:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000093ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x7, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000080)={0x2, 0x7fffffff}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:55 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1}) 15:14:55 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000180)={{0xaf, @multicast2, 0x4e21, 0x3, 'rr\x00', 0x0, 0x6, 0x22}, {@loopback, 0x4e21, 0x0, 0xfff, 0x4, 0x80}}, 0x44) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)=0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000100)={0x30002000}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000014c0)=0x14) finit_module(r3, &(0x7f0000000080)='\x00', 0x2) r5 = getuid() setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001500)={{{@in6=@rand_addr="b21ec299f6a998f3eb561e1077cfda4f", @in=@local, 0x4e22, 0x1, 0x4e24, 0x800, 0x2, 0xa0, 0xa0, 0x33, r4, r5}, {0x2, 0xee44, 0x100000001, 0x1, 0x7ff, 0xfffffffffffffff7, 0x5, 0x1000}, {0x200, 0x7, 0x4}, 0x9, 0x6e6bbe, 0x2, 0x1}, {{@in=@loopback, 0x4d4, 0x2b}, 0x2, @in=@local, 0x34ff, 0x3, 0x2, 0x1, 0x7, 0x25ff, 0x94}}, 0xe8) 15:14:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xf7\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d0200000000fa0c3ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xf2\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) linkat(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000001480)='./file0\x00', 0x400) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000001500), &(0x7f0000001540)=0x8) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000014c0)=0xe321) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/244}, {&(0x7f0000000280)=""/101}, {&(0x7f0000000300)=""/4096}, {&(0x7f0000001300)=""/74}], 0xd8) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={{0x1000, 0xff, 0x6, 0x2, 0xffff, 0x101}, 0x5}) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000001380)=""/252) io_setup(0x7, &(0x7f0000001580)=0x0) io_submit(r2, 0x1, &(0x7f0000002600)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f00000015c0)="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", 0x1000, 0x0, 0x0, 0x2, r1}]) 15:14:56 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) recvfrom$inet(r1, &(0x7f0000000180)=""/248, 0xf8, 0x10000, 0x0, 0x0) 15:14:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\xe2\xf8\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d0200000000000d3ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:56 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x800, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x0, 0x3}, 0x14) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x0, 0x1, 0x3}, 0x7}}, 0x18) 15:14:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000203ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d0200000d0000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xff\xff\xfd\xfd\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x48, 0x1, 0x5}}, 0x14) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) 15:14:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:57 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x8001, {0x5, 0x20, 0x200, 0x2, 0x1, 0x10000}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4e000, 0x0) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000040)={0x96db, 0x7fffffff}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:57 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8000a0}) 15:14:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000293ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000180)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) fcntl$setpipe(r0, 0x407, 0x81) 15:14:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xff\xff\xff\xfe\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000303ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:57 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8000a0}) 15:14:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:57 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:14:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000403ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:57 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8000a0}) 15:14:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xfd\xfd\xff\xff\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:58 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xffffffff, 0x200000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080), 0x4) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) ioprio_set$uid(0x3, r2, 0x8000) 15:14:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000513ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000180)) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:58 executing program 5: ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8000a0}) 15:14:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d02000000000cfa3ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:58 executing program 5: ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8000a0}) 15:14:58 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000180)={'ip6erspan0\x00', 0x551, 0xd46}) 15:14:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$get_security(0x11, r2, &(0x7f0000000280)=""/174, 0xae) userfaultfd(0x80800) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendto(r1, &(0x7f0000000180)="b941cdb52e9797959e7087250388968b901329a5768f78dbb117413e86c8476b600ec4262492a1541bbffce1b188c6ba34fb33c68aa3e55e51e4a6a98f12e4dead9ebbc04331d37afc03decf47321add84527fcaa1e93d0411a3822ba22f4e0117ce235a8b6351", 0x67, 0x4, 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000033ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:58 executing program 5: ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8000a0}) 15:14:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:58 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x40040, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000100)={0x21, 0x3, 0x0, {0x2}}, 0x21) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4, 0xae}) 15:14:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000043ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:58 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8000a0}) 15:14:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x7f\xff\xff\xff\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000280)=[@sack_perm, @mss={0x2, 0x5}], 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000240)) 15:14:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000053ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:59 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8000a0}) 15:14:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) gettid() fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:14:59 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x3, 0x8, 0x2, 0x1}) ioctl$int_out(r1, 0x0, &(0x7f0000000000)) syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x2, 0x2) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4002}) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:59 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8000a0}) 15:14:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000083ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140), 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:14:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xe4\xff\xff\xff\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:14:59 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x4003, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, 0x3, {0x2}}, 0x18) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)) 15:14:59 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8000a0}) 15:14:59 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x3f, 0x10008004) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'ip_vti0\x00'}}, 0x1e) 15:14:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000093ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:59 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8000a0}) 15:14:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d0200000000000d3ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:14:59 executing program 0: r0 = gettid() r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x7, 0xff, 0xfff, 0x5, 0x0, 0x3, 0x803, 0x6, 0x2, 0x4, 0x0, 0x3, 0x80000000, 0x9, 0x5, 0x9, 0x0, 0xfffffffffffffff9, 0x7, 0xba7, 0x401, 0x4, 0x80000000000000, 0x6, 0x1f, 0x7b0f, 0x3f, 0x20, 0x8, 0x2, 0xffffffffffffffb5, 0x9, 0x4, 0x1, 0x3, 0xd36, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0xe}, 0x8000, 0x49, 0x5, 0x7, 0x0, 0xece5, 0x4}, r0, 0x2, r1, 0x1) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)) 15:14:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000103ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:00 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8000a0}) 15:15:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140), 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:00 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:15:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xfe\xff\xff\xff\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000293ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x200000020000, 0x42) ppoll(&(0x7f0000000000)=[{r0, 0x402}, {r0, 0x208a}, {r0, 0x501c}, {r0, 0x8000}, {r0, 0x42}, {r0, 0x20}, {r0, 0x6001}], 0x7, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)={0x3}, 0x8) write(r0, &(0x7f0000000280)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037dfbc9bc30dffffffffffffffe22c9b160096aa1fae1aff89388054c57bbf055982dbb16456778231207f122929f62897b303c2b83caaa73f386d621fb3aac5d730a1e645d611e0edc51ab20e840c0a7e184f53b6b78375b5b26b499064c28158dbc95bf72b13e3c7d2ab5b916693bcf0b6e97fa287cf13f04c0ac5d500dec6d12e911a8d7dbf987d17d8dfab8b9bcf2064", 0xffffffffffffff95) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x40400, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000240)) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0xe324) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000180)={0x101, 0x4, 0x3ff, 0x1, 0x4, 0x80000001}) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000140)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:00 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000040)={[0x3, 0x7fffffff, 0x20, 0x1, 0xbb, 0x6, 0x10000, 0x400, 0x200, 0x1, 0x4, 0x20, 0xdf19, 0x7, 0x7], 0x0, 0x100}) 15:15:00 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:15:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000303ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:00 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x105200, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:var_lib_t:s0\x00', 0x1f, 0x2) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000001c0)={0x50, &(0x7f0000000400)=""/80}) fcntl$dupfd(r1, 0x0, r1) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="0f0000100000000000000562f113f4a97f75a90e61f08b350fd0c8a7e9cf790a30466f14fde7254c8efd1204340157e62a7934cfce47669fac04884c4d1688b1cb6125994619c4445d9eee235ae1f12aeabd7995ee53279317d43734467c2e5a429b9f9336496e113b5c6cac710ab7c42c75f4150a05000000000000004fc5fa8cdb1fd56d3a20011ec968746eb043a2019e2c73eb9cf7416388a5f9055d1641f2f24828fd6ee2dbff9c2a0464103388da56d5ac4267c1970000000000000000000000"], &(0x7f0000000200)=0x17) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:00 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfff, 0x400000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x501100, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x3, r2}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:00 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:15:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000513ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140), 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xff\xff\xff\xff\x87`\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:01 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x4, 0x10007ffe) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80, 0x0) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0021dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:01 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000003c0)=""/101) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000440)={r2, @in6={{0xa, 0x4e23, 0x8, @ipv4, 0xf7}}}, 0x84) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @default, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0xc0400, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x2a) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x5c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={r4, 0x5}, 0x8) 15:15:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0031dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x8000) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000080)={0x20, 0x7, 0x1}) ioctl$int_out(r0, 0x5460, &(0x7f00000000c0)) 15:15:01 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:01 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='/proc/capi/capi20\x00', r1}, 0x10) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x200440, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r2, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}) 15:15:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0291dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:01 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc", 0x18) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\xff\xff\xff\xff\xa0\x00\x80\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:02 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0xebd, 0x8, 0x9, 0x6, 0x138, 0x2, 0x3e, 0x3, 0x3b5, 0x40, 0x120, 0x80, 0x915e, 0x38, 0x1, 0x7, 0x6, 0x1}, [{0x7, 0xd81, 0xfff, 0x6, 0x4, 0x1ff, 0x40, 0x3}, {0x7, 0x330, 0x8000, 0x5, 0x4, 0xfffffffffffffc00, 0x8, 0x4010000000000}], "1a9ecabdd0fbbef03fb976b833f8787cade685bbfeccbc8d244d", [[], [], [], [], [], []]}, 0x6ca) 15:15:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000303ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0301dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0xfffffffffffffff7, 0xfffffffffffffe00}, 0x8) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x5, @mcast2, 0x2}, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x3}], 0x38) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef00129cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0301dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:02 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x8, 0x8000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x204000, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000200)={r1, 0x0, 0x1000000, 0x1000000}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0xffffffff, 0xffff, 0x7, 0x7}, 'syz0\x00', 0x1b}) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x200000, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x10000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setns(r3, 0x0) 15:15:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000280)=[@sack_perm, @mss={0x2, 0x5}], 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000240)) [ 1214.062708][T11474] sg_write: data in/out 167162/2 bytes for SCSI command 0xff-- guessing data in; [ 1214.062708][T11474] program syz-executor.1 not setting count and/or reply_len properly 15:15:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc", 0x18) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x01\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) r1 = fcntl$dupfd(r0, 0x3, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0xe324) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x50, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x18, 0x18, &(0x7f00000000c0)=[@fd={0x66642a85, 0x0, r0}], &(0x7f0000000140)=[0x38, 0x60, 0x48]}}, @acquire={0x40046305, 0x4}, @register_looper], 0x0, 0x0, &(0x7f0000000200)}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0xfffffffffffffffc, 0x4, 0xff}) 15:15:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000280)=[@sack_perm, @mss={0x2, 0x5}], 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000240)) 15:15:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffbfffffffe22c9b160096aa1fae1a", 0x30) 15:15:03 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x8}, &(0x7f0000000200)=0x8) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000280)=[@sack_perm, @mss={0x2, 0x5}], 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000240)) 15:15:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2febfffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:03 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000300)={0xf043, 0x41, 0x40, 0x7, 0x800}, 0x14) sendto$netrom(r1, &(0x7f0000000000)="6760b17db7664ba6b073c83b43892709dd64cd676082", 0x16, 0x8080, &(0x7f0000000040)={{0x3, @default, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000100)) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000240)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000480)=0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0xfffffffffffffffa, 0x2, 0x7, 0x100, 0x0, 0x6, 0x10000, 0x0, 0x800, 0x6, 0x2, 0x5, 0x4, 0x6, 0x3ff, 0x6, 0x0, 0x3, 0xb3b, 0x0, 0x5, 0x2, 0x400, 0x0, 0xfff, 0xffff, 0x3, 0xfff, 0x100000000, 0x9c, 0x1, 0x1000, 0xbb, 0x4, 0x6, 0x7, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000003c0), 0x5}, 0x4, 0x0, 0x3, 0xa, 0x1ff, 0xdcdf, 0x9}, r2, 0x3, r1, 0x1) ioctl$BLKRRPART(r1, 0x125f, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="f377d08cbc6af9631413ca4c70000000000000000000003298e13e00"], &(0x7f00000001c0)=0x2f) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r3, 0xffffffff, 0x30}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r4, 0xffffffff00000000}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r4, 0x2, 0x30}, &(0x7f00000002c0)=0xc) 15:15:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4140, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0800900000000000dc235187aba286ea770122c72f14a5f84cebd0b674b622c361a9ac7f5a9219ba0f260ae8b0265bd593a5aadc95902aa8249afbd181572baf542de0fbe54466e3598a7b7715bb093fdd000000c6abc21c103bda3eb49dd95842d7a841a83486216e63d7aaed39382734d236c8dc0fc47c526bad8cd9396b500b96ba532db6aa66d5f1b753a32d82650830f05b30c8564f4f9784ba496274e59d6a68ed69e99d66aaf08d9a64587cee11c396832f4eb5859a47ea7c"], 0x254}, 0x1, 0x0, 0x0, 0xc040}, 0x24004080) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x102, 0x0) fcntl$dupfd(r0, 0x0, r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) keyctl$session_to_parent(0x12) 15:15:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000280)=[@sack_perm, @mss={0x2, 0x5}], 0x2) 15:15:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffbfffffe22c9b160096aa1fae1a", 0x30) 15:15:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc", 0x18) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x02\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:04 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x30200) write$smack_current(r1, &(0x7f0000000040)='-X\x00', 0x3) read(r1, &(0x7f0000000180)=""/120, 0x78) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x4) 15:15:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffbfffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:04 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x20, 0x280) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000180)={'filter\x00', 0x8b, "2c9c5cb52216b47ad0a2cbc3638695d30393f359a5c713458210a999d0ca038a1c4be4e8525c531bc33809797bde424a02d0b57dec3517182403f79c1e25c685f316ed73a9b9553e4cb4f87f33b08fce9a5e8372713e89441dd8d7bda9df7efc838fce5f932d7c52aae5f8c4b699aea4e22ff735d5d6ddca449ca8ca0be06968f6e02ca34490bbba40e52d"}, &(0x7f0000000240)=0xaf) accept$nfc_llcp(r0, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000080)=0xe327) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffbfffe22c9b160096aa1fae1a", 0x30) 15:15:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:04 executing program 4: write(0xffffffffffffffff, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x800, 0x0) getsockname$ax25(r0, &(0x7f00000000c0)={{0x3, @rose}, [@default, @netrom, @remote, @rose, @bcast, @rose, @netrom, @default]}, &(0x7f0000000180)=0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2000000406, 0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0x1) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:04 executing program 0: move_pages(0x0, 0x29, &(0x7f0000000180)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2842, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x400000, 0x0) r1 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0x62, 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000480)={0x0, 0x3f, 0x7ff, [], &(0x7f0000000440)={0x9909cb, 0xff, [], @value64=0x54}}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000500)) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300100001ef8d47b5bdea089c3c4892894b4880a416d4feb033426b39ab17eca7788fc0e98ee3e667ee4c7138712c1bf258fb163c7766aa26721c76a2f511bfbdc734d5d58cc278d3a95298b80f50accbb4ebbb82c670fbf750593a6e5e0eb4881b2d962143e", @ANYRES16=r3, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000140)) 15:15:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffbfffffffffe22c9b160096aa1fae1a", 0x30) 15:15:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x03\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffbfe22c9b160096aa1fae1a", 0x30) 15:15:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:05 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x23741552, 0x2000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x5, 0x0, &(0x7f0000000280)="8a23cd564c"}) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x240542, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000340)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000380)={r3, r4}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x6, 0x4) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000180)={0x1, "37ef2c3ddd88efca5c63ce37fc5c2100d5295371b1ca706189a6171bce535110", 0x400, 0x1fffe00000000, 0x9, 0x10, 0x5}) fcntl$dupfd(r1, 0x0, r1) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:05 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x101200, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040), 0x4) 15:15:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffbfffffffe22c9b160096aa1fae1a", 0x30) 15:15:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r2 = fcntl$dupfd(r0, 0x2, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) fsetxattr$security_smack_entry(r1, &(0x7f0000000300)='security.SMACK64IPOUT\x00', &(0x7f0000000340)='/dev/uinput\x00', 0xc, 0x3) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000000c0)={0x7, {0x5, 0xe9f, 0x5, 0x7f, 0x8001, 0x626}}) getdents(r2, &(0x7f0000000240)=""/148, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x2, 0x70, 0x1747385b, 0x6ae, 0x4000, 0x4, 0x0, 0x1ff, 0x2000, 0xa, 0x1f, 0x8, 0x7a, 0x5, 0xdca7, 0x401, 0xfffffffeffffffff, 0x100, 0x1, 0xffff, 0x400, 0x3, 0x7, 0x1000, 0x1, 0x4, 0x1dd3, 0xfffffffffffffff7, 0x3f, 0x7, 0x0, 0x80000001, 0x9, 0x3ff, 0xb9e9, 0x8001, 0x1f, 0x8, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000180), 0xa}, 0x80, 0x6, 0x74de, 0x3, 0xadc, 0x7, 0x2}) 15:15:05 executing program 0: r0 = gettid() ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) kcmp(r0, r1, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x3000}) 15:15:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b290096aa1fae1a", 0x30) 15:15:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x04\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b300096aa1fae1a", 0x30) 15:15:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x222840, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x5a}, &(0x7f00000000c0)=0x8) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x80000000, 0x200}, &(0x7f00000001c0)=0x8) fcntl$dupfd(r0, 0x0, r0) 15:15:06 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:06 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0xf990f6e569351d6, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000240)={0x32b4, 0x9, 0x7fff, 'queue0\x00', 0x7}) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xffffffff, 0x76943) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x138f, 0x100}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3, 0x2}, 0x8) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) 15:15:06 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160396aa1fae1a", 0x30) 15:15:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/62, 0x3e}], 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 15:15:06 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) modify_ldt$read_default(0x2, 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:06 executing program 5: readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160496aa1fae1a", 0x30) 15:15:06 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x42002, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x2002}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)) 15:15:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x05\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:06 executing program 5: readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160596aa1fae1a", 0x30) 15:15:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000803ef0011dcc606aed69d2bc7037cebc9bc2feffffffff2c9b160096aa1fae1a5d0ecf719c799a3f5674e1923c6b60e96756fc5b2c06317da5401bfff78a2115a61506ea3851798b7218391b5cc23c28341466bcdc95ba42573a94017031dc8d3bebb2430067fb2c2706309d2ae000000000", 0x7e) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x20, 0x2}}, 0x14) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160896aa1fae1a", 0x30) [ 1218.305756][T13658] sg_write: data in/out 167162/74 bytes for SCSI command 0x9b-- guessing data in; [ 1218.305756][T13658] program syz-executor.4 not setting count and/or reply_len properly 15:15:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160996aa1fae1a", 0x30) 15:15:07 executing program 5: readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:07 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="05000a008cab69ce2942d733ae2ed0255de54975eea369c465dd2dc304e1a55f7895ab9325d18152e1f900f07c5a9d8c50c4cf45388dcf2ee3adc22b49de1eae3fd71f5c85823c7256ed3364c5ba8e9ac13a79a576386985025984e87c4c5f590000000000000000000000000000000000000000"], 0x74, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) 15:15:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160d96aa1fae1a", 0x30) 15:15:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:07 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x101900) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x06\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b16", 0x2a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b161096aa1fae1a", 0x30) 15:15:07 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x101900) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:07 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101001, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x3, 0x3, 0x10000}) 15:15:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r1, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\a\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:07 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x101900) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b162996aa1fae1a", 0x30) 15:15:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = socket$caif_stream(0x25, 0x1, 0x2) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000180)=0x7fff, &(0x7f00000001c0)=0x2) connect$caif(r1, &(0x7f0000000000)=@dbg, 0x18) r2 = fcntl$dupfd(r0, 0x0, r0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x189201, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) io_setup(0x1ff, &(0x7f0000000240)=0x0) io_destroy(r3) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4d00, 0x0) write$sndseq(r2, &(0x7f0000000080)=[{0x8001, 0x5, 0x0, 0xffffffffffffff7f, @tick=0x800, {0x1, 0xea}, {0x297, 0x7}, @queue={0xd, {0x2, 0x7}}}], 0x30) 15:15:08 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)={'exec ', '\x00'}, 0x6) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x6c) modify_ldt$read_default(0x2, &(0x7f0000000180)=""/4096, 0x6dc) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b163096aa1fae1a", 0x30) 15:15:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b16", 0x2a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\b\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b165196aa1fae1a", 0x30) 15:15:08 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x40000, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) readv(r0, &(0x7f0000000080), 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)=0x4, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80000, 0x0) 15:15:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa29ae1a", 0x30) 15:15:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x9, 0x9}) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fchdir(r0) r2 = fcntl$dupfd(r0, 0xfffffffffffffffc, r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x258, 0xd, 0xf, 0x30, 0x70bd26, 0x25dfdbff, {0xf, 0x0, 0x8}, [@generic="33787758afd71f8610319823e113149274fe38184a99147a6ba6c9f5f3a6a69800c3c476ca5c6c", @nested={0xc8, 0x5a, [@typed={0x10, 0x8, @str='([{..((\\,\x00'}, @typed={0x8, 0x2f, @uid=r3}, @generic="ea72626b", @generic="22cb97e7b7db6241ef038bb116ac80bcac5cb86209ee65d77278be2eebb53c144bf4a0cf60a03351f88e6381a8cc27ee441e916f92bbced321eaba2e08051727a03aa5bb387d0eb3e2331510570244981c847f4f00dbb0c929acbae202988082de8bfcc1fb208994041550038f384e17420dc1a1464e44b18ed8c7caf37e38bde6a211d3942de9c429754d241f0fb0a6e5db61b886cf05edbe64a5e66ed6652a6a", @typed={0x4, 0x3f}]}, @nested={0x148, 0x43, [@generic="f676bbb4798ee09bc252792d1046c973a19f5a9329101306a775930de41ad29bc81c8f8a85cfd97921556e10ec6efdcbd79fc40ca8ade8d2f079e217a9a882f386ba1f42042f3cc2ac31b2ab622034ed453ac0b8c4b97512a955c4a8fbb41143698c6dac21525416a187030466fbaacf150c8daa134a0a98e8a69440344100d25b3bfa31098c6dc0a2661685f2adcfc4b51256003f83657d57", @generic="99a11ae6d73e03dea8374a42b30c0ebd2818ecc7010afab93aa1296dbc1c8cab601e62c8616cc7d14aea276ad30acc64fee56bb5043d9ab6ae445458c01dfa99d5fb0c83b18112692a351d07f5af93b262fc494c977668b8bbdef616df7a21de4875721011203459aba51c08a28d181e1bae5b6b73dfd3c3e8b3cd9e943e8e1e947601bf5b74fd58ba5c898b5e574cb393f54b6abea92fa41cfacd11926cee838a5814c6c1cb456a"]}, @typed={0xc, 0x2e, @u64}]}, 0x258}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000180)) 15:15:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa30ae1a", 0x30) 15:15:08 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x1f\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0xc000, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x9, 0x7, 0x8}) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b16", 0x2a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae29", 0x30) 15:15:09 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) times(&(0x7f0000000000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x20e02, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x100000}) fstat(0xffffffffffffffff, &(0x7f0000000180)) 15:15:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00 \x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae30", 0x30) 15:15:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2) 15:15:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$dupfd(r0, 0x0, r0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:09 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = dup(r0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) accept$nfc_llcp(r1, &(0x7f0000000180), &(0x7f0000000200)=0x60) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)={r2, 0xc, "5f7434e11c36ae8c6d26901a"}, &(0x7f0000000100)=0x14) 15:15:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x3) 15:15:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x0f#\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x4) 15:15:10 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) write$binfmt_aout(r0, &(0x7f0000000080)={{0xcc, 0x1, 0x4, 0x2ed, 0x10c, 0x80000000, 0x24f, 0x100000001}, "73eff82be761a82966ba2390cd8b48195b843ff29de503b6917d317bb9ea5232"}, 0x40) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x3ffc, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000180)={[0x5, 0x0, 0x81, 0x7, 0x7ff, 0x4, 0x1f, 0xfffffffffffffe00, 0x0, 0x100000000, 0x20, 0x7, 0xfffffffffffffffe, 0x0, 0x1, 0xbaca]}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x80000000}) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) 15:15:10 executing program 5: syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x5) 15:15:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:10 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x1000000}) 15:15:10 executing program 5: syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x6) 15:15:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00H\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:11 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) signalfd4(r0, &(0x7f0000000100)={0x9}, 0x8, 0x800) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000002c0)=""/4096) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/dlm-monitor\x00', 0xc000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0xfffffffffffffffc}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/sequencer\x00', 0x200, 0x0) 15:15:11 executing program 5: syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x7) 15:15:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x8) 15:15:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, 0x0, 0x0) 15:15:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:11 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400, 0x0) mount(&(0x7f00000000c0)=@sr0='/dev/sr0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='ocfs2\x00', 0x2000, &(0x7f00000001c0)='/dev/udmabuf\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) 15:15:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x9) 15:15:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, 0x0, 0x0) 15:15:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa", 0x2d) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:12 executing program 4: readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:12 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, 0x0, 0x0) 15:15:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00L\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0xa) 15:15:12 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/packet\x00') r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x980, 0x4) 15:15:12 executing program 4: readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0xb) 15:15:12 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, &(0x7f0000000040), 0x0) 15:15:12 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x100002000, 0x4}) 15:15:12 executing program 4: readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:12 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, &(0x7f0000000040), 0x0) 15:15:13 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x22, 0x0, 0x1000000000000000, "9e3e11b291e4ec87aaf3f1b3608da825", "17569f6c96bd24a2ddb2134500"}, 0x22, 0x3) 15:15:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0xc) 15:15:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00h\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, &(0x7f0000000040), 0x0) 15:15:13 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x101900) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 15:15:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0xd) 15:15:13 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x101900) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:13 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 15:15:13 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x101900) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0xe) 15:15:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 15:15:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00l\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0xf) 15:15:14 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0x4000) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080)=0x4, 0x4) 15:15:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 15:15:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x10) 15:15:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x11) 15:15:14 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000001, 0x8040) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='gre0\x00', 0x0, 0x9, 0xb}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)={0x0, @aes256, 0x1, "75a9414767776db5"}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0xded8, 0x80000000}) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x2, @dev={[], 0x1e}, 'ip6erspan0\x00'}}) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)) 15:15:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x12) 15:15:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00t\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:14 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x13) 15:15:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00z\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x4) 15:15:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x14) 15:15:15 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) prctl$PR_MCE_KILL_GET(0x22) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x2000) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040)) connect$llc(r1, &(0x7f0000000080)={0x1a, 0x31f, 0x40, 0xb65, 0x3, 0x2}, 0x10) 15:15:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x4) 15:15:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x15) 15:15:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\xff\xff\xff\xe4\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev, @empty}, &(0x7f0000000200)=0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x4) 15:15:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x16) 15:15:15 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 15:15:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x03\xe8\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:15 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) 15:15:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:15 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 15:15:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x17) 15:15:16 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) 15:15:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x18) 15:15:16 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 15:15:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x03\xe2\xea\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:16 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x19) 15:15:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:16 executing program 5: ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 15:15:16 executing program 4: syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x1a) 15:15:16 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="345f28f412b2cac55b504f5827bea530bb147c6494677dca9525c84280c9d785b68d26386164db06ee426e0bad57e07202fc3b92e7a45bf546b7bbc0585c949f363e68e6c67801108eb4eb2aed1d42c89066d52dbd0f3de7043cf96dbf745bda80dab23e2ac00e74c4a90ed06659fc7588d0c3d3ffd36b528a5ffc59319f470e5038fc03521641d791c847e5a5b69859ed5cc50b2471dd1e18d92ec42009", 0x9e}, {&(0x7f0000000180)="0065367036140e6fb2d45677ce84baebd318781ebaf5bb78235a89fd4f01101ae373d8f104d88dd5a183c6370777a9ff64defb8d30e1e072d6b6d987907fe33193345a10efe60dc93ae90636e15c183e55b048bfd5139a0f149e1c30f0dd6ee85af393004e521991", 0x68}, {&(0x7f0000000100)="e5fb0c0b4f54a6557a84984e993769a1e9ca2602f24da596f5116c82bcb4cce9261579312b89f9bfcdb4bd5f61c9", 0x2e}, {&(0x7f0000000200)="44e90621c6", 0x5}, {&(0x7f0000000240)="bf1e238c5ea4bd521e8ed3e86a0bd502905d90be8f59046750b8a0bbfc73301a01aa667eab1541631ddf2afef7ade984f4bdb41a6dd5b3d1c75e99c979e93c5219", 0x41}], 0x5) 15:15:16 executing program 5: ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 15:15:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x03\xe2\xeb\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:16 executing program 5: ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 15:15:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x1b) 15:15:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:16 executing program 4: syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:16 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101080) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) 15:15:16 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 15:15:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:17 executing program 4: syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 15:15:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x1c) 15:15:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x03\xe2\xec\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x1d) 15:15:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 15:15:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, 0x0, 0x0) 15:15:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0xfffffffffffffffe) write$P9_RWALK(r1, &(0x7f0000000040)={0x23, 0x6f, 0x1, {0x2, [{0x41, 0x1, 0x1}, {0x0, 0x0, 0x8}]}}, 0x23) 15:15:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x1e) 15:15:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 15:15:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x03\xe2\xed\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, 0x0, 0x0) 15:15:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x20, 0x4800) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r1, 0x0, 0x100000000, 0x4}) 15:15:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:17 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 15:15:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x21) 15:15:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, 0x0, 0x0) 15:15:17 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 15:15:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x03\xe2\xee\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={0x0, r2, 0xff}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, &(0x7f0000000040), 0x0) 15:15:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x22) 15:15:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:17 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 15:15:17 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xa01, 0x0) sendto$rxrpc(r0, &(0x7f0000000180)="396096050cd1e0ad0f0ea46ec8ab18ba9963ea07493957e58ea69dacde0f6433d70cc6b07beb72dd2ae925cf7d20682a2aa504ef164d4fa5f4c1df92e95974b964c40af379e6def1bd7df438175f8395b4740bf46edd00efa6a3eaeae3db99cf287f13170325fdc764013fff4d4d830bfd24f1835ed8c95ae30c6a163718d37cc7cb7b9e3aa071d3a91e35ca14f6e780e58de732f75f4830d6f82e06082132e729d9b8db929d3bf7d8d60694a96ac710e6cd", 0xb2, 0x4000000, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @remote, 0xffff}}, 0x24) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff}) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000080)) 15:15:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1000000000000005) 15:15:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x23) 15:15:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, &(0x7f0000000040), 0x0) 15:15:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x03\xe2\xef\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:15:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, 0x0, 0x0) 15:15:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x24) 15:15:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0xffffffffffffffff}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x6, 0x5, 0x6, 0xfffffffffffffffd, 0x1, 0x20}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="c37a0e002fb545ba21d3532e3cf42fcb00a6"], 0x16) 15:15:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, &(0x7f0000000040), 0x0) 15:15:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:15:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, 0x0, 0x0) 15:15:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 15:15:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x25) 15:15:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x03\xe2\xf0\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, 0x0, 0x0) 15:15:18 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 15:15:18 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) getegid() ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x26) 15:15:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 15:15:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040), 0x0) 15:15:18 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x27) 15:15:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x101900) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 15:15:18 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x03\xe2\xf1\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:18 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) 15:15:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040), 0x0) 15:15:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x894a, &(0x7f00000000c0)={'sit0\x00', 0x0}) clock_gettime(0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040), 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000680)={'filter\x00', 0x2a, "2fc2d71f42bdccfbae7c73a5511402e167c814a778a0ba354d3b07098b9299650cea0e53da9f94676a75"}, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001800)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000000100000c8713d85bb7fe5e00984e3229bb27603fb61c2d934b4bc0a5cd92a18f5192dc0457df4938fc4838e69ca175dccd5b5c964f661c8ad02e6789ba8b4d7f2cc93510893a01c61b138ed6267e6a13bd877a0a3ed564c07bacfc679dbc4591d457fc242d50794ed76ca4ed9d062d603c6e76fdc4a82f201a5f4bf26fba11fa8122c69eeccf28533c8e4f464ae0e8f400808047eedf634a9ce4fdb05dc7e0f248cf3635c820f7ab8a7d8f61d9036bda8b978175de82f0ef642d2cf8917ad8f3388a07ce7a14f018dbe0329861594e37650e9ab2ea0501486c2dca8667d5b590435d2c1fb00fae834f9391fa02b7c7f6b75fd4724de701a34cf2b6588173413e34e9061dae1625d85065920efdf7c264abf2c90c250ae235262e1ccdced200f675a7e7497340b5f4f96da3e010344ec7fb32ce435021df16a59c97a7341417a3b668f8e42b1c3d3adafc6be2e66e79f8e2dcf946db13bf94e5335acda3614e911e24014be106d5c37c424c541839eeac2cca01b0937f5d7db7c6e3c2de989c55ca5f3f4024f0d17c42c44ce03637ccb4dc0659376672a2b75e667834ab07d3e987ebb2dd965705e1c0039303751a277d02a1df03ddd76a70566662e8c2c909310db930bb4bcd92bf0db0234431790afcc590c55bc043c83f28b38ad0815c57f49e6333f558f4b38f4940eb078461f8a3bdea97329498ddc7ccb8842f5f9f3e5ad9ddc140492eae32fc11ff8a87fcf7245998118bb4fae9cef052fd2cd9bdf2d72826a2126f3e9f50fa75125b0c2b891b6f9b34cef4aeff351e38fd5bcd7461eeb0ae41dbf236def5fd6a23b049094cf17b45e21e7dd401059b6ef6be079f1b010cbb28a145292457d3275d15f503a104ad4bc74c97b1bc93562dc1adf6e44e467b6602fdf8dc65ea2f3d93b12e2b3eebbbe6ea1f6e9c8a9c07904369a97b4845feddcc745af548c925b87a25bc250212befcac2e8a92ce939e1595676b614e54cd7be0b67082c5078673d69f4749b6ddd93ce94b1a87c002692faab466f817f7bbedf401ea0f8a031001a79b61019436d3f1add0ea56a511473a4333c6baa7b0c4b59611a013faa6db38931fb6e1051cddcacd256d76173fadd50528149fbb714949a0fd7bf7934b183e8a623b6460ecec296f0e3029c4f736b00555a8384b392b1e1e745296a901ecd636dd885bbb294e85209fb2f3ea1be8a3b2b5239a3771ea81538034a3ac616b2d7df4b5d9f3b6f3d5b75dbc276e4a75efe52be7f60a16bc84853a8d4da6b6010a0dd1e235bc397939b9532fd7f30b86b6e4c7d545dee544b4cb053babc76588638329d823643b12f81497880a8a3e0c80862d870ab62036b0389d3550564ad5ea79bda15a1d6b1edf3c8425cdf07cce7a46a537e3af812d187d0e3bec0402d6b60fd0ec33ace3fe15255a848cb6e8799846529344eb2c2286df4427e0387514da4db84dfe37aa6293c963f91a94411d4e1155d8c02212c61e7608e3002524ffd11936a12f8c71021e9571313436cc0e931f1bce83690f40202eb7f2f3a90e4811b799c790dc0913b250a30d205e65ca6105966cb6b694f70fc579be6126d62dd83e4aa22abe911a0c1d188b1e629cb4684a47a2a8b12bdda5e8268c4b8858bf884af157611169a1e15389e98c82b4fefe65cb5644146ce7bb15ab99fecde075aa673dd112475a2b36d338e93ca162c48f118ac8e32470f64ba969c0ac626d5559967b31380f536bfe0cc04ee1f3ac68a7886091ef9088d121dd35608bb81fba622b64d076cf6b680737eb9ac6780ba31a1fa94c3489abc1ca89704fdd45eca0f3bdf2779557aa18ceb559d6e673d69aba41a9298c530526435a39e6be121ac4e3dd58af8f9e0b4fbf598090a3029e449a85802ec917486f06207f70cb4746ddb62e701d62ba3cf0fdf1090ea804f0488b458e547f51a0beb9d3f0c707d7399e5d75cefe377640db802f3b66b4b06360e0bc8771d3945fb43532ffc5a0d4bb330052ea6d9c07dacaf989102e697adb4eca75bc1395ad554ca428404132bf08c4edf339929a3c87c065a620828e6f9b25dbee27116d62f2184ad8af741aa684285f9ac8189421db8ec717dc95ae0c804273d764bcaa2846bd9955913ef6e85d4a858e713b4ecbe7e1388a1df5a7f4b676897aa65e1909c28a74fd0d53873ed69f2a00aabf5c1420331c6387622c006f2643f7ccb07f9c93e662118ada0b427d3711450d3db59e6a516bfaaa3d2159b10467e2f336f771d462d77007e73ad0850b99153c5f10cb13ccbd957c94b5d944547b71c3dbbd056d9450a4fc37b3c0df1408b1c5089edcc3d03228e9471d29da8643837c8c19b434781ddd1b5b58f477afb3598ca994a9b2d5cd283314fa90a5c479b17266eeae26603c3acd46fa780dfa5a99091512d5cd73f4a71be95f8ad0c05ea594159bbdfed86362d67ef858d090cc48a4eda66462c7820939c65a388ec27301b586a9ae3de8a752364f325274da9a268015e887ce3ed415911997a670984bdcff9294f0ad3b7b121690ba96f31c41dfcecacaf0c4e8361eebdb340cd94ddd0b22e209775af37bf5a038c4f08f80a10ceaf12165d83d4022cdfd3760ac03b2427d1c91118c6721baec9dd999f1497509c293cfd893a198380bb006f532b060798c0bba78c24ba8585bf49068f3540dc7b64d877ecfe704a072421454b49d1680571cb2a7ab792a191f5d1da7e41c2f7d1fdf8140079eb2048b2d661de8450862e92aa4e4590c665dcb35a34f2b3b54a87a99bf4da446dfacf6049dc82e3c6a77fbb35213c3ce7d034f10d99816164eb314e5b64a67d2d92a7abda886a6515d43ca7882062897fa71cedaab057b9f255d6f518e74693761b7809fba1da14f40463a15b33dc472571466d3d8a07b5e8b756f99cf2cb102e19b94a50045ccdefa68f13c2dbd091fb0d592f681c82538d89513b713d4f6120b489b4e355532f36805c9852978137182d151b4d594ab2192237dbbd87902b4f14fa0849280007ab42b67dbad8263189ea58b92eedd946cc11b28d81fdaabdebf2fca87f50f8f375bda7825da1b6532089f8a8d94818bd5d213ce1cbb1d090773d44640b6cebc5bff22a4174165a2ef0eb9ebc60deb29816a34b1f9e5b8a116a1d2f2811ef793a6ad1874379f1cd204ebdbd4a9d57cec36fe3f808a9015e405e7565a5c4aa42e59a9cb3f3ea9fac285afe485c3a2203659aae9ed5f1234dbf5b03d96b96b40d9e540a7c44dffb4d4a5622f0e7b17c807fbd8496b5cfb80b1c919630db66ea960c9f41f9b0b47cdf52475c81a8cfde0e68917af56979080749b18faabed3f008aa84a9e1bbd6541cd9d743197cda0aa2fdd29e82ba20ce7a6e79723faf96b462cf6fe81b612bc75b48dd707d05b1b95ac425a82e622cc626a99278a70cf9fc82b6177e3fd325f6ade17d45f589f787480303436dba98bb258a554c68cc1ee30953e284f205f3e37743ab250721fdab8183155b1c673efe5074b270a79f2bb40ab89faf6306c62a804496f0dc792fa024ba17e53660bb66f03e6a56e2df90e8a09f2c7555c33324b9f1e1ef6b368042ec05dd6c9aac08eb189748a3b11ebd18a754ebc840482336b4132538b7349f8967c3e8dcb31839b93fbb4526833ac4336046273c40cbd60cf4f2ecc5883e75e74cfbf7d19055155bf90ce5ee075c313943243ccd227d8adc9287f0ce7c546f2ba9fb005a9ffaa31de793f54f4d141db41e97013640ddeefd15a0dfbfdf7c399d694b87c6e1b853f6d88a6296bbce0a0d86496bb4bbf03efd5822b7eba810287c50103f68bab0117558cd9607fad9de4bb77f8460dbbf5119f33db86b68b525699622761a60af8d830fc757a62d514afeb32dc5ccd9d63f642fda5f0b29d68d04fbd6c9523de50371e86b3793985cc927939977be67940171b910c863febb28a9a6fec06856207403b5302e255377a36b07abf808ad0ec263190983e75f12fd70b0bdf736e8dea4ae471e315461c82319c4d29570202c0a06d98e780270209192f7"], 0x0) mount(&(0x7f0000000700)=ANY=[@ANYBLOB="2f6465762f68730200147cce5d070e65f14933e6826127297e3aab05d95b8736c6af76592c75f7fe5b2e3ca6b07a9000bba785c226547b4a80372dbf03db916ec7015e9efb734b3515912f4723800edd32e59df4fd05781965083529aac3a086fb043dbfb796453efca7f68c23785d911364f5750fb82b4796750cabef6dcae5b359e17d4c378611120223360be670a5fe99c831ada7573be9060000fd317c2f0f0f213fa3f82350bfd514dc030f07e9ea31a0ca03c8fa1fb89971b03ddf1f60b9739ee015ed5d1d425e0a1922207567f46593dd84ca94ab91e0d3a0122298240b066b7c5cbde17b8ec9b42be7f4303c7bc75e7b41b357190dfbfe727c45329447de8d61ea07244963cdb5834e3e41ecc8bfc6ef13f581a2dc5714f0bc8920047307d2f79204464425ddd5bb4834f8ac446d4d115cdd563dbf"], 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = add_key$user(&(0x7f00000003c0)='user\x00', 0x0, &(0x7f0000000440)="c1e933146e5907e4a7b0688ee21c6f9149441a6ab67c6bbf", 0x18, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r2) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x30, &(0x7f0000000100)={0x0, {{0x2, 0x0, @local}}}, 0xfd74) lsetxattr(&(0x7f00000004c0)='./file1\x00', 0x0, 0x0, 0x0, 0x2) lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000340)=@sha1={0x1, "f194f8fa7dd642dafe8b30f1dbee6bd16d6c4871"}, 0x15, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x10040000, 0x5) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000300)=""/46) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000600)='./file1\x00', &(0x7f0000000fc0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fstat(r0, &(0x7f0000000880)) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000a00)) getegid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a40)={{{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000b40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc) geteuid() lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) lstat(&(0x7f0000000d40)='./file0\x00', 0x0) geteuid() fstat(0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000e80), &(0x7f0000000ec0), &(0x7f0000000f00)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0x0, 0x0) utimes(&(0x7f0000000580)='./file1\x00', 0x0) 15:15:18 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x28) 15:15:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040), 0x0) 15:15:18 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/40, 0x28}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/66, 0x42}, {&(0x7f0000000280)=""/163, 0xa3}], 0x4}, 0x9f5}], 0x1, 0x160, &(0x7f00000003c0)) getgid() setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000400)={{0x1, 0xff, 0xcd, 0x0, 0x10000, 0x2c}, 0x11, 0x20, 0x5}) 15:15:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x29) 15:15:18 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x2, [@multicast1, @empty]}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) 15:15:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x03\xe2\xf2\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000001680)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x4a400295f) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) 15:15:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 15:15:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000003040), 0x400000000000083, 0x0) 15:15:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x20000170) 15:15:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 15:15:18 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x800, 0x0) getpeername$unix(r2, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='vmnet1*/:\x00', r1) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 15:15:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x4004) 15:15:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0xe324) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) [ 1230.268601][T20387] sg_write: data in/out 167162/536871232 bytes for SCSI command 0xff-- guessing data in; [ 1230.268601][T20387] program syz-executor.1 not setting count and/or reply_len properly 15:15:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x03\xe2\xf3\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:19 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc08c5334, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc05c5340, &(0x7f0000000280)) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 15:15:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffff00ffffffffe22c9b160096aa1fae1a", 0x30) 15:15:19 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x8008550e, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = add_key$user(&(0x7f00000001c0)='user\x00', 0x0, &(0x7f0000000340)="bbb6839a9b3e96e7b0d536a4802289e27ce731766495987c", 0x18, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x3aa, &(0x7f0000000140)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0xffffffff00000000) socket$inet(0x2, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r5, 0x0) mq_open(0x0, 0xb7e5ec273cc1496b, 0x0, 0x0) 15:15:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff83, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0) [ 1230.519366][T20622] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1230.579239][T20622] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:15:19 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000005f80)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000005340)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000005380)=ANY=[@ANYBLOB="7f454c460100f30700000000000000000300000002000000f80100000000000040000000000038000eff4f6d0200c8000180070057e574640600000001000000000000000800000000000000008000002000000006000000000000850500007a36818e00ff070000001e00001c9d5b02008b1ed41275af6b341e8ea900000017000000000000000000000013061fbcd9d0bd281fc084c20000000036a00bc70000000000000000000000000009000000000100000000000000c33aece02049dab161b27cff26182138"], 0xc9) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46000000000000000000000000fffffffffffffff9000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b43c97c2c083b210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x458) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000380)="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", 0x1dd, 0x0, 0x0, 0x0) 15:15:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000003040), 0x400000000000083, 0x0) 15:15:19 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:19 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = semget$private(0x0, 0x20000000103, 0x0) semop(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 15:15:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x03\xe2\xf4\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:19 executing program 4: setrlimit(0x7, &(0x7f0000becff0)) clone(0x3202001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$pptp(0x18, 0x1, 0x2) 15:15:19 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 15:15:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0018494e2e3625b1d11606aef69d3bc9a814ea295ae052404c7000044bdb0077037", 0x30) 15:15:19 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000005f80)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000005340)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000005380)=ANY=[@ANYBLOB="7f454c460100f30700000000000000000300000002000000f80100000000000040000000000038000eff4f6d0200c8000180070057e574640600000001000000000000000800000000000000008000002000000006000000000000850500007a36818e00ff070000001e00001c9d5b02008b1ed41275af6b341e8ea900000017000000000000000000000013061fbcd9d0bd281fc084c20000000036a00bc70000000000000000000000000009000000000100000000000000c33aece02049dab161b27cff26182138"], 0xc9) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46000000000000000000000000fffffffffffffff9000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b43c97c2c083b210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x458) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000380)="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", 0x1dd, 0x0, 0x0, 0x0) 15:15:19 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f00000001c0)) write(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x400000080003) 15:15:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, 0x0, 0xfffc) [ 1231.063153][T21560] sg_write: data in/out 167162/6 bytes for SCSI command 0x5-- guessing data in; [ 1231.063153][T21560] program syz-executor.1 not setting count and/or reply_len properly 15:15:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) clock_gettime(0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x1b1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x11) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x88) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x13f698e4b9e299b7, 0x1, 0x0, 0xffffffffffffff06) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000001c0)=0x5ae67028, 0x3af) 15:15:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4000, 0x10008002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) 15:15:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x03\xe2\xf5\x00\xbdh\x00', 0x43732e5398416f1a}) [ 1231.186512][T21638] BUG: Bad page state in process syz-executor.3 pfn:73ca4 [ 1231.194466][T21638] page:ffffea0001cf2900 count:0 mapcount:0 mapping:ffff888091124820 index:0x0 [ 1231.219440][T21638] shmem_aops [ 1231.219469][T21638] name:"memfd:" [ 1231.238467][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) 15:15:20 executing program 4: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffdc6) r3 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x14) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x810005, 0x0) 15:15:20 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000005f80)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000005340)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000005380)=ANY=[@ANYBLOB="7f454c460100f30700000000000000000300000002000000f80100000000000040000000000038000eff4f6d0200c8000180070057e574640600000001000000000000000800000000000000008000002000000006000000000000850500007a36818e00ff070000001e00001c9d5b02008b1ed41275af6b341e8ea900000017000000000000000000000013061fbcd9d0bd281fc084c20000000036a00bc70000000000000000000000000009000000000100000000000000c33aece02049dab161b27cff26182138"], 0xc9) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46000000000000000000000000fffffffffffffff9000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b43c97c2c083b210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x458) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000380)="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", 0x1dd, 0x0, 0x0, 0x0) 15:15:20 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) [ 1231.282506][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1231.298076][T21638] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1231.328816][T21638] page dumped because: non-NULL mapping [ 1231.343621][T21638] Modules linked in: [ 1231.361612][T21638] CPU: 0 PID: 21638 Comm: syz-executor.3 Not tainted 5.0.0-rc8-next-20190226 #43 [ 1231.370763][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.380839][T21638] Call Trace: [ 1231.384146][T21638] dump_stack+0x172/0x1f0 [ 1231.388496][T21638] bad_page.cold+0xda/0xff [ 1231.392921][T21638] ? si_mem_available+0x320/0x320 [ 1231.397969][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1231.404217][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1231.410470][T21638] free_pages_check_bad+0x142/0x1a0 [ 1231.415673][T21638] free_unref_page+0x3c6/0x600 [ 1231.420441][T21638] __put_page+0x8d/0xd0 [ 1231.424599][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1231.430414][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1231.435788][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1231.441000][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1231.447001][T21638] ? rw_verify_area+0x118/0x360 [ 1231.451868][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1231.457849][T21638] direct_splice_actor+0x126/0x1a0 [ 1231.462960][T21638] splice_direct_to_actor+0x369/0x970 [ 1231.468352][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1231.473906][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1231.480144][T21638] ? do_splice_to+0x190/0x190 [ 1231.484827][T21638] ? rw_verify_area+0x118/0x360 [ 1231.489691][T21638] do_splice_direct+0x1da/0x2a0 [ 1231.494548][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1231.500104][T21638] ? rw_verify_area+0x118/0x360 [ 1231.505047][T21638] do_sendfile+0x597/0xd00 [ 1231.509478][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1231.514763][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1231.521007][T21638] ? put_timespec64+0xda/0x140 [ 1231.525781][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1231.530985][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1231.536269][T21638] ? do_syscall_64+0x26/0x610 [ 1231.540945][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1231.546228][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1231.551257][T21638] do_syscall_64+0x103/0x610 [ 1231.555850][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1231.561737][T21638] RIP: 0033:0x457e29 [ 1231.565637][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1231.585243][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1231.593655][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1231.601631][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1231.609602][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1231.617575][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 15:15:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x9d6, 0x60201) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x12, &(0x7f0000000000), 0x20395dd4) r4 = mq_open(&(0x7f0000000000)='procmime_type@.em0systemwlan0trusted\x00', 0x800, 0x1, &(0x7f0000000080)={0x965, 0x8, 0x3, 0x0, 0x5, 0x7, 0xffffffffffffff02}) pwritev(r4, &(0x7f0000001600)=[{&(0x7f0000000180)="cece684dc0d35ad078ec98e5e311ad8d72a0f69d108f91dd783e4145272ee80d5ec419a6182195df3ee426b62aeeb8d04d42251a1c1176d7430b23031812c161d4f2082ff2786bd06a892cd46dd594c24b59e0e26978043c5c02c5c5d9e24ccb019763eea169e81131ca0e68303f40c4d1ca", 0x72}, {&(0x7f00000002c0)="b6e271b0a3dbb28932de15aafd983bde8ea128d24f8ccc0b0ea7ad39329b730c12584bab391d185eb55c4a811ccb25209b7ab40dc8ba1f662eaa3d25e3415c261fe85da3625446371689e5e3", 0x4c}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="bc54ed1aa4ea7ac4deb238ef9eab3f53cb1e85619ec4d26be9397af39b823dacbed03b60e37dc179feb5608af456810dc134a0513ca28aaa558359df95db09adf389a25a96f006ec20d9d1caaf361cbf0336cd3043f0322255b52a7f704f614b18331ffbcd5ff4a8aa2aa8682ba1fa1c443200facc52cf703fa3a91bf26996a8194c3b303f169d243a1af1a347f1519ce5829adadc8268b57ccf98393588a888c72fa7b56b1f940a3f3c3842033902f05f0fce47efda3fd4e111e28d3035e3a693aed48a4b08cf11f597fcd15127ca8d190c541856fa199e77f4daabc8dc4a", 0xdf}, {&(0x7f0000000540)="514ebde70a7c9ae842f543b1bd5c6eab1a30b31fedb0f7a82dc6fe665a9642e456f2a6bedb694b5ef09c102ad640348ca1a3fd169b1ea0913c6aceb3553dec07fc1403c69722f7b545899b48bb704731dd4eb82e29fb96171316e73ed89dd9e6543bccf1b0536574e9888ad300ecef50b0c243f49368416710e754941a9817fee0", 0x81}, {&(0x7f0000000600)="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", 0x1000}], 0x6, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001680)={0x2, {{0x2, 0x4e21, @loopback}}}, 0x88) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000200)={0x2, 0x100000000, 0x9602, 0x40, 0xfce5, 0x9}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x8, 0x800) [ 1231.625552][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff 15:15:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x03\xe2\xf6\x00\xbdh\x00', 0x43732e5398416f1a}) 15:15:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5437, 0x0) 15:15:20 executing program 4: getrandom(0x0, 0xfffffffffffffeb5, 0x0) [ 1231.717325][T21638] Disabling lock debugging due to kernel taint [ 1231.723829][T21638] BUG: Bad page state in process syz-executor.3 pfn:741b5 [ 1231.745879][T21638] page:ffffea0001d06d40 count:0 mapcount:0 mapping:ffff888091124820 index:0x1 [ 1231.787115][T21638] shmem_aops [ 1231.787121][T21638] name:"memfd:" [ 1231.790562][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1231.813464][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1231.832204][T21638] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 1231.849835][T21638] page dumped because: non-NULL mapping [ 1231.862249][T21638] Modules linked in: [ 1231.870687][T21638] CPU: 1 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1231.881195][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.891249][T21638] Call Trace: [ 1231.894548][T21638] dump_stack+0x172/0x1f0 [ 1231.898876][T21638] bad_page.cold+0xda/0xff [ 1231.903284][T21638] ? si_mem_available+0x320/0x320 [ 1231.908304][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1231.913323][T21638] ? kasan_check_read+0x11/0x20 [ 1231.918176][T21638] free_pages_check_bad+0x142/0x1a0 [ 1231.923372][T21638] free_unref_page+0x3c6/0x600 [ 1231.928132][T21638] __put_page+0x8d/0xd0 [ 1231.932285][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1231.938086][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1231.943452][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1231.948652][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1231.954743][T21638] ? rw_verify_area+0x118/0x360 [ 1231.959592][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1231.965566][T21638] direct_splice_actor+0x126/0x1a0 [ 1231.970678][T21638] splice_direct_to_actor+0x369/0x970 [ 1231.976042][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1231.981594][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1231.987830][T21638] ? do_splice_to+0x190/0x190 [ 1231.992505][T21638] ? rw_verify_area+0x118/0x360 [ 1231.997350][T21638] do_splice_direct+0x1da/0x2a0 [ 1232.002200][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1232.007745][T21638] ? rw_verify_area+0x118/0x360 [ 1232.012596][T21638] do_sendfile+0x597/0xd00 [ 1232.017011][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1232.022286][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1232.028519][T21638] ? put_timespec64+0xda/0x140 [ 1232.033287][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1232.038479][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1232.043758][T21638] ? do_syscall_64+0x26/0x610 [ 1232.048427][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1232.053704][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1232.058722][T21638] do_syscall_64+0x103/0x610 [ 1232.063308][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1232.069193][T21638] RIP: 0033:0x457e29 [ 1232.073080][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1232.092676][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1232.101082][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1232.109042][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1232.117002][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1232.124972][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1232.132938][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1232.149804][T21638] BUG: Bad page state in process syz-executor.3 pfn:7413e [ 1232.207087][T21638] page:ffffea0001d04f80 count:0 mapcount:0 mapping:ffff888091124820 index:0x2 [ 1232.221527][T21638] shmem_aops [ 1232.221533][T21638] name:"memfd:" [ 1232.229278][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1232.254647][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1232.275417][T21638] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 1232.296422][T21638] page dumped because: non-NULL mapping [ 1232.310342][T21638] Modules linked in: [ 1232.320889][T21638] CPU: 1 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1232.331383][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.341428][T21638] Call Trace: [ 1232.344716][T21638] dump_stack+0x172/0x1f0 [ 1232.349042][T21638] bad_page.cold+0xda/0xff [ 1232.353450][T21638] ? si_mem_available+0x320/0x320 [ 1232.358468][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1232.363487][T21638] ? kasan_check_read+0x11/0x20 [ 1232.368332][T21638] free_pages_check_bad+0x142/0x1a0 [ 1232.373520][T21638] free_unref_page+0x3c6/0x600 [ 1232.378286][T21638] __put_page+0x8d/0xd0 [ 1232.382435][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1232.388232][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1232.393592][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1232.398791][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1232.404775][T21638] ? rw_verify_area+0x118/0x360 [ 1232.409754][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1232.416264][T21638] direct_splice_actor+0x126/0x1a0 [ 1232.421383][T21638] splice_direct_to_actor+0x369/0x970 [ 1232.426752][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1232.432298][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1232.438527][T21638] ? do_splice_to+0x190/0x190 [ 1232.443205][T21638] ? rw_verify_area+0x118/0x360 [ 1232.448052][T21638] do_splice_direct+0x1da/0x2a0 [ 1232.452894][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1232.458436][T21638] ? rw_verify_area+0x118/0x360 [ 1232.463277][T21638] do_sendfile+0x597/0xd00 [ 1232.467692][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1232.472976][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1232.479205][T21638] ? put_timespec64+0xda/0x140 [ 1232.483967][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1232.489158][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1232.494435][T21638] ? do_syscall_64+0x26/0x610 [ 1232.499104][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1232.504390][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1232.509411][T21638] do_syscall_64+0x103/0x610 [ 1232.514000][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1232.519883][T21638] RIP: 0033:0x457e29 [ 1232.523772][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1232.543365][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1232.551766][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1232.559729][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1232.567688][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1232.576952][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1232.584915][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1232.727111][T21638] BUG: Bad page state in process syz-executor.3 pfn:7413f [ 1232.734359][T21638] page:ffffea0001d04fc0 count:0 mapcount:0 mapping:ffff888091124820 index:0x3 [ 1232.743613][T21638] shmem_aops [ 1232.743619][T21638] name:"memfd:" [ 1232.746905][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1232.758211][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1232.766793][T21638] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 1232.775397][T21638] page dumped because: non-NULL mapping [ 1232.780953][T21638] Modules linked in: [ 1232.784852][T21638] CPU: 0 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1232.795336][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.805379][T21638] Call Trace: [ 1232.808680][T21638] dump_stack+0x172/0x1f0 [ 1232.813008][T21638] bad_page.cold+0xda/0xff [ 1232.817421][T21638] ? si_mem_available+0x320/0x320 [ 1232.822438][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1232.827457][T21638] ? kasan_check_read+0x11/0x20 [ 1232.832306][T21638] free_pages_check_bad+0x142/0x1a0 [ 1232.837513][T21638] free_unref_page+0x3c6/0x600 [ 1232.842274][T21638] __put_page+0x8d/0xd0 [ 1232.846424][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1232.852225][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1232.857599][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1232.862803][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1232.868786][T21638] ? rw_verify_area+0x118/0x360 [ 1232.873632][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1232.879614][T21638] direct_splice_actor+0x126/0x1a0 [ 1232.884723][T21638] splice_direct_to_actor+0x369/0x970 [ 1232.890097][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1232.895643][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1232.901874][T21638] ? do_splice_to+0x190/0x190 [ 1232.906547][T21638] ? rw_verify_area+0x118/0x360 [ 1232.911390][T21638] do_splice_direct+0x1da/0x2a0 [ 1232.916240][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1232.921793][T21638] ? rw_verify_area+0x118/0x360 [ 1232.926641][T21638] do_sendfile+0x597/0xd00 [ 1232.931056][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1232.936334][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1232.942569][T21638] ? put_timespec64+0xda/0x140 [ 1232.947341][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1232.952539][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1232.957819][T21638] ? do_syscall_64+0x26/0x610 [ 1232.962501][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1232.967788][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1232.972814][T21638] do_syscall_64+0x103/0x610 [ 1232.977404][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1232.983284][T21638] RIP: 0033:0x457e29 [ 1232.987178][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1233.006771][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1233.015176][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1233.023139][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1233.031105][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1233.039071][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1233.047032][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1233.055491][T21638] BUG: Bad page state in process syz-executor.3 pfn:74128 [ 1233.079136][T21638] page:ffffea0001d04a00 count:0 mapcount:0 mapping:ffff888091124820 index:0x4 [ 1233.099250][T21638] shmem_aops [ 1233.099256][T21638] name:"memfd:" [ 1233.102617][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1233.127066][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1233.147069][T21638] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 1233.179478][T21638] page dumped because: non-NULL mapping [ 1233.185103][T21638] Modules linked in: [ 1233.355480][T21638] CPU: 1 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1233.366014][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.376066][T21638] Call Trace: [ 1233.379363][T21638] dump_stack+0x172/0x1f0 [ 1233.383690][T21638] bad_page.cold+0xda/0xff [ 1233.388101][T21638] ? si_mem_available+0x320/0x320 [ 1233.393121][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1233.398136][T21638] ? kasan_check_read+0x11/0x20 [ 1233.402986][T21638] free_pages_check_bad+0x142/0x1a0 [ 1233.408179][T21638] free_unref_page+0x3c6/0x600 [ 1233.413453][T21638] __put_page+0x8d/0xd0 [ 1233.417606][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1233.423405][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1233.428771][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1233.433971][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1233.439956][T21638] ? rw_verify_area+0x118/0x360 [ 1233.444795][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1233.450769][T21638] direct_splice_actor+0x126/0x1a0 [ 1233.455873][T21638] splice_direct_to_actor+0x369/0x970 [ 1233.461240][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1233.466781][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1233.473012][T21638] ? do_splice_to+0x190/0x190 [ 1233.477687][T21638] ? rw_verify_area+0x118/0x360 [ 1233.482528][T21638] do_splice_direct+0x1da/0x2a0 [ 1233.487375][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1233.492917][T21638] ? rw_verify_area+0x118/0x360 [ 1233.497764][T21638] do_sendfile+0x597/0xd00 [ 1233.502179][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1233.507459][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1233.513692][T21638] ? put_timespec64+0xda/0x140 [ 1233.518467][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1233.523659][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1233.528940][T21638] ? do_syscall_64+0x26/0x610 [ 1233.533610][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1233.538886][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1233.543904][T21638] do_syscall_64+0x103/0x610 [ 1233.548489][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1233.554370][T21638] RIP: 0033:0x457e29 [ 1233.558257][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1233.577848][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1233.586248][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1233.594208][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1233.602170][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1233.610224][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1233.618189][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1233.887352][T21638] BUG: Bad page state in process syz-executor.3 pfn:74129 [ 1233.894607][T21638] page:ffffea0001d04a40 count:0 mapcount:0 mapping:ffff888091124820 index:0x5 [ 1233.903499][T21638] shmem_aops [ 1233.903513][T21638] name:"memfd:" [ 1233.906800][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1233.918098][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1233.926680][T21638] raw: 0000000000000005 0000000000000000 00000000ffffffff 0000000000000000 [ 1233.935282][T21638] page dumped because: non-NULL mapping [ 1233.940837][T21638] Modules linked in: [ 1233.944738][T21638] CPU: 0 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1233.955219][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.965264][T21638] Call Trace: [ 1233.968568][T21638] dump_stack+0x172/0x1f0 [ 1233.972930][T21638] bad_page.cold+0xda/0xff [ 1233.977339][T21638] ? si_mem_available+0x320/0x320 [ 1233.982358][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1233.987378][T21638] ? kasan_check_read+0x11/0x20 [ 1233.992231][T21638] free_pages_check_bad+0x142/0x1a0 [ 1233.997428][T21638] free_unref_page+0x3c6/0x600 [ 1234.002189][T21638] __put_page+0x8d/0xd0 [ 1234.006343][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1234.012145][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1234.017520][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1234.022721][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1234.028720][T21638] ? rw_verify_area+0x118/0x360 [ 1234.033564][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1234.039537][T21638] direct_splice_actor+0x126/0x1a0 [ 1234.044643][T21638] splice_direct_to_actor+0x369/0x970 [ 1234.050013][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1234.055553][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1234.061791][T21638] ? do_splice_to+0x190/0x190 [ 1234.066463][T21638] ? rw_verify_area+0x118/0x360 [ 1234.071310][T21638] do_splice_direct+0x1da/0x2a0 [ 1234.076158][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1234.081702][T21638] ? rw_verify_area+0x118/0x360 [ 1234.086546][T21638] do_sendfile+0x597/0xd00 [ 1234.090964][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1234.096247][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1234.102485][T21638] ? put_timespec64+0xda/0x140 [ 1234.107252][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1234.112446][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1234.117742][T21638] ? do_syscall_64+0x26/0x610 [ 1234.123022][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1234.128307][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1234.133332][T21638] do_syscall_64+0x103/0x610 [ 1234.137920][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1234.143807][T21638] RIP: 0033:0x457e29 [ 1234.147694][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1234.167292][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1234.175693][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1234.183657][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1234.191618][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1234.199582][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1234.207548][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1234.216130][T21638] BUG: Bad page state in process syz-executor.3 pfn:7412a [ 1234.249156][T21638] page:ffffea0001d04a80 count:0 mapcount:0 mapping:ffff888091124820 index:0x6 [ 1234.258105][T21638] shmem_aops [ 1234.258116][T21638] name:"memfd:" [ 1234.261451][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1234.289381][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1234.309172][T21638] raw: 0000000000000006 0000000000000000 00000000ffffffff 0000000000000000 [ 1234.329218][T21638] page dumped because: non-NULL mapping [ 1234.349136][T21638] Modules linked in: [ 1234.353114][T21638] CPU: 0 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1234.363599][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.373643][T21638] Call Trace: [ 1234.376936][T21638] dump_stack+0x172/0x1f0 [ 1234.381264][T21638] bad_page.cold+0xda/0xff [ 1234.385677][T21638] ? si_mem_available+0x320/0x320 [ 1234.390698][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1234.395713][T21638] ? kasan_check_read+0x11/0x20 [ 1234.400571][T21638] free_pages_check_bad+0x142/0x1a0 [ 1234.405763][T21638] free_unref_page+0x3c6/0x600 [ 1234.410732][T21638] __put_page+0x8d/0xd0 [ 1234.414885][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1234.420686][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1234.426054][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1234.431258][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1234.437252][T21638] ? rw_verify_area+0x118/0x360 [ 1234.442095][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1234.448078][T21638] direct_splice_actor+0x126/0x1a0 [ 1234.453182][T21638] splice_direct_to_actor+0x369/0x970 [ 1234.458550][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1234.464093][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1234.470322][T21638] ? do_splice_to+0x190/0x190 [ 1234.474998][T21638] ? rw_verify_area+0x118/0x360 [ 1234.479845][T21638] do_splice_direct+0x1da/0x2a0 [ 1234.484688][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1234.490236][T21638] ? rw_verify_area+0x118/0x360 [ 1234.495088][T21638] do_sendfile+0x597/0xd00 [ 1234.499509][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1234.504790][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1234.511024][T21638] ? put_timespec64+0xda/0x140 [ 1234.515795][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1234.520991][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1234.526271][T21638] ? do_syscall_64+0x26/0x610 [ 1234.530942][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1234.536219][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1234.541240][T21638] do_syscall_64+0x103/0x610 [ 1234.545824][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1234.551710][T21638] RIP: 0033:0x457e29 [ 1234.555599][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1234.575192][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1234.583596][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1234.591561][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1234.599523][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1234.607485][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1234.615449][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1234.677100][T21638] BUG: Bad page state in process syz-executor.3 pfn:7412b [ 1234.686618][T21638] page:ffffea0001d04ac0 count:0 mapcount:0 mapping:ffff888091124820 index:0x7 [ 1234.704426][T21638] shmem_aops [ 1234.704433][T21638] name:"memfd:" [ 1234.712200][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1234.735545][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1234.756223][T21638] raw: 0000000000000007 0000000000000000 00000000ffffffff 0000000000000000 [ 1234.775723][T21638] page dumped because: non-NULL mapping [ 1234.789221][T21638] Modules linked in: [ 1234.797591][T21638] CPU: 1 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1234.808075][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.818206][T21638] Call Trace: [ 1234.821496][T21638] dump_stack+0x172/0x1f0 [ 1234.825821][T21638] bad_page.cold+0xda/0xff [ 1234.830228][T21638] ? si_mem_available+0x320/0x320 [ 1234.835244][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1234.840261][T21638] ? kasan_check_read+0x11/0x20 [ 1234.845117][T21638] free_pages_check_bad+0x142/0x1a0 [ 1234.850312][T21638] free_unref_page+0x3c6/0x600 [ 1234.855076][T21638] __put_page+0x8d/0xd0 [ 1234.859224][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1234.865022][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1234.870383][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1234.875587][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1234.881570][T21638] ? rw_verify_area+0x118/0x360 [ 1234.886414][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1234.892389][T21638] direct_splice_actor+0x126/0x1a0 [ 1234.897493][T21638] splice_direct_to_actor+0x369/0x970 [ 1234.902861][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1234.908402][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1234.914630][T21638] ? do_splice_to+0x190/0x190 [ 1234.919299][T21638] ? rw_verify_area+0x118/0x360 [ 1234.924152][T21638] do_splice_direct+0x1da/0x2a0 [ 1234.928992][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1234.934532][T21638] ? rw_verify_area+0x118/0x360 [ 1234.939373][T21638] do_sendfile+0x597/0xd00 [ 1234.943786][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1234.949064][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1234.955298][T21638] ? put_timespec64+0xda/0x140 [ 1234.960072][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1234.965261][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1234.970539][T21638] ? do_syscall_64+0x26/0x610 [ 1234.975207][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1234.980484][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1234.985501][T21638] do_syscall_64+0x103/0x610 [ 1234.990086][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1234.995964][T21638] RIP: 0033:0x457e29 [ 1234.999854][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1235.019444][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1235.027847][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1235.035809][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1235.043769][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1235.051728][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1235.059689][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1235.207359][T21638] BUG: Bad page state in process syz-executor.3 pfn:7412c [ 1235.214609][T21638] page:ffffea0001d04b00 count:0 mapcount:0 mapping:ffff888091124820 index:0x8 [ 1235.223594][T21638] shmem_aops [ 1235.223599][T21638] name:"memfd:" [ 1235.226920][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1235.240189][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1235.250878][T21638] raw: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1235.259668][T21638] page dumped because: non-NULL mapping [ 1235.265200][T21638] Modules linked in: [ 1235.271216][T21638] CPU: 0 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1235.281702][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.291746][T21638] Call Trace: [ 1235.295039][T21638] dump_stack+0x172/0x1f0 [ 1235.299374][T21638] bad_page.cold+0xda/0xff [ 1235.303785][T21638] ? si_mem_available+0x320/0x320 [ 1235.308803][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1235.313820][T21638] ? kasan_check_read+0x11/0x20 [ 1235.318668][T21638] free_pages_check_bad+0x142/0x1a0 [ 1235.323859][T21638] free_unref_page+0x3c6/0x600 [ 1235.328614][T21638] __put_page+0x8d/0xd0 [ 1235.332762][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1235.338561][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1235.343921][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1235.349120][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1235.355105][T21638] ? rw_verify_area+0x118/0x360 [ 1235.359946][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1235.365918][T21638] direct_splice_actor+0x126/0x1a0 [ 1235.371024][T21638] splice_direct_to_actor+0x369/0x970 [ 1235.376392][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1235.381932][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1235.388161][T21638] ? do_splice_to+0x190/0x190 [ 1235.392834][T21638] ? rw_verify_area+0x118/0x360 [ 1235.397676][T21638] do_splice_direct+0x1da/0x2a0 [ 1235.402518][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1235.408063][T21638] ? rw_verify_area+0x118/0x360 [ 1235.412908][T21638] do_sendfile+0x597/0xd00 [ 1235.417326][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1235.422606][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1235.428837][T21638] ? put_timespec64+0xda/0x140 [ 1235.433605][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1235.438794][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1235.444069][T21638] ? do_syscall_64+0x26/0x610 [ 1235.448736][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1235.454016][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1235.459042][T21638] do_syscall_64+0x103/0x610 [ 1235.463631][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1235.469511][T21638] RIP: 0033:0x457e29 [ 1235.473403][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1235.492995][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1235.501400][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1235.509448][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1235.517409][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1235.525373][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1235.533333][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1235.747068][T21638] BUG: Bad page state in process syz-executor.3 pfn:7412d [ 1235.754310][T21638] page:ffffea0001d04b40 count:0 mapcount:0 mapping:ffff888091124820 index:0x9 [ 1235.767083][T21638] shmem_aops [ 1235.767089][T21638] name:"memfd:" [ 1235.770428][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1235.797085][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1235.817077][T21638] raw: 0000000000000009 0000000000000000 00000000ffffffff 0000000000000000 [ 1235.837052][T21638] page dumped because: non-NULL mapping [ 1235.842648][T21638] Modules linked in: [ 1235.846583][T21638] CPU: 1 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1235.857064][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.867108][T21638] Call Trace: [ 1235.870405][T21638] dump_stack+0x172/0x1f0 [ 1235.874735][T21638] bad_page.cold+0xda/0xff [ 1235.879142][T21638] ? si_mem_available+0x320/0x320 [ 1235.884163][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1235.889180][T21638] ? kasan_check_read+0x11/0x20 [ 1235.894037][T21638] free_pages_check_bad+0x142/0x1a0 [ 1235.899236][T21638] free_unref_page+0x3c6/0x600 [ 1235.903992][T21638] __put_page+0x8d/0xd0 [ 1235.908143][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1235.913939][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1235.919305][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1235.924501][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1235.930481][T21638] ? rw_verify_area+0x118/0x360 [ 1235.935324][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1235.941294][T21638] direct_splice_actor+0x126/0x1a0 [ 1235.946396][T21638] splice_direct_to_actor+0x369/0x970 [ 1235.951761][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1235.957309][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1235.963539][T21638] ? do_splice_to+0x190/0x190 [ 1235.968226][T21638] ? rw_verify_area+0x118/0x360 [ 1235.973072][T21638] do_splice_direct+0x1da/0x2a0 [ 1235.977914][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1235.983457][T21638] ? rw_verify_area+0x118/0x360 [ 1235.988305][T21638] do_sendfile+0x597/0xd00 [ 1235.992725][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1235.998001][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1236.004237][T21638] ? put_timespec64+0xda/0x140 [ 1236.008999][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1236.014189][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1236.019474][T21638] ? do_syscall_64+0x26/0x610 [ 1236.024141][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1236.029417][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1236.034783][T21638] do_syscall_64+0x103/0x610 [ 1236.039377][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1236.045267][T21638] RIP: 0033:0x457e29 [ 1236.049160][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1236.068754][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1236.077161][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1236.085123][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1236.093084][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1236.101042][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1236.109007][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1236.397117][T21638] BUG: Bad page state in process syz-executor.3 pfn:7412e [ 1236.404367][T21638] page:ffffea0001d04b80 count:0 mapcount:0 mapping:ffff888091124820 index:0xa [ 1236.413616][T21638] shmem_aops [ 1236.413633][T21638] name:"memfd:" [ 1236.416920][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1236.428223][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1236.436806][T21638] raw: 000000000000000a 0000000000000000 00000000ffffffff 0000000000000000 [ 1236.445468][T21638] page dumped because: non-NULL mapping [ 1236.451103][T21638] Modules linked in: [ 1236.455055][T21638] CPU: 0 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1236.465539][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.475927][T21638] Call Trace: [ 1236.479223][T21638] dump_stack+0x172/0x1f0 [ 1236.483558][T21638] bad_page.cold+0xda/0xff [ 1236.487973][T21638] ? si_mem_available+0x320/0x320 [ 1236.492990][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1236.498010][T21638] ? kasan_check_read+0x11/0x20 [ 1236.502857][T21638] free_pages_check_bad+0x142/0x1a0 [ 1236.508049][T21638] free_unref_page+0x3c6/0x600 [ 1236.512808][T21638] __put_page+0x8d/0xd0 [ 1236.516959][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1236.522760][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1236.528122][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1236.533320][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1236.539307][T21638] ? rw_verify_area+0x118/0x360 [ 1236.544149][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1236.550129][T21638] direct_splice_actor+0x126/0x1a0 [ 1236.555239][T21638] splice_direct_to_actor+0x369/0x970 [ 1236.560606][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1236.566150][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1236.572387][T21638] ? do_splice_to+0x190/0x190 [ 1236.577056][T21638] ? rw_verify_area+0x118/0x360 [ 1236.581902][T21638] do_splice_direct+0x1da/0x2a0 [ 1236.586745][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1236.592291][T21638] ? rw_verify_area+0x118/0x360 [ 1236.597135][T21638] do_sendfile+0x597/0xd00 [ 1236.601558][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1236.606842][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1236.613082][T21638] ? put_timespec64+0xda/0x140 [ 1236.617848][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1236.623043][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1236.628321][T21638] ? do_syscall_64+0x26/0x610 [ 1236.632990][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1236.638269][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1236.643287][T21638] do_syscall_64+0x103/0x610 [ 1236.647877][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1236.653756][T21638] RIP: 0033:0x457e29 [ 1236.657648][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1236.677247][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1236.685647][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1236.693610][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1236.701571][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1236.709531][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1236.717493][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1236.857102][T21638] BUG: Bad page state in process syz-executor.3 pfn:7412f [ 1236.864349][T21638] page:ffffea0001d04bc0 count:0 mapcount:0 mapping:ffff888091124820 index:0xb [ 1236.877042][T21638] shmem_aops [ 1236.877048][T21638] name:"memfd:" [ 1236.880342][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1236.917052][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1236.925671][T21638] raw: 000000000000000b 0000000000000000 00000000ffffffff 0000000000000000 [ 1236.977028][T21638] page dumped because: non-NULL mapping [ 1236.982588][T21638] Modules linked in: [ 1236.986482][T21638] CPU: 1 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1236.996959][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1237.007000][T21638] Call Trace: [ 1237.010291][T21638] dump_stack+0x172/0x1f0 [ 1237.014619][T21638] bad_page.cold+0xda/0xff [ 1237.019029][T21638] ? si_mem_available+0x320/0x320 [ 1237.024047][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1237.029062][T21638] ? kasan_check_read+0x11/0x20 [ 1237.033906][T21638] free_pages_check_bad+0x142/0x1a0 [ 1237.039096][T21638] free_unref_page+0x3c6/0x600 [ 1237.043863][T21638] __put_page+0x8d/0xd0 [ 1237.048014][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1237.053810][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1237.059173][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1237.064367][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1237.070349][T21638] ? rw_verify_area+0x118/0x360 [ 1237.075189][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1237.081165][T21638] direct_splice_actor+0x126/0x1a0 [ 1237.086267][T21638] splice_direct_to_actor+0x369/0x970 [ 1237.091631][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1237.097175][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1237.103405][T21638] ? do_splice_to+0x190/0x190 [ 1237.108077][T21638] ? rw_verify_area+0x118/0x360 [ 1237.112924][T21638] do_splice_direct+0x1da/0x2a0 [ 1237.117785][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1237.123338][T21638] ? rw_verify_area+0x118/0x360 [ 1237.128186][T21638] do_sendfile+0x597/0xd00 [ 1237.132602][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1237.137876][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1237.144112][T21638] ? put_timespec64+0xda/0x140 [ 1237.148876][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1237.154069][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1237.159347][T21638] ? do_syscall_64+0x26/0x610 [ 1237.164015][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1237.169292][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1237.174310][T21638] do_syscall_64+0x103/0x610 [ 1237.178894][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1237.184770][T21638] RIP: 0033:0x457e29 [ 1237.188658][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1237.208249][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1237.216649][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1237.224616][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1237.232578][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1237.240541][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1237.248504][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1237.527097][T21638] BUG: Bad page state in process syz-executor.3 pfn:740d8 [ 1237.534348][T21638] page:ffffea0001d03600 count:0 mapcount:0 mapping:ffff888091124820 index:0xc [ 1237.543319][T21638] shmem_aops [ 1237.543332][T21638] name:"memfd:" [ 1237.546628][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1237.558122][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1237.566711][T21638] raw: 000000000000000c 0000000000000000 00000000ffffffff 0000000000000000 [ 1237.575474][T21638] page dumped because: non-NULL mapping [ 1237.581252][T21638] Modules linked in: [ 1237.585163][T21638] CPU: 0 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1237.595640][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1237.605683][T21638] Call Trace: [ 1237.608974][T21638] dump_stack+0x172/0x1f0 [ 1237.613299][T21638] bad_page.cold+0xda/0xff [ 1237.617710][T21638] ? si_mem_available+0x320/0x320 [ 1237.622729][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1237.627749][T21638] ? kasan_check_read+0x11/0x20 [ 1237.632596][T21638] free_pages_check_bad+0x142/0x1a0 [ 1237.637787][T21638] free_unref_page+0x3c6/0x600 [ 1237.642549][T21638] __put_page+0x8d/0xd0 [ 1237.646698][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1237.652494][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1237.657855][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1237.663054][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1237.669044][T21638] ? rw_verify_area+0x118/0x360 [ 1237.673902][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1237.679877][T21638] direct_splice_actor+0x126/0x1a0 [ 1237.684982][T21638] splice_direct_to_actor+0x369/0x970 [ 1237.690349][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1237.695887][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1237.702132][T21638] ? do_splice_to+0x190/0x190 [ 1237.706812][T21638] ? rw_verify_area+0x118/0x360 [ 1237.711654][T21638] do_splice_direct+0x1da/0x2a0 [ 1237.716494][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1237.722033][T21638] ? rw_verify_area+0x118/0x360 [ 1237.726882][T21638] do_sendfile+0x597/0xd00 [ 1237.731303][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1237.736576][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1237.742806][T21638] ? put_timespec64+0xda/0x140 [ 1237.747571][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1237.752763][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1237.758041][T21638] ? do_syscall_64+0x26/0x610 [ 1237.762717][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1237.767991][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1237.773014][T21638] do_syscall_64+0x103/0x610 [ 1237.777604][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1237.783486][T21638] RIP: 0033:0x457e29 [ 1237.787382][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1237.806973][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1237.815374][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1237.823335][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1237.831299][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1237.839347][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1237.847312][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1237.856851][T21638] BUG: Bad page state in process syz-executor.3 pfn:740d9 [ 1237.877097][T21638] page:ffffea0001d03640 count:0 mapcount:0 mapping:ffff888091124820 index:0xd [ 1237.897760][T21638] shmem_aops [ 1237.897766][T21638] name:"memfd:" [ 1237.901104][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1237.928458][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1237.948490][T21638] raw: 000000000000000d 0000000000000000 00000000ffffffff 0000000000000000 [ 1237.968450][T21638] page dumped because: non-NULL mapping [ 1237.974048][T21638] Modules linked in: [ 1237.988477][T21638] CPU: 0 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1237.998969][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1238.009445][T21638] Call Trace: [ 1238.012736][T21638] dump_stack+0x172/0x1f0 [ 1238.017069][T21638] bad_page.cold+0xda/0xff [ 1238.021477][T21638] ? si_mem_available+0x320/0x320 [ 1238.026498][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1238.031511][T21638] ? kasan_check_read+0x11/0x20 [ 1238.036355][T21638] free_pages_check_bad+0x142/0x1a0 [ 1238.041546][T21638] free_unref_page+0x3c6/0x600 [ 1238.046305][T21638] __put_page+0x8d/0xd0 [ 1238.050452][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1238.056249][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1238.061614][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1238.066814][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1238.072800][T21638] ? rw_verify_area+0x118/0x360 [ 1238.077650][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1238.083619][T21638] direct_splice_actor+0x126/0x1a0 [ 1238.088725][T21638] splice_direct_to_actor+0x369/0x970 [ 1238.094086][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1238.099632][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1238.105863][T21638] ? do_splice_to+0x190/0x190 [ 1238.110535][T21638] ? rw_verify_area+0x118/0x360 [ 1238.115375][T21638] do_splice_direct+0x1da/0x2a0 [ 1238.120239][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1238.125783][T21638] ? rw_verify_area+0x118/0x360 [ 1238.130626][T21638] do_sendfile+0x597/0xd00 [ 1238.135050][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1238.140324][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1238.146553][T21638] ? put_timespec64+0xda/0x140 [ 1238.151319][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1238.156511][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1238.161787][T21638] ? do_syscall_64+0x26/0x610 [ 1238.166467][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1238.171743][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1238.176760][T21638] do_syscall_64+0x103/0x610 [ 1238.181351][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1238.187315][T21638] RIP: 0033:0x457e29 [ 1238.191202][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1238.210795][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1238.219207][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1238.227165][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1238.235129][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1238.243679][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1238.251646][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1238.589165][T21638] BUG: Bad page state in process syz-executor.3 pfn:740da [ 1238.596463][T21638] page:ffffea0001d03680 count:0 mapcount:0 mapping:ffff888091124820 index:0xe [ 1238.617093][T21638] shmem_aops [ 1238.617099][T21638] name:"memfd:" [ 1238.629362][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1238.657086][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1238.677079][T21638] raw: 000000000000000e 0000000000000000 00000000ffffffff 0000000000000000 [ 1238.685708][T21638] page dumped because: non-NULL mapping [ 1238.979123][T21638] Modules linked in: [ 1238.987287][T21638] CPU: 0 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1238.997776][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1239.007816][T21638] Call Trace: [ 1239.011106][T21638] dump_stack+0x172/0x1f0 [ 1239.015432][T21638] bad_page.cold+0xda/0xff [ 1239.019842][T21638] ? si_mem_available+0x320/0x320 [ 1239.024856][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1239.029875][T21638] ? kasan_check_read+0x11/0x20 [ 1239.034722][T21638] free_pages_check_bad+0x142/0x1a0 [ 1239.039912][T21638] free_unref_page+0x3c6/0x600 [ 1239.044676][T21638] __put_page+0x8d/0xd0 [ 1239.048824][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1239.054623][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1239.059986][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1239.065184][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1239.071166][T21638] ? rw_verify_area+0x118/0x360 [ 1239.076010][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1239.081987][T21638] direct_splice_actor+0x126/0x1a0 [ 1239.087094][T21638] splice_direct_to_actor+0x369/0x970 [ 1239.092458][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1239.097996][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1239.104226][T21638] ? do_splice_to+0x190/0x190 [ 1239.108898][T21638] ? rw_verify_area+0x118/0x360 [ 1239.113742][T21638] do_splice_direct+0x1da/0x2a0 [ 1239.118668][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1239.124207][T21638] ? rw_verify_area+0x118/0x360 [ 1239.129052][T21638] do_sendfile+0x597/0xd00 [ 1239.133465][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1239.138738][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1239.144979][T21638] ? put_timespec64+0xda/0x140 [ 1239.149745][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1239.154941][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1239.160219][T21638] ? do_syscall_64+0x26/0x610 [ 1239.164890][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1239.170172][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1239.175193][T21638] do_syscall_64+0x103/0x610 [ 1239.179779][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1239.185658][T21638] RIP: 0033:0x457e29 [ 1239.189544][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1239.209145][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1239.217554][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1239.225513][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1239.233471][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1239.241429][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1239.249392][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 1239.397917][T21638] BUG: Bad page state in process syz-executor.3 pfn:740db [ 1239.405197][T21638] page:ffffea0001d036c0 count:0 mapcount:0 mapping:ffff888091124820 index:0xf [ 1239.417083][T21638] shmem_aops [ 1239.417089][T21638] name:"memfd:" [ 1239.420433][T21638] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 1239.447064][T21638] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888091124820 [ 1239.467068][T21638] raw: 000000000000000f 0000000000000000 00000000ffffffff 0000000000000000 [ 1239.489288][T21638] page dumped because: non-NULL mapping [ 1239.494871][T21638] Modules linked in: [ 1239.509166][T21638] CPU: 1 PID: 21638 Comm: syz-executor.3 Tainted: G B 5.0.0-rc8-next-20190226 #43 [ 1239.519657][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1239.529702][T21638] Call Trace: [ 1239.532990][T21638] dump_stack+0x172/0x1f0 [ 1239.537320][T21638] bad_page.cold+0xda/0xff [ 1239.541726][T21638] ? si_mem_available+0x320/0x320 [ 1239.546742][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1239.552368][T21638] ? kasan_check_read+0x11/0x20 [ 1239.557217][T21638] free_pages_check_bad+0x142/0x1a0 [ 1239.562408][T21638] free_unref_page+0x3c6/0x600 [ 1239.567167][T21638] __put_page+0x8d/0xd0 [ 1239.571318][T21638] page_cache_pipe_buf_release+0x12b/0x180 [ 1239.577119][T21638] iter_file_splice_write+0x7d1/0xbe0 [ 1239.582490][T21638] ? atime_needs_update+0x5f0/0x5f0 [ 1239.587686][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1239.593672][T21638] ? rw_verify_area+0x118/0x360 [ 1239.598512][T21638] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1239.604489][T21638] direct_splice_actor+0x126/0x1a0 [ 1239.609594][T21638] splice_direct_to_actor+0x369/0x970 [ 1239.614961][T21638] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1239.620508][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1239.626736][T21638] ? do_splice_to+0x190/0x190 [ 1239.631407][T21638] ? rw_verify_area+0x118/0x360 [ 1239.636248][T21638] do_splice_direct+0x1da/0x2a0 [ 1239.641089][T21638] ? splice_direct_to_actor+0x970/0x970 [ 1239.646629][T21638] ? rw_verify_area+0x118/0x360 [ 1239.651478][T21638] do_sendfile+0x597/0xd00 [ 1239.655898][T21638] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1239.661173][T21638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1239.667494][T21638] ? put_timespec64+0xda/0x140 [ 1239.672262][T21638] __x64_sys_sendfile64+0x1dd/0x220 [ 1239.677452][T21638] ? __ia32_sys_sendfile+0x230/0x230 [ 1239.682735][T21638] ? do_syscall_64+0x26/0x610 [ 1239.687401][T21638] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1239.692675][T21638] ? trace_hardirqs_on+0x67/0x230 [ 1239.697693][T21638] do_syscall_64+0x103/0x610 [ 1239.702275][T21638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1239.708156][T21638] RIP: 0033:0x457e29 [ 1239.712042][T21638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1239.731633][T21638] RSP: 002b:00007f8086e5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1239.740033][T21638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 1239.747996][T21638] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1239.755955][T21638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1239.763916][T21638] R10: 0000400000080003 R11: 0000000000000246 R12: 00007f8086e5e6d4 [ 1239.771881][T21638] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff