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", 0x100c}, {&(0x7f00000002c0)="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", 0x104}, {&(0x7f00000000c0)="cd34a0a839f8a4956c539d071e77c7f0a6bec49ae1818baa19a37112001e767669cb991e87f359b232280241de12dfc29e50107deb0cbac58f9a60b0cfb23d475a67acfe37b97a0c0a86f0e32c361ab18d6a5a13c3d6d2aa8ea7aed2dccf9c5439662e0ef9ac886c745dc457a0f4294fb74434610000000000000000b8655e164abe9f9138afaf4b14883b89110c8fdd45acd6d9d8e5c1623e8184f15862ac3d85afdf1da8a2b7e51f47", 0xaa}, {&(0x7f0000000200)="2764528682cedffdcaf9f054c2af62d4f5d75e0e29050000000071c7b0cf220fd801666644cb669498bff1e1f24ad816a29c6a4fa1f820feb94502da35bc8021", 0x40}], 0x4, 0xc, 0x0) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) (async) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000480)={0x4, 0xb1}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x34, 0x65, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {0xfff1, 0x7}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x10080, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) process_madvise(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001300)="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", 0x100c}, {&(0x7f00000002c0)="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", 0x104}, {&(0x7f00000000c0)="cd34a0a839f8a4956c539d071e77c7f0a6bec49ae1818baa19a37112001e767669cb991e87f359b232280241de12dfc29e50107deb0cbac58f9a60b0cfb23d475a67acfe37b97a0c0a86f0e32c361ab18d6a5a13c3d6d2aa8ea7aed2dccf9c5439662e0ef9ac886c745dc457a0f4294fb74434610000000000000000b8655e164abe9f9138afaf4b14883b89110c8fdd45acd6d9d8e5c1623e8184f15862ac3d85afdf1da8a2b7e51f47", 0xaa}, {&(0x7f0000000200)="2764528682cedffdcaf9f054c2af62d4f5d75e0e29050000000071c7b0cf220fd801666644cb669498bff1e1f24ad816a29c6a4fa1f820feb94502da35bc8021", 0x40}], 0x4, 0xc, 0x0) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) (async) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x1000000}, 0x0) 00:20:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x2, 0x1, 0x2, 0x3ff}, 0x100, 0x7, 0xfffffffffffeffff}) 00:20:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2, 0x4, 0x5, 0x0, 0x1d, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffe}, @in6={0xa, 0x4e20, 0x4, @mcast1, 0x5}}, @sadb_x_filter={0x5, 0x1a, @in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x1f, 0x4, 0x12}, @sadb_x_sa2={0x2, 0x13, 0xb1, 0x0, 0x0, 0x70bd2a, 0x3502}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e23, @remote}}]}, 0xe8}}, 0x810) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000100)="c7a1d78e130d8bc4d5b937b31c113c35357002b39c342a38e235b28677f3f33cb3eaab8310d8efac693aca113680dc7c8331bfb532b17ff48f3459b8d2cd9dbefe901f834e", &(0x7f0000000180)=@udp=r1}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x541b, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000)="864d6509c729cd0eda697a379663da3a52d7c23b3d27cd16fcfdeb79a434e062390b5298890f", &(0x7f0000000040)=@udp=r1, 0x4}, 0x20) 00:20:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x496203) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = fsmount(0xffffffffffffffff, 0x1, 0x77) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x1, 0x0, 0x3, 0x7}}) 00:20:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:49 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) r3 = fsmount(r2, 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000480)={0x4, 0xb1}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x34, 0x65, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {0xfff1, 0x7}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x10080, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001300)="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", 0x100c}, {&(0x7f00000002c0)="20368b5e7a1362dc3078ff1d1e9a041a00edb50c3b89bd8fba7eac1cf6d82e918da9af97a22362a880970fa2d5d9ccdbb26f0eae62811a2144e1021342646150bf44cb9a8dec12068a9f89cd7d9e002541ee74d17c4a0600e752fa99a37f88e889e95c3b03513a60af6550ba1dabb5ec775517146914363511fcf572a8ad33f0f61811d953f7f7149a3682c39d03806c7f74646f2484fd43580bc405df31c25f80868762a9d1cde73891f3ca4891fb2cb3eabada88c34f4df253f4951363a4bfc0852ee919c66cf366ed7094af2667ab8b199bfb5d0100000000000000dc00c250f48dbfc86fc00f200648e9a765327263cb6407d76eb8f1fb18b82e7273c588f5640ee6", 0x104}, {&(0x7f00000000c0)="cd34a0a839f8a4956c539d071e77c7f0a6bec49ae1818baa19a37112001e767669cb991e87f359b232280241de12dfc29e50107deb0cbac58f9a60b0cfb23d475a67acfe37b97a0c0a86f0e32c361ab18d6a5a13c3d6d2aa8ea7aed2dccf9c5439662e0ef9ac886c745dc457a0f4294fb74434610000000000000000b8655e164abe9f9138afaf4b14883b89110c8fdd45acd6d9d8e5c1623e8184f15862ac3d85afdf1da8a2b7e51f47", 0xaa}, {&(0x7f0000000200)="2764528682cedffdcaf9f054c2af62d4f5d75e0e29050000000071c7b0cf220fd801666644cb669498bff1e1f24ad816a29c6a4fa1f820feb94502da35bc8021", 0x40}], 0x4, 0xc, 0x0) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) (async) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000480)={0x4, 0xb1}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x34, 0x65, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {0xfff1, 0x7}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x10080, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) process_madvise(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001300)="388598f1f8928f198aa5579cb4971427cc605e40ee0856ec370efd19c5fe06c37d01963f24b9eb02f07611305839a631c35db6a94a39719f5d94b62d18e01c88f9f20f26f983a2a3171411156bcde620f378cd8e823e01097dae2958dd335308ddf6d28f4427d11540fa3ceecf41c9c62443ae7c6d5c1f9cfb252d5066a1e7a66d8efce31fd6886b969049412715863f4748caf96589f22a36f0a9f6424b2f9b9440bf39aad44e37aef096e67b49a6b3929859499c9f9720bb7ae3e0cf82514fe72f1a7c824221be55b17ed6a1c2e2a9d9eff357d8239558af24ec485daa6680f32ca2c28bdd90fd199cd9cf2cf8faac2138242d6fbc2b214473dce772e68e157bfae9ad3262cf5a7c7a907cccc9cb18c76b8ce3b45b21e3ae79f1708981e83feef861832b8352fe8347f07d07390ae60959f49351133fbe8d2089a2eb583a8f9f79299938ab09ac4f115f8890d9ca67127fb65ead3c9b9eeda08f3298be87e7f1a39041935577daa439d6b77fe5553be5c5a2ce7a224c1ef35b0a9dc363dc66e6b4f8eea9f653888d427db0d7c2d87fc3ec76c1fa40ef58c3f190663b630cc3e3d41a9f4cd7606f61788de80002b029933ff695b508a59ddc0b15a6530b65debc910f696b9e5ce4a850aac0159faf541999f336997109d7b9397b395bf784d5bc30475f2ddb3f3cabe6fecfb6257dc98042c724314e115e90e7e163449843f25f5f9055dff45d7c2d0744abe04f9e6c903345810ea4eb9db40ab47a206e458d473828c65905e9dce47741daf09c182028194312ab1878b4ca6eae59ccb18b3069c93078b4854f46f8f0e475333570cc21f4c1202486db210d2e4b2542a7e102edab71aef13d552643443c44caace553474fe37f49ea42afe8a1529cb585a8d33d7c05c68866243d94048c62d769949fc39d5e43281a96b11c43709590f34bd272d31270449ce4076dd407fb342284003cb1639cdd4ee0dd1d8bd16a1c530a8e1f66ce3bbd871ee59719fae4e81cd28a216a0e7cc58b3b5709d6a01161fd461de2157d130c22dc9f68027aa24fe136cb1d862aade82005752c54dd411ae6c11109407c71f97f86bf4e27ce5daceb4cd68bb8a82cf4761419f611e8132d319f869caab0c8c33063404f32e0553c02181f7c3a8f01eaee5d9801d1bf9f85571c0c4dcbdccfef3c169251a33ddb52c75ead688ef69f35e0a794bad4d7575cc14aecc70ba2f382f3e0579c9eab17ef0dc0a96e7a8e25091320049f34b5c6c5b2ecd44ba9d30f039be8c5f6d91e59d6c06cb22d310f56dac724b15d1da678bb12f83319ed3696ef31c6e5c27ccc006e5b5b5d522831c0ace03ad2a7fc06a0babb0975a3ccf2f7f255288517f442504f728ff053c134485e09a51141a2b7bd48c483b83f1a59b7731813c89a878677d33a7d0a0959d77754fc7a9f91f869b6065ca51aa038267684499067eeb93ddd43cb0f555000d5317a9e1d62cb64ce216912c908679a2114ca505bbd69a0d1fdb3dd85b81f90e14939cc081c7aca6c3c4dc1d8d450c49abddc292b097f00a076c403209d4f14f00d1d009aa7793307827395b9bd0cf8e3d593935cd59cff80b7a6fa2eda1f0c8db0986d9094625119cb86359b07e19640e82bf3ef057be00fa662ddd315ee8fbb7f287b50b333a432eb0b62f0d67b5daac4dc2a0e1da24193daad2bde1a28da0d5a1dca53d4140da10ea8505e4808c3d722fd01077e17e440d14da00f51c5874c3be1340411266991f7d6f845cc6d5988bcae83473916cd058e27dc6446559e5d81d209c9300c0b1c176b1f0cefdd1bc91c143804e77499f49dd98b5ce1cb04d403c46526aef2c02459314e592fbb1f3c92b89883b57cc549b63e3c9deb727517e79f05a865940ab133fafafa68ce9da3ed6c156c701ef56dbc1e838df65b7a7183dde29f575d5c41bb5c86142adecb85e98da3c0e9ce4791b36ebf6b4575b425d84ca8ac53e68413ade94580ca85d0d450e0fbaee0c742a756ce9e54184270972ad7898cf0d63b8094fd7fe920e1ca5eabbb3f0da156718085b2690f586471fce0a484bec9f27a98ef9cf717a626cace8f4efe21f072bf24911c68f9ccc397e9e1351e05a6b2cdaa05833a755afb99964fd7caf9fbea44c367b743aa73fe7caf6384d335a457bd45c0a020107d338c354db299ee8cacd80c8b72c77c5e180edb75fc4f0babe47b39af59e20000aebdfcc659edea3ea2341073ccc03eadf1f0679a9c5daac4573382917ac1f4dc05cb2d8a00b3ce43ec1b82856d770403c1a514f7eae6b5fe6987ac7318c39d2d2e81f1f6cc6e498e119b3a84876cdb652ab4fcff87aa068b4d9d69fac637c7d3df97c9ef29a86615f4b782c68a6efda05b66190d1de91729aa337ff417a673a4dcdc2d745402920bf077b145971d1c3934d1d87cac56e687d45df3f31a6c271b514847907301595bc872313feacad237b2b47b66fcde9383418b8babc6b770db62038014d425238187c2730de3574f63eab718bfcb277d2da01d2fcfc9a71925d0a9418b8d92f1d7e6eb98f2ec7f3a385840e65217066d02994ee7b4dbd0108522ef31d97703cd2290244c874f6834c687faf9defa5dfe11a8342be76b128dab0679ad161ee497c1915dc2aa6ddf084a7a634cff93cae4db4e0932eda47a67e21f8bc12930eece2a975e2585fe75a469320285b65cf31c3b4e36f56bd2e09b96846747b4980b5f83509653a83663233a48f67e69f5d10efa20a6ea7dc185d7cc3dfe5486238a59351e17f09d78a49dce1e4e5f0b57f35af06731320ecbac47fa04baba65206c3fb5cf651161b386b19dd07621943920543fdfdb201a846b95570787055b62abbf5ac6e8e1594a1acfb24bfa2e589e6015f9bc0757708ccd77302d4862d4fed8c8d49e20a2e239d8007e97cd89e50f4b5ce3527fda34ea0325610326d0345038f7e0c2bedf031dd59dd31d0bd067f77daa80ef3b2ad0c1c4c32f5f1d4ad0a8f459e9556b9be32a16858b28b6dd31ea5388ef7ed71e63ca7e5c3bd6b0b0ff99815690b35a94a5b521d980f1fb01be783b9ab2a5d10d7e68ff7553262ec9dea34631bf705fa9c12c118e8c86ec02e31242d0b7b7d327ce6a2b40280675817f1dc414fb15a22b58f5c589997152f53e6dd988c3bdcb8b086015d2cb5010452b7aa0826c8ba1b6ba7aa61272af00ba421026f88c523960d8997b5991349a664a3d9f3648f762a2aa89820cf0bd2194224479d4698e45ddf800bdbeac8f796e835b306c06706e4cef8ea906ac0206c50f2ae4609d329214bd4e60f452c7df5dfde769a7245683bec4ffbc3ad8157e8dcd13e4bc386b4d69a6ba8eb0ffd79d1fa58d1bff324263480d271128ade678dc15f82522f907853b658b443c563569426ac4db2b6fda17c90ae305b7b47cbd02c8060784efdf9a0f6f76c5a6fb6f22d579c2455e2bd7f2585de79cc6fc4d1f0cc43ca257d9f39c4615d3b9bc9506340320c8a9036215797d95ad7275bb8c53751449019f63044890d0d25ca7a824337c252c3b032021e2508a7d057f04ced5c6a11e96dcd0a2800d899a163c97daf6b5524e70aa4823a5e1973cbcb5a188b3035c1c4b9a56eee2df6330604e4aef11a7b8ad9eaff3817ee3559c9d8cddfaef85c577b521d338a37c179bd6a40a67bc6be57c6999300343f3c743fffdc4c9e873961d3ba98600769e43309513425f1adaef78d23f82214da7b3c08a41fbf905f5be05a214bb3999d4d5db9f4156f6494cdbeec1fac11aa968743e8cc2d323be4f52b620be7deeb44bb30d0866badb4cf15300fde746aebf9e2d441399c307408accf76cc64e6601c21a22aacb261a97f0b5b9958cad458e7f712c5945e54be365ed745098823933dd48140aae4c6b3d520f95a09253be98ed45f2acdc99a426f1f461c7eea8f12f60b889f358a53397b36ae850554c2f4c42399b29a2c384dcdac7951e28611c4b744bc37ce5bb17093220213147b0f81a3ad429b9f9c09ce450149136616cbe0d87446b6f69dcee3f1aff66f922ad75ef5df7beae48530b22ff7b0b74f6ec69631c8d429c91325e2f33b1365384a0e8a22128c53c85d163f43d1f684c3ccec8fe45a8717f36d075688850ef71a9852a8688627ee14c445cbb5877bf4f5e2c532e66b6d532de8ab380bb37bb5d451501ad794b6f48e07c3868190537bd365394176558bbf412706127e518e7f69e09b1af0fea2b4a58b29ef7ade8dbdb8f933380f40bb668af7a4f8d4e2ac8a0c07299033dc04dcbbf2a096e0559161a9071eecd08630b99a84cbb799fb33abff2c59b4a8c485550efa6c5405cef0d402949e8766115f257bea9f887fda27199803ddb99e122be3938720e8d1d7c22c1944bf888eb0d31d1621ef3180a7d509456834f0e970549ea7337b1b5e1399642c9c42e8278f80dfb462249c0744decb6bd1a924afb584af83e19e6628c4ffdd0a97383c8065189148675e30aacebbd183fbe4dab53e246fd5d31bffa2dff061045e128a79e243822ecb400c7a0d5e0597f617047f5aab6d2f7a7732617d97264e4458ba0f0a9e0838a4096135791d8774058a03ccb26e3fcf00c7657e5ebbbfcb2d8a28585ea8a6da04efbebd29ba9d59da93d9bf43297783cd2399fe0044b871eaf27e5b64bc9b3869a77fbc10656fd613e318cfa4d76a45caf8c46469620000e59c75e64aff221760a3eb5f515859aed6ed868e88d6f383d0a8d5d7471f3091bba70b8e1f52d6c85a4af619cb31cb41452e4e6cdddb90e6a0644e50d6b443f3d48b2b0c721f8a28fa7cf6520c98aeb8ff91170bb1321b0becaff23880a6b1417d9650696bed42fb355221883ad804481a28dbd9c2f0a82d52359331f3e211f85fdcbd4efbf51afd94b71dafa93f829bebad0869f5cd38175f7d6ff43ac49d745e8c58cd53846470556d7a6d84d2cf705cce8acc9b6e56655ee34d432c0de14450856e5e43ca51acd6674fea8d45d6481dc5f2be803cbd6b1fc09546292ea0802f1d8a451c9647603ef53f5d69b61909c205ca0302694a92fbf039000f9c38d50f65596e5b6428914bed6725e2e8dbe09c008d64890f94ad31402eb9ed0f1152e21efcc739ef61eb38c98db883d12b37cb5bdad782fc0ec978e12b4bbb2cead260320ed49d976625b267fe499472b3604d9933ff81c71e84854e72c542e09b33577707386ae6be05ab751fcc5f9a3ec51f273462954f70da1c2e24095a56f1490792a79cbce006da1c83c64b16fd378a2d40c63da39a9c5e78a01521490d6c2edec3d497fac5719a4bfb84b4c2f6207f1d833c1e41f308561ebb864f6d51ed66a8894eefe52cb4bdb39f8e1bff0d81dd392b4aac82b39034b8d60a2feaee4a245aa84fd502126b78ab2c4aa2943ec6a697238ce4e089c5b1d76166ace490045d627c04d4a11aa1feac6d25a22d87003e5f03221bdc8b332958a15bb5d192a3f97ac468ec1d2fd9a98ce00d48747a68ebf6bbce4fe0b1732f1ec2b78e0d3c43062a39a74f942e247870e89d4ba11af2feb578f1b3ac07dd311e76dc67bb9483a90cc37f8eeea3de8f3860adc42dac8f7220de05800f5e7a9eae715c56eb802bea6c2ab553c56c17cb151247ff4b25a8367755ff85685dc6a73e5ae49d0f5ae11c15585d485d2dc386cb7ef211c9e7c65bcff5df85da05d16e3a3e24055b8447ae056deca7fb94ee4db84043c1276199f79f746311e08d5a08f356d181fe10f5e1b9f66a4691adb134fbd685b35f7d7a35d1631235a24a29baf61b10856731a31522ffe0d069550a2b2f5726c9fe2fa0e613cb74b5717", 0x100c}, {&(0x7f00000002c0)="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", 0x104}, {&(0x7f00000000c0)="cd34a0a839f8a4956c539d071e77c7f0a6bec49ae1818baa19a37112001e767669cb991e87f359b232280241de12dfc29e50107deb0cbac58f9a60b0cfb23d475a67acfe37b97a0c0a86f0e32c361ab18d6a5a13c3d6d2aa8ea7aed2dccf9c5439662e0ef9ac886c745dc457a0f4294fb74434610000000000000000b8655e164abe9f9138afaf4b14883b89110c8fdd45acd6d9d8e5c1623e8184f15862ac3d85afdf1da8a2b7e51f47", 0xaa}, {&(0x7f0000000200)="2764528682cedffdcaf9f054c2af62d4f5d75e0e29050000000071c7b0cf220fd801666644cb669498bff1e1f24ad816a29c6a4fa1f820feb94502da35bc8021", 0x40}], 0x4, 0xc, 0x0) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) (async) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x2000000}, 0x0) 00:20:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2, 0x4, 0x5, 0x0, 0x1d, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffe}, @in6={0xa, 0x4e20, 0x4, @mcast1, 0x5}}, @sadb_x_filter={0x5, 0x1a, @in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x1f, 0x4, 0x12}, @sadb_x_sa2={0x2, 0x13, 0xb1, 0x0, 0x0, 0x70bd2a, 0x3502}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e23, @remote}}]}, 0xe8}}, 0x810) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000100)="c7a1d78e130d8bc4d5b937b31c113c35357002b39c342a38e235b28677f3f33cb3eaab8310d8efac693aca113680dc7c8331bfb532b17ff48f3459b8d2cd9dbefe901f834e", &(0x7f0000000180)=@udp=r1}, 0x20) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x541b, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000)="864d6509c729cd0eda697a379663da3a52d7c23b3d27cd16fcfdeb79a434e062390b5298890f", &(0x7f0000000040)=@udp=r1, 0x4}, 0x20) 00:20:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x2, 0xa86, 0x3, 0x60000000}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x26a800) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x448000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000100)={{0x0, 0x3, 0x401, 0x3, 0x6}, 0x100000000, 0x8000000000000000, 0x799a}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/22) 00:20:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x496203) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) r1 = fsmount(0xffffffffffffffff, 0x1, 0x77) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x1, 0x0, 0x3, 0x7}}) 00:20:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x496203) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = fsmount(0xffffffffffffffff, 0x1, 0x77) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x1, 0x0, 0x3, 0x7}}) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x3000000}, 0x0) 00:20:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:20:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x2, 0xa86, 0x3, 0x60000000}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x26a800) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x448000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000100)={{0x0, 0x3, 0x401, 0x3, 0x6}, 0x100000000, 0x8000000000000000, 0x799a}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/22) 00:20:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2, 0x4, 0x5, 0x0, 0x1d, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffe}, @in6={0xa, 0x4e20, 0x4, @mcast1, 0x5}}, @sadb_x_filter={0x5, 0x1a, @in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x1f, 0x4, 0x12}, @sadb_x_sa2={0x2, 0x13, 0xb1, 0x0, 0x0, 0x70bd2a, 0x3502}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e23, @remote}}]}, 0xe8}}, 0x810) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000100)="c7a1d78e130d8bc4d5b937b31c113c35357002b39c342a38e235b28677f3f33cb3eaab8310d8efac693aca113680dc7c8331bfb532b17ff48f3459b8d2cd9dbefe901f834e", &(0x7f0000000180)=@udp=r1}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x541b, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000)="864d6509c729cd0eda697a379663da3a52d7c23b3d27cd16fcfdeb79a434e062390b5298890f", &(0x7f0000000040)=@udp=r1, 0x4}, 0x20) (rerun: 64) 00:20:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)="f971fecc8f18ab50b1f219c7052159714c6ad4dd8886b9aa397d80c2b053076523805ca66204b1d1e33c25", &(0x7f0000000080)=""/67}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x9, 0x1, 0x0, 0x80000000, 0x0, 0x1}, 0x72af) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)="f971fecc8f18ab50b1f219c7052159714c6ad4dd8886b9aa397d80c2b053076523805ca66204b1d1e33c25", &(0x7f0000000080)=""/67}, 0x20) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x9, 0x1, 0x0, 0x80000000, 0x0, 0x1}, 0x72af) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x2, 0xa86, 0x3, 0x60000000}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x26a800) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x448000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000100)={{0x0, 0x3, 0x401, 0x3, 0x6}, 0x100000000, 0x8000000000000000, 0x799a}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/22) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x2, 0xa86, 0x3, 0x60000000}}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x26a800) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x448000, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000100)={{0x0, 0x3, 0x401, 0x3, 0x6}, 0x100000000, 0x8000000000000000, 0x799a}) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/22) (async) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x4000000}, 0x0) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000600)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='{^*^{\x00', 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000600)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='{^*^{\x00', 0x0, r2) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:20:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x3, 0xe35, 0x3, 0xffff}, 0x0, 0x1000, 'id0\x00', 'timer0\x00', 0x0, 0x100, 0x904, 0x0, 0x101}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x60000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000180)={{0xfffffffffffffffc, 0x0, 0x4, 0x3, 0x800}, 0xffffffffffffffff, 0x5}) r2 = fsmount(0xffffffffffffffff, 0x0, 0xfa) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 00:20:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)="f971fecc8f18ab50b1f219c7052159714c6ad4dd8886b9aa397d80c2b053076523805ca66204b1d1e33c25", &(0x7f0000000080)=""/67}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x9, 0x1, 0x0, 0x80000000, 0x0, 0x1}, 0x72af) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)="f971fecc8f18ab50b1f219c7052159714c6ad4dd8886b9aa397d80c2b053076523805ca66204b1d1e33c25", &(0x7f0000000080)=""/67}, 0x20) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x9, 0x1, 0x0, 0x80000000, 0x0, 0x1}, 0x72af) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0) 00:20:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(0xffffffffffffffff, 0x0, 0xb) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000200)=0x29800000) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xffffffffffffff5f) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r3 = fsmount(r1, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x8d, 0x805, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r4}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000280)) fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f0000000240)=0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x1, 0x0, 0x400, 0x0, 0x7}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 00:20:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x3, 0xe35, 0x3, 0xffff}, 0x0, 0x1000, 'id0\x00', 'timer0\x00', 0x0, 0x100, 0x904, 0x0, 0x101}) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x60000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000180)={{0xfffffffffffffffc, 0x0, 0x4, 0x3, 0x800}, 0xffffffffffffffff, 0x5}) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0xfa) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000600)) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='{^*^{\x00', 0x0, r2) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0) 00:20:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000040)) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(0xffffffffffffffff, 0x0, 0xb) (async) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000200)=0x29800000) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xffffffffffffff5f) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r3 = fsmount(r1, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x8d, 0x805, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r4}) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000280)) fsmount(0xffffffffffffffff, 0x0, 0x2) (async) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f0000000240)=0x3) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x1, 0x0, 0x400, 0x0, 0x7}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 00:20:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000013c0)={&(0x7f0000000200)="cd369c8e69c8f40d17071459bffdee6062565f23ee4e1391a3474ccecb8b75c581ec049054935c48e131635e58914f214c379d475e83ba12bd26cf026ee93ed324c1ad18c49fc3c5b36beb61f914b95f60ebc3bb9147b01129c977757eba7de9ebd9b538c97bddd43239ea4ef3a255927e78c31f19287decec58f2cde019db23675bf96781b83223ebd0a7b263feddb172f60aba57b7934bef2ce107e71752d892e93f7b8f129b5b66919a127b", &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)="37d3be4aa488814f907a5cf2e75fa9f2125efb3363487bc28c496d6f5b3ec19f49e29f1f2f0fb845eadcd6af89c15abd716cce216128767dcc1fb8b41e9a35472647b33e7b20fc333c06507f15299298bd02f8510f4f717c4fd4c3edad95028e34c83bc8f51882cfa718fc2ec9768d95862d4dae32c66566f9d3f8bfc3c874ef94a01d16f3d1bfe7e7d31da94dff8a45d41a54", &(0x7f0000001380)="814a371f962d509b", 0x2, 0xffffffffffffffff, 0x4}, 0x38) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x401, 0x0, 0x1000}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000100)={{0x3, 0x2, 0x4, 0x2, 0x1}, 0xae, 0x9, 0x7}) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000080)=0x400) 00:20:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0) 00:20:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x3, 0xe35, 0x3, 0xffff}, 0x0, 0x1000, 'id0\x00', 'timer0\x00', 0x0, 0x100, 0x904, 0x0, 0x101}) (async, rerun: 64) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x60000) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000180)={{0xfffffffffffffffc, 0x0, 0x4, 0x3, 0x800}, 0xffffffffffffffff, 0x5}) r2 = fsmount(0xffffffffffffffff, 0x0, 0xfa) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0x80000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x8001, 0xe01, 0x80000001, 0x1501, 0x1, 0xd61, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000040)="a717d4121b82c7b2a156bc3e7e692e1b906374453ac623e3daa5e73f349b497b52d466f3091f1f93109d342c45b4ffb5c2c60ce4a776b01c626cbcd938de9151e2ec22b41f23dfd56996ec969149df4ce2077951", &(0x7f00000000c0)=""/54, &(0x7f0000000100)="a2686a4e7648d0e36019bc94d43551a3927704fef5bfd5e1faaf1ea350b813fc45ae0718437505344deeee54f05d1f6b740d8c97762dfdcc868449547e2f8f57ca43cc1753a9dc6cdfc82af633015796ccb60900c0de03fba5a1dcf1d3bb469890192baac7a950a3b771cdcee7368f461904fffea7de62d448f4f28d27cd76666691a870dd81df7b38d124a07dd00716df92ab5a4bdd84f9e5adf9d701579a57d9553d086a9db89e64113d404cd019709f1e9f2f90c04a1fc32f7012526226d6b290a34e3010396e89612998f24a8e20189b841a98cf4da65657ee32e79a0fd448fd1507147926c165a34f9445", &(0x7f00000002c0)="5e1eddbf85e57c256810f60aef039e46dff600a400351ba7196d01bafae2e7244d32f54bd8128f83be71df5c4c0e9864a441d9454d5fa1d62e95c7c54cb8d4eb65c3546ea5a935fe0235174c6be48a03691bd0f3fce069001868d388aa2db1f1511e72b8c2028e9788d810e5a396da30e04335d5ef9de4b30cdb09e76e81ae87a47dec0d18c676010d8a122d9e6759ee65255cf5383f4f4ead1dfe732711a644ecfa3ec51d0480affdf0e4fe0a8aea1abb43efa2d0f441c52c76735710b443f8f68913c2957457acd0582f0f922c14fdb818db4c0053d7a1", 0x4, r1}, 0x38) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000013c0)={&(0x7f0000000200)="cd369c8e69c8f40d17071459bffdee6062565f23ee4e1391a3474ccecb8b75c581ec049054935c48e131635e58914f214c379d475e83ba12bd26cf026ee93ed324c1ad18c49fc3c5b36beb61f914b95f60ebc3bb9147b01129c977757eba7de9ebd9b538c97bddd43239ea4ef3a255927e78c31f19287decec58f2cde019db23675bf96781b83223ebd0a7b263feddb172f60aba57b7934bef2ce107e71752d892e93f7b8f129b5b66919a127b", &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)="37d3be4aa488814f907a5cf2e75fa9f2125efb3363487bc28c496d6f5b3ec19f49e29f1f2f0fb845eadcd6af89c15abd716cce216128767dcc1fb8b41e9a35472647b33e7b20fc333c06507f15299298bd02f8510f4f717c4fd4c3edad95028e34c83bc8f51882cfa718fc2ec9768d95862d4dae32c66566f9d3f8bfc3c874ef94a01d16f3d1bfe7e7d31da94dff8a45d41a54", &(0x7f0000001380)="814a371f962d509b", 0x2, 0xffffffffffffffff, 0x4}, 0x38) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x401, 0x0, 0x1000}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000100)={{0x3, 0x2, 0x4, 0x2, 0x1}, 0xae, 0x9, 0x7}) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000080)=0x400) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xc) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000013c0)={&(0x7f0000000200)="cd369c8e69c8f40d17071459bffdee6062565f23ee4e1391a3474ccecb8b75c581ec049054935c48e131635e58914f214c379d475e83ba12bd26cf026ee93ed324c1ad18c49fc3c5b36beb61f914b95f60ebc3bb9147b01129c977757eba7de9ebd9b538c97bddd43239ea4ef3a255927e78c31f19287decec58f2cde019db23675bf96781b83223ebd0a7b263feddb172f60aba57b7934bef2ce107e71752d892e93f7b8f129b5b66919a127b", &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)="37d3be4aa488814f907a5cf2e75fa9f2125efb3363487bc28c496d6f5b3ec19f49e29f1f2f0fb845eadcd6af89c15abd716cce216128767dcc1fb8b41e9a35472647b33e7b20fc333c06507f15299298bd02f8510f4f717c4fd4c3edad95028e34c83bc8f51882cfa718fc2ec9768d95862d4dae32c66566f9d3f8bfc3c874ef94a01d16f3d1bfe7e7d31da94dff8a45d41a54", &(0x7f0000001380)="814a371f962d509b", 0x2, 0xffffffffffffffff, 0x4}, 0x38) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(0xffffffffffffffff, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x401, 0x0, 0x1000}}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000100)={{0x3, 0x2, 0x4, 0x2, 0x1}, 0xae, 0x9, 0x7}) (async) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000080)=0x400) (async) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x300000000000000}, 0x0) 00:20:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) 00:20:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000040)) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async, rerun: 64) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(0xffffffffffffffff, 0x0, 0xb) (async) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000200)=0x29800000) (async, rerun: 32) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xffffffffffffff5f) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) r3 = fsmount(r1, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x8d, 0x805, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r4}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xc) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000280)) (async, rerun: 32) fsmount(0xffffffffffffffff, 0x0, 0x2) (async) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f0000000240)=0x3) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x1, 0x0, 0x400, 0x0, 0x7}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0x80000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x8001, 0xe01, 0x80000001, 0x1501, 0x1, 0xd61, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000040)="a717d4121b82c7b2a156bc3e7e692e1b906374453ac623e3daa5e73f349b497b52d466f3091f1f93109d342c45b4ffb5c2c60ce4a776b01c626cbcd938de9151e2ec22b41f23dfd56996ec969149df4ce2077951", &(0x7f00000000c0)=""/54, &(0x7f0000000100)="a2686a4e7648d0e36019bc94d43551a3927704fef5bfd5e1faaf1ea350b813fc45ae0718437505344deeee54f05d1f6b740d8c97762dfdcc868449547e2f8f57ca43cc1753a9dc6cdfc82af633015796ccb60900c0de03fba5a1dcf1d3bb469890192baac7a950a3b771cdcee7368f461904fffea7de62d448f4f28d27cd76666691a870dd81df7b38d124a07dd00716df92ab5a4bdd84f9e5adf9d701579a57d9553d086a9db89e64113d404cd019709f1e9f2f90c04a1fc32f7012526226d6b290a34e3010396e89612998f24a8e20189b841a98cf4da65657ee32e79a0fd448fd1507147926c165a34f9445", &(0x7f00000002c0)="5e1eddbf85e57c256810f60aef039e46dff600a400351ba7196d01bafae2e7244d32f54bd8128f83be71df5c4c0e9864a441d9454d5fa1d62e95c7c54cb8d4eb65c3546ea5a935fe0235174c6be48a03691bd0f3fce069001868d388aa2db1f1511e72b8c2028e9788d810e5a396da30e04335d5ef9de4b30cdb09e76e81ae87a47dec0d18c676010d8a122d9e6759ee65255cf5383f4f4ead1dfe732711a644ecfa3ec51d0480affdf0e4fe0a8aea1abb43efa2d0f441c52c76735710b443f8f68913c2957457acd0582f0f922c14fdb818db4c0053d7a1", 0x4, r1}, 0x38) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x400000000000000}, 0x0) 00:20:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xc) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000013c0)={&(0x7f0000000200)="cd369c8e69c8f40d17071459bffdee6062565f23ee4e1391a3474ccecb8b75c581ec049054935c48e131635e58914f214c379d475e83ba12bd26cf026ee93ed324c1ad18c49fc3c5b36beb61f914b95f60ebc3bb9147b01129c977757eba7de9ebd9b538c97bddd43239ea4ef3a255927e78c31f19287decec58f2cde019db23675bf96781b83223ebd0a7b263feddb172f60aba57b7934bef2ce107e71752d892e93f7b8f129b5b66919a127b", &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)="37d3be4aa488814f907a5cf2e75fa9f2125efb3363487bc28c496d6f5b3ec19f49e29f1f2f0fb845eadcd6af89c15abd716cce216128767dcc1fb8b41e9a35472647b33e7b20fc333c06507f15299298bd02f8510f4f717c4fd4c3edad95028e34c83bc8f51882cfa718fc2ec9768d95862d4dae32c66566f9d3f8bfc3c874ef94a01d16f3d1bfe7e7d31da94dff8a45d41a54", &(0x7f0000001380)="814a371f962d509b", 0x2, 0xffffffffffffffff, 0x4}, 0x38) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x401, 0x0, 0x1000}}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) (rerun: 64) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (rerun: 32) fsmount(r2, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000100)={{0x3, 0x2, 0x4, 0x2, 0x1}, 0xae, 0x9, 0x7}) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000080)=0x400) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0x80000000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x8001, 0xe01, 0x80000001, 0x1501, 0x1, 0xd61, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000040)="a717d4121b82c7b2a156bc3e7e692e1b906374453ac623e3daa5e73f349b497b52d466f3091f1f93109d342c45b4ffb5c2c60ce4a776b01c626cbcd938de9151e2ec22b41f23dfd56996ec969149df4ce2077951", &(0x7f00000000c0)=""/54, &(0x7f0000000100)="a2686a4e7648d0e36019bc94d43551a3927704fef5bfd5e1faaf1ea350b813fc45ae0718437505344deeee54f05d1f6b740d8c97762dfdcc868449547e2f8f57ca43cc1753a9dc6cdfc82af633015796ccb60900c0de03fba5a1dcf1d3bb469890192baac7a950a3b771cdcee7368f461904fffea7de62d448f4f28d27cd76666691a870dd81df7b38d124a07dd00716df92ab5a4bdd84f9e5adf9d701579a57d9553d086a9db89e64113d404cd019709f1e9f2f90c04a1fc32f7012526226d6b290a34e3010396e89612998f24a8e20189b841a98cf4da65657ee32e79a0fd448fd1507147926c165a34f9445", &(0x7f00000002c0)="5e1eddbf85e57c256810f60aef039e46dff600a400351ba7196d01bafae2e7244d32f54bd8128f83be71df5c4c0e9864a441d9454d5fa1d62e95c7c54cb8d4eb65c3546ea5a935fe0235174c6be48a03691bd0f3fce069001868d388aa2db1f1511e72b8c2028e9788d810e5a396da30e04335d5ef9de4b30cdb09e76e81ae87a47dec0d18c676010d8a122d9e6759ee65255cf5383f4f4ead1dfe732711a644ecfa3ec51d0480affdf0e4fe0a8aea1abb43efa2d0f441c52c76735710b443f8f68913c2957457acd0582f0f922c14fdb818db4c0053d7a1", 0x4, r1}, 0x38) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x10000, 0x7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x2, @empty, 'team_slave_0\x00'}}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x8, 0x469}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000100)=""/102, 0x66, &(0x7f00000002c0)=""/226, 0x1, 0x2}}, 0x48) 00:20:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000000c0)={{0x3, 0x3, 0x772d, 0x1, 0x1d7dfba6}, 0x8, 0x82, 0x5}) 00:20:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'sit0\x00'}}, 0x1e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r2 = fsmount(r1, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0x10000000) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0xfffffffffffffff8, 0x0, 0x1}) 00:20:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={&(0x7f00000001c0)="793dd91dc05b613bd27aa88f58a6f4ef7c8fe0aff792124d0a9468d8a32f5a521cbaf3bec924084165acb371832f93bc0ca7f5496294f4d34bc00aceb1f53b83734d91a444de41294c843571a46f4c", &(0x7f0000000240)=""/230, &(0x7f0000000040)="1a2346c751663686f6400d068869409a40749ee5ba137c6b541c147b", &(0x7f0000000340)="b564399858a22995a6b951560010715e66691edb301f0f4895c1e91365b26da621c105c4d78a98b20b938289d51bfd64d20dfcea97752b02e886365716063460d170da673fa8337573c9afe030ea74d29c47294b2de7f5d6c5f79cf3f2cd63915519c7b6d1892128d5120409cfff9e85e0b0d969d1", 0x8, 0x1}, 0x38) r1 = fsmount(0xffffffffffffffff, 0x1, 0xa) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/242) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'syzkaller0\x00'}}) 00:20:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x10000, 0x7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x2, @empty, 'team_slave_0\x00'}}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x8, 0x469}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000100)=""/102, 0x66, &(0x7f00000002c0)=""/226, 0x1, 0x2}}, 0x48) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x10000, 0x7a}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x2, @empty, 'team_slave_0\x00'}}) (async) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x8, 0x469}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000100)=""/102, 0x66, &(0x7f00000002c0)=""/226, 0x1, 0x2}}, 0x48) (async) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 00:20:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000000c0)={{0x3, 0x3, 0x772d, 0x1, 0x1d7dfba6}, 0x8, 0x82, 0x5}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) fsmount(0xffffffffffffffff, 0x0, 0xf0) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000000c0)={{0x3, 0x3, 0x772d, 0x1, 0x1d7dfba6}, 0x8, 0x82, 0x5}) (async) 00:20:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'sit0\x00'}}, 0x1e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r2 = fsmount(r1, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0x10000000) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) (async) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0xfffffffffffffff8, 0x0, 0x1}) 00:20:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={&(0x7f00000001c0)="793dd91dc05b613bd27aa88f58a6f4ef7c8fe0aff792124d0a9468d8a32f5a521cbaf3bec924084165acb371832f93bc0ca7f5496294f4d34bc00aceb1f53b83734d91a444de41294c843571a46f4c", &(0x7f0000000240)=""/230, &(0x7f0000000040)="1a2346c751663686f6400d068869409a40749ee5ba137c6b541c147b", &(0x7f0000000340)="b564399858a22995a6b951560010715e66691edb301f0f4895c1e91365b26da621c105c4d78a98b20b938289d51bfd64d20dfcea97752b02e886365716063460d170da673fa8337573c9afe030ea74d29c47294b2de7f5d6c5f79cf3f2cd63915519c7b6d1892128d5120409cfff9e85e0b0d969d1", 0x8, 0x1}, 0x38) r1 = fsmount(0xffffffffffffffff, 0x1, 0xa) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/242) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'syzkaller0\x00'}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={&(0x7f00000001c0)="793dd91dc05b613bd27aa88f58a6f4ef7c8fe0aff792124d0a9468d8a32f5a521cbaf3bec924084165acb371832f93bc0ca7f5496294f4d34bc00aceb1f53b83734d91a444de41294c843571a46f4c", &(0x7f0000000240)=""/230, &(0x7f0000000040)="1a2346c751663686f6400d068869409a40749ee5ba137c6b541c147b", &(0x7f0000000340)="b564399858a22995a6b951560010715e66691edb301f0f4895c1e91365b26da621c105c4d78a98b20b938289d51bfd64d20dfcea97752b02e886365716063460d170da673fa8337573c9afe030ea74d29c47294b2de7f5d6c5f79cf3f2cd63915519c7b6d1892128d5120409cfff9e85e0b0d969d1", 0x8, 0x1}, 0x38) (async) fsmount(0xffffffffffffffff, 0x1, 0xa) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/242) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'syzkaller0\x00'}}) (async) 00:20:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000000c0)={{0x3, 0x3, 0x772d, 0x1, 0x1d7dfba6}, 0x8, 0x82, 0x5}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) fsmount(0xffffffffffffffff, 0x0, 0xf0) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000000c0)={{0x3, 0x3, 0x772d, 0x1, 0x1d7dfba6}, 0x8, 0x82, 0x5}) (async) 00:20:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) (async) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'sit0\x00'}}, 0x1e) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) r2 = fsmount(r1, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0x10000000) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x10000, 0x7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x2, @empty, 'team_slave_0\x00'}}) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x8, 0x469}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000100)=""/102, 0x66, &(0x7f00000002c0)=""/226, 0x1, 0x2}}, 0x48) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x10000, 0x7a}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x2, @empty, 'team_slave_0\x00'}}) (async) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x8, 0x469}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000100)=""/102, 0x66, &(0x7f00000002c0)=""/226, 0x1, 0x2}}, 0x48) (async) 00:20:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={&(0x7f00000001c0)="793dd91dc05b613bd27aa88f58a6f4ef7c8fe0aff792124d0a9468d8a32f5a521cbaf3bec924084165acb371832f93bc0ca7f5496294f4d34bc00aceb1f53b83734d91a444de41294c843571a46f4c", &(0x7f0000000240)=""/230, &(0x7f0000000040)="1a2346c751663686f6400d068869409a40749ee5ba137c6b541c147b", &(0x7f0000000340)="b564399858a22995a6b951560010715e66691edb301f0f4895c1e91365b26da621c105c4d78a98b20b938289d51bfd64d20dfcea97752b02e886365716063460d170da673fa8337573c9afe030ea74d29c47294b2de7f5d6c5f79cf3f2cd63915519c7b6d1892128d5120409cfff9e85e0b0d969d1", 0x8, 0x1}, 0x38) r1 = fsmount(0xffffffffffffffff, 0x1, 0xa) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/242) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'syzkaller0\x00'}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={&(0x7f00000001c0)="793dd91dc05b613bd27aa88f58a6f4ef7c8fe0aff792124d0a9468d8a32f5a521cbaf3bec924084165acb371832f93bc0ca7f5496294f4d34bc00aceb1f53b83734d91a444de41294c843571a46f4c", &(0x7f0000000240)=""/230, &(0x7f0000000040)="1a2346c751663686f6400d068869409a40749ee5ba137c6b541c147b", &(0x7f0000000340)="b564399858a22995a6b951560010715e66691edb301f0f4895c1e91365b26da621c105c4d78a98b20b938289d51bfd64d20dfcea97752b02e886365716063460d170da673fa8337573c9afe030ea74d29c47294b2de7f5d6c5f79cf3f2cd63915519c7b6d1892128d5120409cfff9e85e0b0d969d1", 0x8, 0x1}, 0x38) (async) fsmount(0xffffffffffffffff, 0x1, 0xa) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/242) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'syzkaller0\x00'}}) (async) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) (async) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0xfffffffffffffff8, 0x0, 0x1}) (rerun: 32) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) 00:20:49 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x6800, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, 0x4, 0x8, 0xb, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_lifetime={0x4, 0x4, 0xfff, 0x1, 0x80000001, 0x2}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}]}, 0x58}}, 0x48080) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:49 executing program 2: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)="e0945583b0334703da6756bfcefac43f22880fcb9d7919ac1ece28d780cec1ae7634be374a92ddb6c1191cc5b3b76eb6a6325d8025a85ba45ed46661509c115aec05ad31f788af3d8e8f95f93c3934dbf160215928b54453b64b414fbda32001a0bbcb8079979d21382eccc2077e474e8d43b29a4c54fd34a2d23ec66f56c89646537d9b66d332ea19e040d60ee8e075b41a7997ee42b780b5d71f8c65ce14a8e8f51fb2bd4190db4136651379ee3b085d466f06c1e4b617ea003eedb045918275ccb267f53854c75d9100b8547860ac166fb7dc38500e8cb311cf8b95", &(0x7f0000000140)=""/13}, 0x20) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f00000001c0)=0x80) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x10100) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000280)=""/151) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000200)=0xffff) 00:20:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x81, 0x6a2183) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x2], 0x1, 0xfffffff7, 0x5, 0x5, 0x0, 0x27d8, 0x2, {0x0, 0xfff8, 0xfff, 0x6, 0x4, 0xd805, 0x7, 0x0, 0x3, 0x0, 0x1, 0x9, 0x40, 0x80000000, "939831aba615469646c9bef02e60a8c28fb29ae16669cab467f6983bad980214"}}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000200)={0x7, 0x7, 0x4, 0x6e, &(0x7f0000000000)=""/110, 0xd7, &(0x7f0000000080)=""/215, 0x4a, &(0x7f0000000180)=""/74}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000380)="fa3ecb345b94e7a77546dfa7a7bfa5bf1c7e0cfe74820915551488f4958924571c4bc1f9685b2a8b731689304533a9de9700b6c7a236ee2532a1100e6cc6fa46ac6ed67159596f59c5d33f5afe96f1d1b0bb59912018027259676d2242e3dd674f9148d000a941c11fe85d7215e591c4c05ee2f6280a94e9936e0d7ad44bded6990a43c6eb27403516d88d2000cd35aa550529f139ee077bde87789102785c478677fb0e973ac5e200de87530977b083", 0xb0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x5421, 0x0) 00:20:49 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r0}, 0xc) r1 = fsmount(r0, 0x0, 0x7f) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000640)="62930d83173d6f603145837da37c2c2287e7ce6acc1255e6eec03bbda431696078a63b612d43dec729f7b67ce5758c47ea27d98d6d86fb05c4b77c87e4936a99ac3dac0e91f786ce5ab8b105d11d5ad351b3edb4209212f7e9d804d3cd23548977d5d3963a02719980c13f18e516cc1f78998e4f1dd4f7d0139f901325331b28e0a1a2b442837b8a0b5fd9c8ad4a7cedb737bfa36fa77d54fd3b8abe2dddef6a86b3da6a0bf95d8623e9f17470020d8ba18edb1c82e041ee7ec9c4bfa9f0179ae1feab3f5671b4893175b614b8a0bbd0a4ff635cb63775a63557d76935327657e2cd8945f0b098e64fecd17d1138981957bab351b7ed0f5b756c739ef57d8e996833b668fd19e9a2595b425ce19c137b8f0e8ad37668400d9e1407abec3d788996c0b5825bde115bcbfbf3586e7702ebdb8af8fb086de68f3282207a9dd42c1e2acd5b7f5a15fff10864ebcbbf9f9b4f8646467b1d8b65b5980816188c29430d71bfab26c57d57b0e8a266f38122ab676248afbc70dc56331958f1bbb7e91791f001e31227b95abe032c9a1c74436c98956cdda22614bce661563a8a72991b27d2a1014b4978359b7503712765a41e5daa1c8dab6d274dd1cd633071a1a480a9ad45ac9e05a8f206274fdab76d7285cd132ef80d9273e25a7117f2b03d92b54e5f812320757713205c0de4c01f2ebd2a865066ee692d6569caadc02ce076dbf5c45567dbc7b2866fcea84f65622088297610d91b6091541c0e9af8831efd831658775d1e48a4adfccfa955e1661081c97cb29c32be5bcf52635579d66a4bab0fe188233c8993276f2f05ea07c83a4a9b77941cfd922c8bf0feafbd27538d5efee294ca5eb88ceb96fa1c85ba94b84bcaf53f2a77391a64467024600a25ea83230d9eaaddff4ea37f2ad0d5d630433002b9ca8e509922be1f757fb37eafdedd19d6427b6f9aade3169e135b0ba8cd6c6ddbbf5621de5b701e7379d63e4ab92e95337eb3c8addec0cd930c7c16886ec4f8423b94ca73fd7805a5b862ffeb899a656eb6e23b910dfeedba4bdf9ffbb97f6c861f2493c8f2cc115ce6cb119d0e9943dd61ba72e7c7b38853bc22312eed027c84a072eabc09a105399268f9557abb6927214f308c151b8692c5afb024dace2715bcd31456be4be254a6138a13dc68649705f88de356421e3e35d28a0e036402ca95dadb2a98ef9ddba3a4e08556d4b3cf2dfd19167ccfe44b400b9fc46709ee0c6d6741c6f89a8aab02c772f70d42e28baac286564b763041647ccf8227d55fad069ab34ae5ded6014b4a73aa5d615bd01449e9669814c783614a721e4b2e63601cbd98faff627c1eb52be834ebdade2d86e61c9f360b59c1da6d5761f62191dde23a23a40312d92684c733ffa000b5f9254ebb83cdbb7c313fd4d643582230d24c5809504df46044f4d5523917e1520e876b6d0bfe8d4114cd0d31b6bb6c44606b0c2899349881ec842ec3d5af96afc1303e7892ae0fc954134ad66bda47cf981f2fe1a46f6f8c9d8576ec42d9282da839dd498c69dfa7f0386732b9d006efb4fef361ba48bf0cccff61b201e9f929583171a18eb108bd452b0807010e7f4ac3a9485dab6b99de7f44c42a9d477d62666a8cb0e573f5693301e32d8279d7be9428dd80e2269dd985ba3be71a2d37b7e8d142234671550ddcec5312aef5f9d8efed11dc15f189127641889e007d4911f72a7a7525e5965d98a46fc0a080b6d01e57fe2036037c7c7d22e49242e4192f2f87bf3a7248833daafc5af7762fa3b97f8876e7de42ec31fbe5bd84b42071f8724dbbf2b633649273a0007e1fa684bc1165a949c87c1d01bbeb0c58eae5519fc21333b90759022b8d689ab6329aa8d9ea56fbb2750bb4b481b712365f0640b5857a5bc1efa25d2ad77c2571a6c246af4dcdcca53b587b3b8ebc4a04415314e4506f70db286ed112c8ee3090a003667ecaca1c2dab2fb64250ae245e81bd77a76c12d9d572c6f12ba32ef4e8046b6e931e3a7fe26e30564a10478cf609ebde6fc38db5c0d62444dc0e57454aeb7f30014cc2ac6dbb360f30b181cdd96982a8c806ed062858e4d6d55381e14d060a6b567e5f6c406ebf6f415f5f1667cde262427be0de546bac33bde0faf167ba1843c735c93a0920511f8488f5700555d78b74cdc971dc7ff20970924658dbcfe283d1152fe6b5f219af83489e883569fa84b243f881487fd4d5dedb28436d4e0c762e82fd37d8bd193329af549b9a57324fa1ff38127e803187e6f3568d568e81361201de84ab0fe302a21eadce5e8888155536b83bd8a3c9998f089ced01c0ad97754f5c97090fc1efbd97f6b2063f36b228af0943afdbbaf90b559b849039c98c10c69cf47d45e2538eb0191b37c22d9917ccfb830b4c4ed84683777945c70fda936db7ee7009963111dc700a4634e5a88833bd643b1ec4f3555cb988cfe7e9cd6b724f4ab194f1c2551917ac7e94836cd2c00a1052b46428a343428c99e1a4a1f76a5861c07b0986b8781ce20b95f1cf2b9878ec817b755efb71db081efa4fb07a61dfa587cd090580b21be5595819f37bfc8fa50b9b88764727b85f29b520caa20a4118b74cfb505200c0bb8552683ba5b64237aa204056dd260a4c11cafaebce2a7520f0c16d6283ccb1db4276007aa85fbdd13bdf737676431f2bed040d4426bae0010354c0cb557b14f5d8e6114c598883169f6312ec7d2631ade4a1e7109d7eaabbb8ba906e7bc368d2e396797f128a225ee420a20c2b0ad58bc1fa08dce6e498a1bf64c7896702ce7cba98dcf32a02de9217dfdaa9f9000c00aa4a9a6372534fea0f6ad406440380180a8c5e90397e4b24bd78851d66840effb0e902168b0c40ed7f830aae39eacf399584bf146484201837e4bfe59410be66ce8ac5f31cee45e5a8b78ba60f7c3eb471a0a317b6686808fe6ba3de58029368eb63c46f72db68d014cb0bcad6a73e1f2c0c18624583e896836480b9314df227759e952f706ff14c57fb3fc5dfd2960fa2e9556eb8979c51a0e3cbddf5c9248dab25fad28fd84572c3548ef6bf15cb5495e789bf881f3b2981d8299fa67dbe8143e45d40cf56c05bd3b9963b9cd1c1cb0416f0890fd690283bea427662d250be6165cd8c81f00fcd6dc823452bd8d93313490f5e139e1f704589fd569103f0cf3d68305143879ae8a2d9cf9840f0b21340e1fcc2127b97ffc6c964e05ce0871051d4196f57d673c96aa0cb13cd809f46c1dd821ae2868f4b39cd5b5031b0641501a55f52821c739122ce15d1c1041a059ab3334e27da5280036dabe002c9050e9c5a6d0e8905b21a9cf02ef9f86fae11fc6ed096307debba8478f4af0d1933d701d1ad0fcd9de4a8118dea38324d2ffebc666ec1c8e95c72c7cd5a3b36bbdab409f19ad0d0973d231fa9e84b9010ae7ee5c41976ce1f7e510e4ccbd61e7774f509b6b22ccac938f3757d287ca0663944d3ac2003f7118e6a7c130f7461a61ed396fe02bfb484f681eaa84cc54213ad933561df75eb3ec24aace13f99884a04c638218e3618f3a023c5065453d2a6f8c8b64fb589dac69e394bb4c54cbe729d97b427f19a40bc374fb95738dfa3c5b26ba6cb532cf9793457e90cacf61ea30b6140cab969fe7b284faf0056c253ff2c1faedd99895560ae8b70fd770fd1ce05c54f3516a6a277c561ebd874f0e382e20f9afbeba78dd52a7092210d947d066f5efbff855ba3706a6b3d8f272d99dc52c95cc0e61293eeb61c8dd1727f49f0b4fd89825a8bb00ece042a53746ab775704c55ac095038389f3b8fc288414e237999e2aa338b5137ef921c1916a17d5c97a1012218f7afb260bc57f5365aca928eaee269db9072e85de666bbd8ef47f8b5c0bdeb6dba5750d69664b586428e67a058b92f346f4e31b1859e3bd8feaf549e9aaec1e01656531c21fbefa5fad190283cad138f84e09a2271f2e2f0611e803da1aea5b10070d1e57339fccd9bb1f48413d07357d41d0947a11f0c51d8cff7d71fab5028cd071eec6dd8ad57e8c643cf6987de2edc11ef4850643f95b7ff84e145a64cf7292239768c2b4fb9d1d06a9334e3b46a427d009f94105e35db141d4d313c7e1968e233bba33899e059ddfef1536fbb13682e077fd8eaa3a3348464f54eb1bcd08165028fd272d6337634bd830ca7c3bb9356eb523c2bbebc80b0fc357508b24163083cf1740a11c823bab1349873af31e695945b7249422e69a8f9904b15512ba479ce5b25b4c0f60fab21adbeb157bb3d529474f5404d0116523de6861cd2a5028ecc83bfd16911f6762349a85060edabe08e46929e246c46610ad5fce8cd1687956f059e85025652083c54d3a0b06466856752cf1b86c110af5e88b975b0e94313df53f4835ea6da22d4be0f403a8641c0a741b1732c00298fbf0c85b83c6808a3af299405298c542a9d1c966d98e638e559892fe3642f5d9683d63aff37e064bbb15788a1bd54537e207f8efcf5e718e30a826ba48f5c3359091d9f31084569c8dc92efd562b2740389294584c76373f82a647aabe6c616f916cc1d07926a4968815be45d39523a871f5b30758d0ee4d473a72f03323e62000d7b915959c1c5d44bb1e843bbc178595cf719cd6fdcdbb248d38678282bae841b6e026bbaa7f376f2d004b7c88e4f3acbd6c831505df7397d5ea0d9e80b8f530dc44bca69589d5d414a9e87d57f36d9f0b8b866c45e886ff2556c5a5ef29d4abdfd11bf0e6bbcb75bfdb785a2c8507850b641e9a91f3875c464f22f5b5c552ec16e6cd12151dc94ddc93da01927d1bab7fbba9848c048a3c5211c76f58baad4673eca3b1f98570acbcdc32bb1ffe0511b97a7ae570cfd6d03537695f395244b553f2ade25c2ee36cf775a19fb7722772873a57e5fe45758112df62f6b1ab2f9e4cfd0927bf185ac6eb68fca64b896818d4ab0d271d4e84907166b4393146757d55197ae8ff5f0178f17e0c8e38b1b61f261ea4d6dc1efcc53249c8be6f046dc4faba8d69ef041de421b465cab9e5f6b072815c6274dfedec82efcc274493f4c6f41df7b72b466342bf269b1a20bc54088a637fbfc4fed32b8b393e0b63e27306a3bcd099169d857cb17092d516d9dbff77cae687a4cbd512b503d0587b91b8d5ed7d3138facad04f884365c4152d2797769becdbfcc316bdb7068620d5f89db8fb4e488aecf56b8a864a61ecd4793e6283bdf7ba0851dbe5d9be849edc1af3edad40c57979b1fdcc1f7d6d53ccdb7f809657f65656683967881eb871a2506e184ad2be2e668870682a53220bbbf444f157b3c6879b4d7df359e9af3f9c24e1957c74ae8b2d6909aa190b72897e69287d7634d8d96a7d9fa9afbbb6f2417e4257e9192f292d689cc5e43fafe3d5bf3d006952f703a11e86c42bcc62d22c2987638252fa73170b67f3aad8c3515aed15fa8a0b66c895788dadc5af69bef050cd3bb19ff91bcc12438e3a1f74fa22e98832784093ce66d1c212b518f3258fff2b82dfae769106ec2b02130080693d7f3e7642708247186e62b63985d1e67d0a5e03ec33428265d2a73b579f83ee143387994481aa9e6373f480d14be05116b9251e339fbede65d3c79bc15208b123d3afff51bbeb677d010e341b327323191fb78667637a1b642fa6160b62204afece0bedd3e4674a32e0b4d279e1c28ab6594ac8de0b75b01d0bea2acf9ca4bf3da1369b0ff75a2f4af4394ee1825abbdbc32e8c60241725084dea972f414b7e7478f0c99240ff2d7e92f9bfa55736519ef55d89fd627ab61bfbe57", &(0x7f0000000280)=""/135, 0x4}, 0xfc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) r3 = fsmount(r2, 0x0, 0x70) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000004, 0x4000010, r2, 0x10000000) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x06\x00\x00\x00\x00\x00\x00\x00@-{@!\x00', 0x0, r0) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000200)={0xfffffffe}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000000)) fsmount(r0, 0x1, 0x2) write$6lowpan_enable(r0, &(0x7f0000000340)='0', 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x4c2382) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x2, 0x0) 00:20:49 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x6800, 0x0) (async, rerun: 32) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, 0x4, 0x8, 0xb, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_lifetime={0x4, 0x4, 0xfff, 0x1, 0x80000001, 0x2}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}]}, 0x58}}, 0x48080) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:49 executing program 2: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)="e0945583b0334703da6756bfcefac43f22880fcb9d7919ac1ece28d780cec1ae7634be374a92ddb6c1191cc5b3b76eb6a6325d8025a85ba45ed46661509c115aec05ad31f788af3d8e8f95f93c3934dbf160215928b54453b64b414fbda32001a0bbcb8079979d21382eccc2077e474e8d43b29a4c54fd34a2d23ec66f56c89646537d9b66d332ea19e040d60ee8e075b41a7997ee42b780b5d71f8c65ce14a8e8f51fb2bd4190db4136651379ee3b085d466f06c1e4b617ea003eedb045918275ccb267f53854c75d9100b8547860ac166fb7dc38500e8cb311cf8b95", &(0x7f0000000140)=""/13}, 0x20) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f00000001c0)=0x80) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x10100) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000280)=""/151) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000200)=0xffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)="e0945583b0334703da6756bfcefac43f22880fcb9d7919ac1ece28d780cec1ae7634be374a92ddb6c1191cc5b3b76eb6a6325d8025a85ba45ed46661509c115aec05ad31f788af3d8e8f95f93c3934dbf160215928b54453b64b414fbda32001a0bbcb8079979d21382eccc2077e474e8d43b29a4c54fd34a2d23ec66f56c89646537d9b66d332ea19e040d60ee8e075b41a7997ee42b780b5d71f8c65ce14a8e8f51fb2bd4190db4136651379ee3b085d466f06c1e4b617ea003eedb045918275ccb267f53854c75d9100b8547860ac166fb7dc38500e8cb311cf8b95", &(0x7f0000000140)=""/13}, 0x20) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f00000001c0)=0x80) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x10100) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000280)=""/151) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000200)=0xffff) (async) 00:20:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x81, 0x6a2183) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x2], 0x1, 0xfffffff7, 0x5, 0x5, 0x0, 0x27d8, 0x2, {0x0, 0xfff8, 0xfff, 0x6, 0x4, 0xd805, 0x7, 0x0, 0x3, 0x0, 0x1, 0x9, 0x40, 0x80000000, "939831aba615469646c9bef02e60a8c28fb29ae16669cab467f6983bad980214"}}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000200)={0x7, 0x7, 0x4, 0x6e, &(0x7f0000000000)=""/110, 0xd7, &(0x7f0000000080)=""/215, 0x4a, &(0x7f0000000180)=""/74}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000380)="fa3ecb345b94e7a77546dfa7a7bfa5bf1c7e0cfe74820915551488f4958924571c4bc1f9685b2a8b731689304533a9de9700b6c7a236ee2532a1100e6cc6fa46ac6ed67159596f59c5d33f5afe96f1d1b0bb59912018027259676d2242e3dd674f9148d000a941c11fe85d7215e591c4c05ee2f6280a94e9936e0d7ad44bded6990a43c6eb27403516d88d2000cd35aa550529f139ee077bde87789102785c478677fb0e973ac5e200de87530977b083", 0xb0}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x5421, 0x0) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, 0x4, 0x8, 0xb, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_lifetime={0x4, 0x4, 0xfff, 0x1, 0x80000001, 0x2}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}]}, 0x58}}, 0x48080) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, 0x4, 0x8, 0xb, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_lifetime={0x4, 0x4, 0xfff, 0x1, 0x80000001, 0x2}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}]}, 0x58}}, 0x48080) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0) 00:20:49 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r0}, 0xc) (async) r1 = fsmount(r0, 0x0, 0x7f) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000640)="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", &(0x7f0000000280)=""/135, 0x4}, 0xfc) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) r3 = fsmount(r2, 0x0, 0x70) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000004, 0x4000010, r2, 0x10000000) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) fsmount(r1, 0x0, 0x2) (async, rerun: 64) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x06\x00\x00\x00\x00\x00\x00\x00@-{@!\x00', 0x0, r0) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000200)={0xfffffffe}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000000)) (async) fsmount(r0, 0x1, 0x2) (async, rerun: 32) write$6lowpan_enable(r0, &(0x7f0000000340)='0', 0x1) (rerun: 32) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x4c2382) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x2, 0x0) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x2}, 0xfe}, 0x18) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000110008002abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="101102000054000008001c00", @ANYRES32=r0, @ANYBLOB="08000400ff0f00000a0001011bffffffffff000008002800a4c20000"], 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c050) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:49 executing program 2: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)="e0945583b0334703da6756bfcefac43f22880fcb9d7919ac1ece28d780cec1ae7634be374a92ddb6c1191cc5b3b76eb6a6325d8025a85ba45ed46661509c115aec05ad31f788af3d8e8f95f93c3934dbf160215928b54453b64b414fbda32001a0bbcb8079979d21382eccc2077e474e8d43b29a4c54fd34a2d23ec66f56c89646537d9b66d332ea19e040d60ee8e075b41a7997ee42b780b5d71f8c65ce14a8e8f51fb2bd4190db4136651379ee3b085d466f06c1e4b617ea003eedb045918275ccb267f53854c75d9100b8547860ac166fb7dc38500e8cb311cf8b95", &(0x7f0000000140)=""/13}, 0x20) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f00000001c0)=0x80) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x10100) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000280)=""/151) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000200)=0xffff) 00:20:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x81, 0x6a2183) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x2], 0x1, 0xfffffff7, 0x5, 0x5, 0x0, 0x27d8, 0x2, {0x0, 0xfff8, 0xfff, 0x6, 0x4, 0xd805, 0x7, 0x0, 0x3, 0x0, 0x1, 0x9, 0x40, 0x80000000, "939831aba615469646c9bef02e60a8c28fb29ae16669cab467f6983bad980214"}}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000200)={0x7, 0x7, 0x4, 0x6e, &(0x7f0000000000)=""/110, 0xd7, &(0x7f0000000080)=""/215, 0x4a, &(0x7f0000000180)=""/74}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000380)="fa3ecb345b94e7a77546dfa7a7bfa5bf1c7e0cfe74820915551488f4958924571c4bc1f9685b2a8b731689304533a9de9700b6c7a236ee2532a1100e6cc6fa46ac6ed67159596f59c5d33f5afe96f1d1b0bb59912018027259676d2242e3dd674f9148d000a941c11fe85d7215e591c4c05ee2f6280a94e9936e0d7ad44bded6990a43c6eb27403516d88d2000cd35aa550529f139ee077bde87789102785c478677fb0e973ac5e200de87530977b083", 0xb0}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x5421, 0x0) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:20:49 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x6800, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) (async) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x2}, 0xfe}, 0x18) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000110008002abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="101102000054000008001c00", @ANYRES32=r0, @ANYBLOB="08000400ff0f00000a0001011bffffffffff000008002800a4c20000"], 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c050) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 00:20:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x3, 0x1, 0x7fffffff, 0x1, 0x1}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x4, 0x2, 0x200, 0x0, 0x5}) 00:20:49 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r0}, 0xc) r1 = fsmount(r0, 0x0, 0x7f) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000640)="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", &(0x7f0000000280)=""/135, 0x4}, 0xfc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) r3 = fsmount(r2, 0x0, 0x70) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000004, 0x4000010, r2, 0x10000000) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) (async) fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x06\x00\x00\x00\x00\x00\x00\x00@-{@!\x00', 0x0, r0) (async) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000200)={0xfffffffe}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000000)) (async) fsmount(r0, 0x1, 0x2) write$6lowpan_enable(r0, &(0x7f0000000340)='0', 0x1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x4c2382) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x2, 0x0) 00:20:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x3, 0x2, 0x400, 0xbbbbbbbb}) 00:20:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x300}, 0x0) 00:20:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x3, 0x2, 0x400, 0xbbbbbbbb}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x3, 0x2, 0x400, 0xbbbbbbbb}) (async) 00:20:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x2}, 0xfe}, 0x18) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000110008002abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="101102000054000008001c00", @ANYRES32=r0, @ANYBLOB="08000400ff0f00000a0001011bffffffffff000008002800a4c20000"], 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c050) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x3, 0x1, 0x7fffffff, 0x1, 0x1}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x4, 0x2, 0x200, 0x0, 0x5}) 00:20:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2041) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x3, 0x1, 0x7fffffff, 0x1, 0x1}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x4, 0x2, 0x200, 0x0, 0x5}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x3, 0x1, 0x7fffffff, 0x1, 0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x4, 0x2, 0x200, 0x0, 0x5}) (async) 00:20:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x3, 0x2, 0x400, 0xbbbbbbbb}) 00:20:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2041) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2041) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:20:50 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x317180, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2041) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:50 executing program 4: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/207) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x90001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200200) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000200)) r1 = fsmount(0xffffffffffffffff, 0x509aca60c07a25e4, 0x7b) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x2, 0x1f}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x60180, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000002c0)={0x1, 0x778b, 0x0, 0x0, 0x8}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0xe6f766cac016b98a) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x4, 0x10000, 0x1, 0x0, 0x7}) 00:20:50 executing program 4: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/207) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:50 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x317180, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x90001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:50 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000040)="b0826e172a05b7c13d309f7c2979b38fbe69c955d263461704a4080b60b8d0835a195301ac316996e5abc9f112533210fea3f1d8a2e2e9316c9bc110fb15dd21d707d3f7a85242d8e5d7b384dee94fffadc9e1b5d90eeef52ba796817274da265fbf55bdc836fe1cd18409fd34a1ecf8076b1fc252ed598ddca8f1ba13d4cdcf26866a368a4f699f60f37d038ee1", &(0x7f0000000100)=""/182, &(0x7f00000001c0)="a948c864dbae1a20fb27436fcfbe4ffbcfa023e75dbd8019f7d2291ca946ca22d29ce041b37771a87302eade15d6d0e1e9f88d5b108476f0a9f7a0fbb530f9cb13f5704e5f5d18537c7d82621dc484d2b21f2fc96f5a", &(0x7f0000000240)="904fa77824f1f0878a86e356325cd4036bb69284d0db5283a4bddecba450f509cfaec52daa09498f646f9ddadf01db753e17cca7d9754d53eae1b33117eac1a10b9ab2c1ffb1b35db98255ab14943781ded98850b596a1333ce9cdf4b4b260", 0x6, r0}, 0x38) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 00:20:50 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000040)="b0826e172a05b7c13d309f7c2979b38fbe69c955d263461704a4080b60b8d0835a195301ac316996e5abc9f112533210fea3f1d8a2e2e9316c9bc110fb15dd21d707d3f7a85242d8e5d7b384dee94fffadc9e1b5d90eeef52ba796817274da265fbf55bdc836fe1cd18409fd34a1ecf8076b1fc252ed598ddca8f1ba13d4cdcf26866a368a4f699f60f37d038ee1", &(0x7f0000000100)=""/182, &(0x7f00000001c0)="a948c864dbae1a20fb27436fcfbe4ffbcfa023e75dbd8019f7d2291ca946ca22d29ce041b37771a87302eade15d6d0e1e9f88d5b108476f0a9f7a0fbb530f9cb13f5704e5f5d18537c7d82621dc484d2b21f2fc96f5a", &(0x7f0000000240)="904fa77824f1f0878a86e356325cd4036bb69284d0db5283a4bddecba450f509cfaec52daa09498f646f9ddadf01db753e17cca7d9754d53eae1b33117eac1a10b9ab2c1ffb1b35db98255ab14943781ded98850b596a1333ce9cdf4b4b260", 0x6, r0}, 0x38) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r0, 0x0, 0x2) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000040)="b0826e172a05b7c13d309f7c2979b38fbe69c955d263461704a4080b60b8d0835a195301ac316996e5abc9f112533210fea3f1d8a2e2e9316c9bc110fb15dd21d707d3f7a85242d8e5d7b384dee94fffadc9e1b5d90eeef52ba796817274da265fbf55bdc836fe1cd18409fd34a1ecf8076b1fc252ed598ddca8f1ba13d4cdcf26866a368a4f699f60f37d038ee1", &(0x7f0000000100)=""/182, &(0x7f00000001c0)="a948c864dbae1a20fb27436fcfbe4ffbcfa023e75dbd8019f7d2291ca946ca22d29ce041b37771a87302eade15d6d0e1e9f88d5b108476f0a9f7a0fbb530f9cb13f5704e5f5d18537c7d82621dc484d2b21f2fc96f5a", &(0x7f0000000240)="904fa77824f1f0878a86e356325cd4036bb69284d0db5283a4bddecba450f509cfaec52daa09498f646f9ddadf01db753e17cca7d9754d53eae1b33117eac1a10b9ab2c1ffb1b35db98255ab14943781ded98850b596a1333ce9cdf4b4b260", 0x6, r0}, 0x38) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) (async) 00:20:50 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x317180, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x90001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200200) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000200)) r1 = fsmount(0xffffffffffffffff, 0x509aca60c07a25e4, 0x7b) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x2, 0x1f}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x60180, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000002c0)={0x1, 0x778b, 0x0, 0x0, 0x8}) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0xe6f766cac016b98a) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x4, 0x10000, 0x1, 0x0, 0x7}) 00:20:50 executing program 4: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/207) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:50 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f00000003c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x80000000, 0x5, 0x7fffffff, 0x840, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="9500000000000000184a00000600000000000000000000001830000001000000000000000000000001080800000400001d04000000000000185800000000000000000000000000c7de6bec00", @ANYRES32=r0, @ANYBLOB="00000000732a000018240000", @ANYRES32, @ANYBLOB="0000000000ffffff"], &(0x7f0000000080)='GPL\x00', 0x8, 0xef, &(0x7f00000000c0)=""/239, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x7, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1, r3, 0x1, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x541b, 0x0) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200200) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000200)) r1 = fsmount(0xffffffffffffffff, 0x509aca60c07a25e4, 0x7b) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x2, 0x1f}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x60180, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000002c0)={0x1, 0x778b, 0x0, 0x0, 0x8}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0xe6f766cac016b98a) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x4, 0x10000, 0x1, 0x0, 0x7}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200200) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000200)) (async) fsmount(0xffffffffffffffff, 0x509aca60c07a25e4, 0x7b) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x2, 0x1f}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x60180, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000002c0)={0x1, 0x778b, 0x0, 0x0, 0x8}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0xe6f766cac016b98a) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000180)) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x4, 0x10000, 0x1, 0x0, 0x7}) (async) 00:20:50 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x1, 0x2, 0x0, 0x3, 0x1}, 0x8, 0x6}) 00:20:50 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000040)="b0826e172a05b7c13d309f7c2979b38fbe69c955d263461704a4080b60b8d0835a195301ac316996e5abc9f112533210fea3f1d8a2e2e9316c9bc110fb15dd21d707d3f7a85242d8e5d7b384dee94fffadc9e1b5d90eeef52ba796817274da265fbf55bdc836fe1cd18409fd34a1ecf8076b1fc252ed598ddca8f1ba13d4cdcf26866a368a4f699f60f37d038ee1", &(0x7f0000000100)=""/182, &(0x7f00000001c0)="a948c864dbae1a20fb27436fcfbe4ffbcfa023e75dbd8019f7d2291ca946ca22d29ce041b37771a87302eade15d6d0e1e9f88d5b108476f0a9f7a0fbb530f9cb13f5704e5f5d18537c7d82621dc484d2b21f2fc96f5a", &(0x7f0000000240)="904fa77824f1f0878a86e356325cd4036bb69284d0db5283a4bddecba450f509cfaec52daa09498f646f9ddadf01db753e17cca7d9754d53eae1b33117eac1a10b9ab2c1ffb1b35db98255ab14943781ded98850b596a1333ce9cdf4b4b260", 0x6, r0}, 0x38) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r0, 0x0, 0x2) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000040)="b0826e172a05b7c13d309f7c2979b38fbe69c955d263461704a4080b60b8d0835a195301ac316996e5abc9f112533210fea3f1d8a2e2e9316c9bc110fb15dd21d707d3f7a85242d8e5d7b384dee94fffadc9e1b5d90eeef52ba796817274da265fbf55bdc836fe1cd18409fd34a1ecf8076b1fc252ed598ddca8f1ba13d4cdcf26866a368a4f699f60f37d038ee1", &(0x7f0000000100)=""/182, &(0x7f00000001c0)="a948c864dbae1a20fb27436fcfbe4ffbcfa023e75dbd8019f7d2291ca946ca22d29ce041b37771a87302eade15d6d0e1e9f88d5b108476f0a9f7a0fbb530f9cb13f5704e5f5d18537c7d82621dc484d2b21f2fc96f5a", &(0x7f0000000240)="904fa77824f1f0878a86e356325cd4036bb69284d0db5283a4bddecba450f509cfaec52daa09498f646f9ddadf01db753e17cca7d9754d53eae1b33117eac1a10b9ab2c1ffb1b35db98255ab14943781ded98850b596a1333ce9cdf4b4b260", 0x6, r0}, 0x38) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) (async) 00:20:50 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f00000003c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x80000000, 0x5, 0x7fffffff, 0x840, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="9500000000000000184a00000600000000000000000000001830000001000000000000000000000001080800000400001d04000000000000185800000000000000000000000000c7de6bec00", @ANYRES32=r0, @ANYBLOB="00000000732a000018240000", @ANYRES32, @ANYBLOB="0000000000ffffff"], &(0x7f0000000080)='GPL\x00', 0x8, 0xef, &(0x7f00000000c0)=""/239, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x7, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1, r3, 0x1, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x541b, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x2) (async) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f00000003c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x80000000, 0x5, 0x7fffffff, 0x840, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x9}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="9500000000000000184a00000600000000000000000000001830000001000000000000000000000001080800000400001d04000000000000185800000000000000000000000000c7de6bec00", @ANYRES32=r0, @ANYBLOB="00000000732a000018240000", @ANYRES32, @ANYBLOB="0000000000ffffff"], &(0x7f0000000080)='GPL\x00', 0x8, 0xef, &(0x7f00000000c0)=""/239, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x7, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1, r3, 0x1, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x541b, 0x0) (async) 00:20:50 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x1, 0x2, 0x0, 0x3, 0x1}, 0x8, 0x6}) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 00:20:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x103140) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x224800, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x24100) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x103140) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x224800, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x1, 0x2, 0x0, 0x3, 0x1}, 0x8, 0x6}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x1, 0x2, 0x0, 0x3, 0x1}, 0x8, 0x6}) (async) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x2) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x24100) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x24100) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) 00:20:50 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 00:20:50 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f00000003c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x80000000, 0x5, 0x7fffffff, 0x840, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="9500000000000000184a00000600000000000000000000001830000001000000000000000000000001080800000400001d04000000000000185800000000000000000000000000c7de6bec00", @ANYRES32=r0, @ANYBLOB="00000000732a000018240000", @ANYRES32, @ANYBLOB="0000000000ffffff"], &(0x7f0000000080)='GPL\x00', 0x8, 0xef, &(0x7f00000000c0)=""/239, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x7, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1, r3, 0x1, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x541b, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x2) (async) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f00000003c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x80000000, 0x5, 0x7fffffff, 0x840, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x9}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="9500000000000000184a00000600000000000000000000001830000001000000000000000000000001080800000400001d04000000000000185800000000000000000000000000c7de6bec00", @ANYRES32=r0, @ANYBLOB="00000000732a000018240000", @ANYRES32, @ANYBLOB="0000000000ffffff"], &(0x7f0000000080)='GPL\x00', 0x8, 0xef, &(0x7f00000000c0)=""/239, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x7, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1, r3, 0x1, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x541b, 0x0) (async) 00:20:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x103140) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x224800, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x6) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:50 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x8806) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400200) r1 = fsmount(r0, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x2, 0xc3, 0x1, 0x62, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7887, 0x700, 0x20000, 0x7fffffff}}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtfilter={0xe4, 0x2c, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff5, 0x7}, {0xc, 0xd}, {0x0, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8}]}}, @filter_kind_options=@f_basic={{0xa}, {0x6c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x6}}, @TCA_BASIC_POLICE={0x60, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x203, 0x701a, 0x6, {0x4, 0x0, 0x0, 0x5, 0x8000, 0x4}, {0x1f, 0x2, 0x4, 0x80, 0x7ff, 0x1f}, 0x5, 0x7fff, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff2, 0xd}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = fsmount(r1, 0x1, 0x4) fsmount(r3, 0x0, 0x2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5420) 00:20:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x24100) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x3) 00:20:50 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x8806) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400200) (async) r1 = fsmount(r0, 0x0, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x2, 0xc3, 0x1, 0x62, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7887, 0x700, 0x20000, 0x7fffffff}}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtfilter={0xe4, 0x2c, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff5, 0x7}, {0xc, 0xd}, {0x0, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8}]}}, @filter_kind_options=@f_basic={{0xa}, {0x6c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x6}}, @TCA_BASIC_POLICE={0x60, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x203, 0x701a, 0x6, {0x4, 0x0, 0x0, 0x5, 0x8000, 0x4}, {0x1f, 0x2, 0x4, 0x80, 0x7ff, 0x1f}, 0x5, 0x7fff, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff2, 0xd}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = fsmount(r1, 0x1, 0x4) fsmount(r3, 0x0, 0x2) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5420) 00:20:50 executing program 0: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x6, 0x15, 0x2c, "feb7c3e6b99884ee28dcc8eaf5b0e64069d64da637265891a36d6d9631cb71fd1d516390ad94b0602643b1793d6634920cef8897ee06eb60d62cfc9ee4e5b507", "b103e5dbe7ea80732d1c13fc3a7823e7ba7cfd907a4c4e8279749e60a7024ad9", [0x5, 0xba]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x24c200) fsmount(0xffffffffffffffff, 0x0, 0x3) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000400)={0x0, 0x1}) fsmount(r0, 0x0, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x545202, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x24000) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000240)=""/52) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1c5000, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000140)) 00:20:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0xeee75e84befe5dbc) socket$can_j1939(0x1d, 0x2, 0x7) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) syz_open_dev$dri(&(0x7f00000001c0), 0x1f, 0x200) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000600)) fsmount(r1, 0x0, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) fsmount(r1, 0x0, 0x2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x3}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa900, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x38, 0x70, 0x2, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048d4}, 0x40004) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000300)=""/105) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x2, 0x8000, 0x2, 0x7ff}, 0x0, 0x5, 'id0\x00', 'timer1\x00', 0x0, 0x1, 0x2, 0x7, 0x1a85}) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x4) 00:20:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:50 executing program 0: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x6, 0x15, 0x2c, "feb7c3e6b99884ee28dcc8eaf5b0e64069d64da637265891a36d6d9631cb71fd1d516390ad94b0602643b1793d6634920cef8897ee06eb60d62cfc9ee4e5b507", "b103e5dbe7ea80732d1c13fc3a7823e7ba7cfd907a4c4e8279749e60a7024ad9", [0x5, 0xba]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x24c200) fsmount(0xffffffffffffffff, 0x0, 0x3) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000400)={0x0, 0x1}) fsmount(r0, 0x0, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x545202, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x24000) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000240)=""/52) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1c5000, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000140)) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x6, 0x15, 0x2c, "feb7c3e6b99884ee28dcc8eaf5b0e64069d64da637265891a36d6d9631cb71fd1d516390ad94b0602643b1793d6634920cef8897ee06eb60d62cfc9ee4e5b507", "b103e5dbe7ea80732d1c13fc3a7823e7ba7cfd907a4c4e8279749e60a7024ad9", [0x5, 0xba]}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x24c200) (async) fsmount(0xffffffffffffffff, 0x0, 0x3) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000400)={0x0, 0x1}) (async) fsmount(r0, 0x0, 0x2) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x545202, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x4) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x24000) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000240)=""/52) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1c5000, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000280)) (async) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000140)) (async) 00:20:50 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x8806) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400200) (rerun: 64) r1 = fsmount(r0, 0x0, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x2, 0xc3, 0x1, 0x62, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7887, 0x700, 0x20000, 0x7fffffff}}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtfilter={0xe4, 0x2c, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff5, 0x7}, {0xc, 0xd}, {0x0, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8}]}}, @filter_kind_options=@f_basic={{0xa}, {0x6c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x6}}, @TCA_BASIC_POLICE={0x60, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x203, 0x701a, 0x6, {0x4, 0x0, 0x0, 0x5, 0x8000, 0x4}, {0x1f, 0x2, 0x4, 0x80, 0x7ff, 0x1f}, 0x5, 0x7fff, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff2, 0xd}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async, rerun: 64) r3 = fsmount(r1, 0x1, 0x4) (rerun: 64) fsmount(r3, 0x0, 0x2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5420) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x38, 0x70, 0x2, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048d4}, 0x40004) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000300)=""/105) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x2, 0x8000, 0x2, 0x7ff}, 0x0, 0x5, 'id0\x00', 'timer1\x00', 0x0, 0x1, 0x2, 0x7, 0x1a85}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x38, 0x70, 0x2, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048d4}, 0x40004) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000300)=""/105) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x2, 0x8000, 0x2, 0x7ff}, 0x0, 0x5, 'id0\x00', 'timer1\x00', 0x0, 0x1, 0x2, 0x7, 0x1a85}) (async) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x300) 00:20:50 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'w\x00'}, 0x8) write$cgroup_devices(r0, &(0x7f0000000000)={'c', ' *:* ', 'r\x00'}, 0x8) 00:20:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0xeee75e84befe5dbc) socket$can_j1939(0x1d, 0x2, 0x7) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) syz_open_dev$dri(&(0x7f00000001c0), 0x1f, 0x200) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000600)) fsmount(r1, 0x0, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) fsmount(r1, 0x0, 0x2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x3}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa900, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x9, 0xeee75e84befe5dbc) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x1f, 0x200) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000600)) (async) fsmount(r1, 0x0, 0x1) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x3}) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa900, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) (async) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/233) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x40042) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x1000000) 00:20:50 executing program 0: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x6, 0x15, 0x2c, "feb7c3e6b99884ee28dcc8eaf5b0e64069d64da637265891a36d6d9631cb71fd1d516390ad94b0602643b1793d6634920cef8897ee06eb60d62cfc9ee4e5b507", "b103e5dbe7ea80732d1c13fc3a7823e7ba7cfd907a4c4e8279749e60a7024ad9", [0x5, 0xba]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x24c200) fsmount(0xffffffffffffffff, 0x0, 0x3) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000400)={0x0, 0x1}) fsmount(r0, 0x0, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x545202, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x24000) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000240)=""/52) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1c5000, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000140)) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x6, 0x15, 0x2c, "feb7c3e6b99884ee28dcc8eaf5b0e64069d64da637265891a36d6d9631cb71fd1d516390ad94b0602643b1793d6634920cef8897ee06eb60d62cfc9ee4e5b507", "b103e5dbe7ea80732d1c13fc3a7823e7ba7cfd907a4c4e8279749e60a7024ad9", [0x5, 0xba]}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x24c200) (async) fsmount(0xffffffffffffffff, 0x0, 0x3) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000400)={0x0, 0x1}) (async) fsmount(r0, 0x0, 0x2) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x545202, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x4) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x24000) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000240)=""/52) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1c5000, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000280)) (async) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000140)) (async) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newvlan={0x38, 0x70, 0x2, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048d4}, 0x40004) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async, rerun: 32) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) (rerun: 32) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000300)=""/105) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x2, 0x8000, 0x2, 0x7ff}, 0x0, 0x5, 'id0\x00', 'timer1\x00', 0x0, 0x1, 0x2, 0x7, 0x1a85}) 00:20:50 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'w\x00'}, 0x8) write$cgroup_devices(r0, &(0x7f0000000000)={'c', ' *:* ', 'r\x00'}, 0x8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r0, 0x0, 0x2) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'w\x00'}, 0x8) (async) write$cgroup_devices(r0, &(0x7f0000000000)={'c', ' *:* ', 'r\x00'}, 0x8) (async) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/233) (async, rerun: 64) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x40042) (rerun: 64) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x2000000) 00:20:50 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) r1 = fsmount(r0, 0x0, 0x2) r2 = fsmount(r1, 0x0, 0x9) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5422) 00:20:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0xeee75e84befe5dbc) socket$can_j1939(0x1d, 0x2, 0x7) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) syz_open_dev$dri(&(0x7f00000001c0), 0x1f, 0x200) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000600)) fsmount(r1, 0x0, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) fsmount(r1, 0x0, 0x2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x3}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa900, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x9, 0xeee75e84befe5dbc) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x1f, 0x200) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000600)) (async) fsmount(r1, 0x0, 0x1) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x3}) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa900, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) (async) 00:20:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x3b6c4cf316f5b590) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x7, 0x3, 0x401}, 0xb95b, 0x100, 0x7}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x3000000) 00:20:50 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r0, 0x0, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'w\x00'}, 0x8) (async) write$cgroup_devices(r0, &(0x7f0000000000)={'c', ' *:* ', 'r\x00'}, 0x8) 00:20:50 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x1) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) r1 = fsmount(r0, 0x0, 0x2) r2 = fsmount(r1, 0x0, 0x9) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5422) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/233) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x40042) 00:20:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x3b6c4cf316f5b590) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x7, 0x3, 0x401}, 0xb95b, 0x100, 0x7}) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 00:20:50 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) r1 = fsmount(r0, 0x0, 0x2) r2 = fsmount(r1, 0x0, 0x9) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5422) 00:20:50 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) r1 = fsmount(r0, 0x0, 0x2) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='/dev/ubi_ctrl\x00', &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) r3 = fsmount(r2, 0x0, 0x2) fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) 00:20:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x10000) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x4000000) 00:20:50 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) r1 = fsmount(r0, 0x0, 0x2) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='/dev/ubi_ctrl\x00', &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async) r3 = fsmount(r2, 0x0, 0x2) fsmount(0xffffffffffffffff, 0x1, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10202, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x1, 0xb1f5, 0xc, 0x0, 0x2}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x3, 0x1, 0x7fffffff, 0x0, 0x8}) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x41101) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5420) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)={r3}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f00000000c0)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x84002) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) 00:20:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x3b6c4cf316f5b590) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x7, 0x3, 0x401}, 0xb95b, 0x100, 0x7}) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (rerun: 32) 00:20:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x10000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x10000) (async) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0xffffff7f) 00:20:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x10000) 00:20:50 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) r1 = fsmount(r0, 0x0, 0x2) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='/dev/ubi_ctrl\x00', &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async) r3 = fsmount(r2, 0x0, 0x2) fsmount(0xffffffffffffffff, 0x1, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) 00:20:50 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x3) r0 = fsmount(0xffffffffffffffff, 0x0, 0xfc) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x41101) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5420) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)={r3}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f00000000c0)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x84002) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x41101) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)={r3}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f00000000c0)) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x84002) (async) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) (async) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10202, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x1, 0xb1f5, 0xc, 0x0, 0x2}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x3, 0x1, 0x7fffffff, 0x0, 0x8}) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x100000000000000) 00:20:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xe, 0xe}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x800) 00:20:50 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x3) r0 = fsmount(0xffffffffffffffff, 0x0, 0xfc) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 00:20:50 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x7fffffff, 0x40) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/161) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x200000000000000) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10202, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x1, 0xb1f5, 0xc, 0x0, 0x2}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x3, 0x1, 0x7fffffff, 0x0, 0x8}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10202, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x1, 0xb1f5, 0xc, 0x0, 0x2}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x3, 0x1, 0x7fffffff, 0x0, 0x8}) (async) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x41101) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)={r3}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f00000000c0)) (async, rerun: 64) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x84002) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) 00:20:50 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x3) r0 = fsmount(0xffffffffffffffff, 0x0, 0xfc) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (rerun: 32) 00:20:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 64) fsmount(r1, 0x0, 0x2) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xe, 0xe}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x800) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x300000000000000) 00:20:50 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x7fffffff, 0x40) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/161) 00:20:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xe, 0xe}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x800) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x402200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xbac01) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001380)={&(0x7f0000000200)="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", &(0x7f0000000300)=""/99, &(0x7f0000000380)="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", &(0x7f0000000140)="c104fc941250f9", 0x3, 0xffffffffffffffff, 0x4}, 0x38) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:20:50 executing program 0: ioctl$CAPI_SET_FLAGS(0xffffffffffffffff, 0x80044324, &(0x7f0000000040)) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x2, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x20, 0x0, "12244cfddb9aae8f786954611e69475d5e930953479daf31f064d0ef7833bba96bf1225254b84b96d43e6d30607eade146415a0987a33885e2c604977f524969", "6618bc38b687eef623170a19324611733bac838fcc9bde4ddcd704dea36c5022e67f2a1e645f5946eb8c12c093e353ffb054bc5fdc50235a351d4435235a3e8c", "7b9acf74251da2bbca464e0dfecc7c8c2570282c74347283cd1cb0892b2fb027", [0x8000000000000000, 0x5]}) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x3) 00:20:50 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x7fffffff, 0x40) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/161) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x7fffffff, 0x40) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/161) (async) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x400000000000000) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x402200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 00:20:50 executing program 0: ioctl$CAPI_SET_FLAGS(0xffffffffffffffff, 0x80044324, &(0x7f0000000040)) (async) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x2, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x20, 0x0, "12244cfddb9aae8f786954611e69475d5e930953479daf31f064d0ef7833bba96bf1225254b84b96d43e6d30607eade146415a0987a33885e2c604977f524969", "6618bc38b687eef623170a19324611733bac838fcc9bde4ddcd704dea36c5022e67f2a1e645f5946eb8c12c093e353ffb054bc5fdc50235a351d4435235a3e8c", "7b9acf74251da2bbca464e0dfecc7c8c2570282c74347283cd1cb0892b2fb027", [0x8000000000000000, 0x5]}) (async, rerun: 64) socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x3) 00:20:50 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xbac01) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001380)={&(0x7f0000000200)="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", &(0x7f0000000300)=""/99, &(0x7f0000000380)="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", &(0x7f0000000140)="c104fc941250f9", 0x3, 0xffffffffffffffff, 0x4}, 0x38) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xbac01) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001380)={&(0x7f0000000200)="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", &(0x7f0000000300)=""/99, &(0x7f0000000380)="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", &(0x7f0000000140)="c104fc941250f9", 0x3, 0xffffffffffffffff, 0x4}, 0x38) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000100)) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) 00:20:50 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@gettaction={0x80, 0x32, 0x201, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x80}}, 0x2004c000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000140)={&(0x7f00000000c0)=[r2, r3, 0x0, r4, 0x0, 0x0], &(0x7f0000000100)=[0x40, 0x5, 0x3], 0x7, 0x6, 0x1}) 00:20:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x1, 0x2, 0x2, 0x1}, 0x200, 0x6198}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42000) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000012c0)=""/4106) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x2, 0x1, 0xfc, 0x3, 0x4}}) 00:20:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0xffffff7f00000000) 00:20:50 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@gettaction={0x80, 0x32, 0x201, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x80}}, 0x2004c000) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000140)={&(0x7f00000000c0)=[r2, r3, 0x0, r4, 0x0, 0x0], &(0x7f0000000100)=[0x40, 0x5, 0x3], 0x7, 0x6, 0x1}) 00:20:50 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x402200) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x402200) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) 00:20:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x1, 0x2, 0x2, 0x1}, 0x200, 0x6198}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42000) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000012c0)=""/4106) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x2, 0x1, 0xfc, 0x3, 0x4}}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x1, 0x2, 0x2, 0x1}, 0x200, 0x6198}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42000) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000012c0)=""/4106) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x2, 0x1, 0xfc, 0x3, 0x4}}) (async) 00:20:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0xffffffff00000000) 00:20:51 executing program 0: ioctl$CAPI_SET_FLAGS(0xffffffffffffffff, 0x80044324, &(0x7f0000000040)) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x2, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x20, 0x0, "12244cfddb9aae8f786954611e69475d5e930953479daf31f064d0ef7833bba96bf1225254b84b96d43e6d30607eade146415a0987a33885e2c604977f524969", "6618bc38b687eef623170a19324611733bac838fcc9bde4ddcd704dea36c5022e67f2a1e645f5946eb8c12c093e353ffb054bc5fdc50235a351d4435235a3e8c", "7b9acf74251da2bbca464e0dfecc7c8c2570282c74347283cd1cb0892b2fb027", [0x8000000000000000, 0x5]}) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x3) ioctl$CAPI_SET_FLAGS(0xffffffffffffffff, 0x80044324, &(0x7f0000000040)) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x2, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x4) (async) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x20, 0x0, "12244cfddb9aae8f786954611e69475d5e930953479daf31f064d0ef7833bba96bf1225254b84b96d43e6d30607eade146415a0987a33885e2c604977f524969", "6618bc38b687eef623170a19324611733bac838fcc9bde4ddcd704dea36c5022e67f2a1e645f5946eb8c12c093e353ffb054bc5fdc50235a351d4435235a3e8c", "7b9acf74251da2bbca464e0dfecc7c8c2570282c74347283cd1cb0892b2fb027", [0x8000000000000000, 0x5]}) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x3) (async) 00:20:51 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xbac01) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001380)={&(0x7f0000000200)="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", &(0x7f0000000300)=""/99, &(0x7f0000000380)="f474518bf605f3bb56588c88c6d10955a3faaa3555fd2c637a94bd3b7cb270da1c4802cac3f5c79584a067852ddc2248eb2720ab110fa7941660ae8909ae8882a1ea1a73b82eec3b35756a7aa0b4908474b504012b1dbc397dac043178646e59d1afe2ca268c30b17e73b62010aaf7e59c3f7e055484842cd434f4b43fcf1415b8f5fe210aa654c9c6e82356a51c620483bc0e212274c6f9509e318105cbcb0b671c490db21f099b18cad8d6e00a98557b08bc8563452f1d32186cec49fa50f9d22531591ffe1c70a3ed569aba56d72bfb0b367749c24bae5734ec7649c4710aa7b31982a778b7b56d21b517f9bcdb261f7d31ab6a0f1279a04a268e5afd91f4ea958781c2fc04e35cd4ab78a62d3793377018580d7fd053427cb019735e577df7d889e68ecfca70e23c2edff901ac7e92a2b508c150513b78639ae31dcf994affd846a09270c051a23c5c33b3e36c6458ba679e2faff3bcd2c8e2757631bbb5a640a11f42c217eb8b540866e35d3aee69e9b90ae3e1af3a2d310a36c50e4848a3b155c1d59a9231b316a66de666835d1d046d184c2d095982c1b10def49b7731df1775390b4d9c37c1abe099015e8eb51a2431d63fb79db1cb62918dd2abe9197e717263aa3d26bd1e09887775735773cd5c34166a26ac17124fc437c06c4ed3176aea449ab1d3153eff743810527a9b349b10cb0a27014fd54f27acdbd1873572240c7ffde0e6d8f038df58f449b2086adecafc913a5b4fa3c3984b5dec39464a266e90d89a18a61f9cc6a9d91c8dd58ec45dc26175c1f704a927deb8cc25a495184e3f63e8abc19e5dc1ec2a2be51f0168fc9556f8a26e079c2c0ccba2461d8aa455da4226b4a155f51a84680865faf5175f61c6e25918049908519543757366bb47d00aa7634da94b73812e856346fc35c66d07d2ea892629faf1c6ee825473877264739693fcfed3b52c280ce2c2922f3a3704ded576f804b366dfe6eba9b346d6aa994acf84ed3d73ac2d40f5ad015ed6baabfcfa6a0c694d8568c6ded6d3bf6cde7ba6c31aa947aa160df0a48a93f97d0180fa56dd08571fc0f4c118ec6fd57632bba3e88ded62bd2856513947c13a8a40d2ffb4085fcf0d6efdf3e6e46b8060baee68448a150d7f4db8d09bea09a19afab5938f8bf4e70152e0e9c6f91716eec55ddccc94126618b39c6b3e2d77bfdeff208b72b063f74371b5496a8e7789752c55953e7fa8bf269ee034e5cd1f00253dd7575adc7c578c4069efe7e37393704c5e6de07ceae298a87c6d2c9faec7475cd52e6ee987577d507ac32560cb563eed791ced1e5ef96529388d240dfaed7a6d53bf63c08b162b2837d35756ccb413665873879ac78e72f94a8ecd8a4553f504b59ced929580a9c480b1cb20c26d6c2063df183bc46347a3edae98af2db5343fbf113eff35ba26aea1753283a20932885f2d321888f8e0111f8386231091aba5ea5965b3f08ee09fc43f6aa7b9339e248df9bcd201e83682e24577b4309f96cae19a7f56d9d9454fb9f7a3b354f3e625bc88b8be8b692f11b56b84fb9427d1f8fc5f1c91e33a02e49523a0a051843fccd0076472e9334037cb7741c55d32861656b0e4d233410a847b198b2fe37da10dd7effd7a7932f1655ce7b566b7c155d1b22064f51602b14164a201c1b7ecf6bb3570effd475933a77c5fe236c9c7eb95e62b7ae4aa8af620db8eaaaea250c7bc941850b9b5959a9330adde4c6e2c15ea48a19b9c23cfd0183cb00234458d23ffbc28da86ee1901d859f3f8c76688ca73f34e683e55cf650e826ff31c36a019a7d6431e2dc2fae64eab9447d4b2dc40475734943a2d4c6fc0080b2d3979f73c44e0b9de42f1642b1dd0c9ec7bf68ffe4a218863b94b5f6daf49b12c5b63ad7e0271a4a518ae73ef43306e8237bcc20577200365b105ab2a13e2ce57e4c10a6a9dacd4ed0a0490526935de6b61dadbd502cc940fb431f6a23e3ba25bbd45cdfd647e9b4af9dfb28eb355170384c18e785691577bf2517a85e24f23e0dc7d9696a3be8eb4875b2ec65dbca2cf798186dc1736b82143e49acaf8e0d6de69c04ee4413b149b13a3d119e655b14bb9aed78e9f13eef4cd0141d5f473188151efee687458391e867ecc684c75695fa0fb8ce9f91e1b1251de5b698c9b8f54b41da5763380e05cb727cae8ad9ba67dfdf9a11d7d573a039943ee131e2202eb0488c64298caeecf5bc89045aa5ec585728d6f0bf1d1de4c73d39b38bbcfabfaaed962b0521939b4382c82f34b5de2605a10a7ed2d23b093dad2c52290c872e22440ef5a5494622beea9f5cc49a768f178867cb054e70298dd98e52026a8a07624a57900530c7976119c78798483b3669c4cdc98eefeedf214c324f248baf8ca5888b7b424ef4a05f75b808c4b4dd41f74f45f9f9302db2097b16e135b715d4320fdb153ac2eab2b1a8724d2866032ac3bac46553af21ff6ce54be5584ffd0e12f374fd5568f11696dfff2a732ec387f392345c02a94cd3e3489300ddcfe773b078df2382f7a0e0859ab1202d5dc8dc62e7c093b6c5efbd507322debc42c3655204ec16da195b7e3c93ede8153cc005f4920aeb08b3a667af31b98a8725a5109cb0fb16ec81aac553a9ce56392afb863613793d6b3a0817819f7919185bb40fe96fa3a4fb37041ee56d5b913de250047a5008126a18928ac493b19c5c444c4a26b6fc2b1a10ec5558a41c40300f0851c7ca4a3c331eb6032b1610a27b345a01eca49baef0a83a4069098b26832a73d30772a8e2ee438450b1b9285a46f1995c8e08f6eed3c77efe5253813c74929eccf2e0cc2b410403e5f6d0139631e38cbffe1f9a9bac3d64d09d670e361aaac0365a2bdafa676bdfb03cad885e4f666cd04fcdfb9e97ea9594489634f8dba7fbde0bc8e5a197ee79b51ecf4760af3bcbaf7866d604a7680ea1f78d85c04418577f003f7dd6071908a74e50b14d3046c4d523f37991308c458ece9bf73e51debaa020547e9aa8cd32d0e3385f6620f11f47c8106bdd76793fd389fe4e03f3d3c293ef83817a7a6ed83eb2244e8d745d11014d06b4329e180587464d970b42499ca473fda7bc4937f5b4939158a7fc2bceb33e5ef6505dc7bafa86f44644575a5a60a2f6226e812bb278ed965bb5320a59961816674d2b3465433b5015ecf4bd80b0e5f5d4fb3d44f00bd7e1a584a6fe9a00164970d25b099b65ffbe57abde6d19f683cce8288b9b1d851dcfb732c2ca3666bee5a61c485c0b3e26f4b64c122ca7642095c6f5cec49c9f105f776ab0f17c2eeee6dd206381a12a5d911d6fc6b3658f693dcc2ab4c8677b874272de1042266a72743dd23ef82f9e864e7b247cf3ceb867574f7c3b7d5f28d7619cd50d39526b18ff78019148aeb86b94598dc3e8cd812f89a421a365379047acdc0b46b7381598db9a5b93d6ed14d19f0c63c93463059457f2bde54480b4b8ffd81f31e75939546e13933df4fd485d61e791d1f8b204c7b79c628a65de3b99ff0e5ea00c6943cf459b1ea6854998e549289997830fd3e72128d266bdbe2ad6eced71314107a767e121ee0c2a9948b0f321d693af5062cb6185a3f0120cc77b1060d3df396e059a1f7ad9d1c5dc878ea8f53a5d369d3ed967c79460cdadbcf84e4efd3dac89366d17839abc4dc2eff2929becfc4ebd6e0ebb121f24676797fb70284e53537263ae03d87967189804e396798d88d07880954c6fa53e1da86c4c0facca8be8c41d8663f6e766d111a8bf0c5a787c09175d33fea010ef0bfdcd87b2f408c88f9746e8058d4c8ab2072e1ecc6c20239d36385415b1a1759c7d3b6582ed3caa8e0a87f90de923492bd34f50b03e2afeeb88798ed309bc6070c4e081bdc70783f1407a15329512dcca396839e8030131629f58c750c0168d7ec3fcbc34d69cf7a8845cda9b53c7eb6b4504786df72fbbcde57ba40e9d6b2602df2cda089b1e0161628ec0c1b1e36aaa0c93bbc254b82d399911fcbd8efb04833ec91dea5e2845b6ccb55441b5f2c8c610e80d0d3b42babe5d6e2c4113c1deac589ad0981642eb974fd4b87f8d6d29c0cc6756531c06bc6c49f62f972c6314859eb6d39ac83c57be3737663b69b802495ccf60035bbff7324de5b24d58c5ac0371210736760b69f8370644111f049290365b5ea521bbbc2d1e0183b42f4214f22d8e7190aa7c624908a8ad92e8f09aa53b048ae0a76930784771de498925a0a853aab1ed864c635057a07906d49b040e282f74db4a8bf051736f04ba543878135a801416f34ab86a77373462ac54ec7a93959cc998a0d15aae18b4cc59390c6b20fd04508d2817140639eab8a2db5f234b3d8ec19a6d16b36629465c233b4949e6a692ca20f5c4977d695798db34814e1b23134683f6ab5489b4d77d131bb087f0e7d4fb7f6c83c265c4504e301fec77f5098ef16eaaf23bf91a353e227d8036884877b726fc3f2a72e416aa70fd29f00c2c5fc9d52572f4fc109e2ed0c985af06541daf00996c8069bafc36e715126ff263b3a3227359276746c15631446bf92832cc87f3750e2e91cd055c2d975badf61124eb1e324ddbca9df51c37260d4311871337ab3252f595cdd5d530f0f6b15012b60b6503557bae8a9f1917c4a702dbb0e268e3121b88975b759106deea7f41784d813716e8eea2cc4de50322f06ab5f9178906422fdbe1a8269df0a264dfba70ae437a8b149f8e950cf374024b2403ccfa55c91d5e562e7b5cdb6eff0583b1208e96cb525864ef45ba18ae69b2454ad858eae27a9e30b1644f2a44fe86f58c6855cc2a3a3a683d0ad3eeb95622cba4cf12290f6f0b54c9b9dbe7218d288cc9430acc6f5436d93c6fa1a4a6748167ba2a16bdf21adc3faa5151532099909697146259f2ba57c9ef95fb0ff8c6c16b09c2fccae50d0aa8fb1fc54fc45a0437617f85e88dafe15825c16431bf411cf963caabed2775f1851331d95ed5396f6a12728a6ff6a265a0db481a2e9bdcf468d358492c16cefc8d81f29cbe1ea954dd5d3a550424a04039891b0fa4d41ad0180eb309f8fd9a60f0974f5f35d59ec72b6e40d9bef237ba764dc0f1b0c3904bb8896b5d358fdedb6b40079be18f7811745378a844e1b96fd1c63236b013e6126004c63681e083bcd09c24a7666c9ae346dae6a1f08ab4d44d496630a964506aa7f391b8e2f4414f41a227c275c9187a6d083291ad962623727e0f16ff226bd70e335c0e2bc133ebb34293077dd827c39c8bcd709ab39d6f66f382ce656fd120807e6c0fe2c5767dbd8e3fe32b2fe43db77597b46a74d74803c2315de8cd45908c80d936abe4cdda543c3b6bd42fe9322926c29480139a6aee95b25fa9285be876bf30228a086323ce5ad77e0243ae4be6cc86fb6ba070f563d34349cd0289a37d0f29c2497933ced1068e773c3c2fc8c729329e282a4b762b8e8c6c965be3e1d9b3827784f1452c5044229621a1ba429ccb4077c338e55989f6df21b3a5367bed2435e18c57fc41072c3bc43c8ffe6654d951476e98c9725f9ce90aab885d05993ff270a833b98fb6f66f04204bc8302518a2d5336e09e1ded6af1b3778153c7e3a03885bcaf57d52eddbeb84ff28ee882ec1f2d97d1998dbf8fcabb5e68b6d0e74e3b7531452ce21ca43ac1364f6c6ade8d4383a1dffdfbbc7622d9c8252afe28787c0c4da802c12bc9e197f76f5d259d08aa5a5001aa616c3dddf1148b050ed533c7f869aefd9153fe7068042b8f2808b228914455f2c126456e776c8051955a9c850e179aa19f1829993", &(0x7f0000000140)="c104fc941250f9", 0x3, 0xffffffffffffffff, 0x4}, 0x38) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000100)) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:20:51 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 00:20:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@gettaction={0x80, 0x32, 0x201, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x80}}, 0x2004c000) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000140)={&(0x7f00000000c0)=[r2, r3, 0x0, r4, 0x0, 0x0], &(0x7f0000000100)=[0x40, 0x5, 0x3], 0x7, 0x6, 0x1}) 00:20:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x1, 0x2, 0x2, 0x1}, 0x200, 0x6198}) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42000) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000012c0)=""/4106) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x2, 0x1, 0xfc, 0x3, 0x4}}) 00:20:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000801) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x8000000) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_GETNSID={0x3c, 0x5a, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1c, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 00:20:51 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 00:20:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) fsmount(r0, 0x0, 0x83) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x5110c2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000140)={'geneve1', 0x32, 0x34}, 0xa) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) 00:20:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) write$capi20_data(r1, &(0x7f00000002c0)={{0x10, 0x1, 0x8, 0x80, 0x1020, 0x5}, 0x169, "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"}, 0x17b) 00:20:51 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="3056888b82eab289bc64f39dfa611229403ccee1a7f90c5890bd8b1dfae709f1a7f94138df69faccb19bc7443cc096fa1b862043e343e190101ecef3ef34e51e51d292a517e1749452dc0465175d3e1281a718068bebb31595a0db7cfda87cabd7a252ed1351026b5bfa9d716414b5adc0663bbf8dc78f71a934a072238768d4c102a6488d6443c25342167f3aaff68a9c5343484a4ba26fe07b07291e652d0996145011bb6ce718e607f2c4d0b234e4276f242a74969bb1b473bb903d37352e1974be2d64992187afdaa71b603146818c7d247f9cd04b51735b18170395b5dd231b8df26ffcb46c24", @ANYBLOB="000a25bd7000fbdbdf250500000008000800e000000109aa9393cfc4f9da37e8760e204d309a0001759a0229c3fe5c4b040c0b3790f63d18002a2b5d850000000008000400ffffffff080002000700000014000500000000000000000000c74481eab22ce0ad943d0000000000000001"], 0x5c}}, 0x10000800) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000005) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r5) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r4, &(0x7f0000000080)="7c929d405cfa14d8287a3a052c9736cb223ce099575f167407e3494408f9b90aaefb1ee049508973d919b163dfee30dc76e720c7b19780b99075d76412497421e67290aaaf8a8990f6e2476a153ac64384248bff6b1189f24f6543d35d3ae934ffa0621850c9d148f516d44207e9a01787fbec1163ce9db93fa1b72c7c6d4181e38ad8f6b5fdbfb815183457eafdf2ab21d39d3bea4d0405b5deb567d9ebcee9aaca5bb7390c4cdbbbc3d632240a56cd970e4d7551633970ec9b044e8ac31dbb514882175b06bc8fec5d33c5b8c2addc23e0816053b89441dd3240", &(0x7f0000000180)=""/211}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r5) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000980)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x21}}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, '/dev/ubi_ctrl\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r9, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000089}, 0x20000010) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, r0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20004011) 00:20:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000801) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x8000000) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_GETNSID={0x3c, 0x5a, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1c, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 00:20:51 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000040)) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (rerun: 64) 00:20:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x25, 0x20}, 0x10) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x6c}}, 0x40080) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='x\x00', 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) write$capi20_data(r1, &(0x7f00000002c0)={{0x10, 0x1, 0x8, 0x80, 0x1020, 0x5}, 0x169, "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"}, 0x17b) 00:20:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000801) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x8000000) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_GETNSID={0x3c, 0x5a, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1c, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000801) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x10, r2, 0x8000000) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_GETNSID={0x3c, 0x5a, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_PID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1c, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) 00:20:51 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="3056888b82eab289bc64f39dfa611229403ccee1a7f90c5890bd8b1dfae709f1a7f94138df69faccb19bc7443cc096fa1b862043e343e190101ecef3ef34e51e51d292a517e1749452dc0465175d3e1281a718068bebb31595a0db7cfda87cabd7a252ed1351026b5bfa9d716414b5adc0663bbf8dc78f71a934a072238768d4c102a6488d6443c25342167f3aaff68a9c5343484a4ba26fe07b07291e652d0996145011bb6ce718e607f2c4d0b234e4276f242a74969bb1b473bb903d37352e1974be2d64992187afdaa71b603146818c7d247f9cd04b51735b18170395b5dd231b8df26ffcb46c24", @ANYBLOB="000a25bd7000fbdbdf250500000008000800e000000109aa9393cfc4f9da37e8760e204d309a0001759a0229c3fe5c4b040c0b3790f63d18002a2b5d850000000008000400ffffffff080002000700000014000500000000000000000000c74481eab22ce0ad943d0000000000000001"], 0x5c}}, 0x10000800) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000005) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r5) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r4, &(0x7f0000000080)="7c929d405cfa14d8287a3a052c9736cb223ce099575f167407e3494408f9b90aaefb1ee049508973d919b163dfee30dc76e720c7b19780b99075d76412497421e67290aaaf8a8990f6e2476a153ac64384248bff6b1189f24f6543d35d3ae934ffa0621850c9d148f516d44207e9a01787fbec1163ce9db93fa1b72c7c6d4181e38ad8f6b5fdbfb815183457eafdf2ab21d39d3bea4d0405b5deb567d9ebcee9aaca5bb7390c4cdbbbc3d632240a56cd970e4d7551633970ec9b044e8ac31dbb514882175b06bc8fec5d33c5b8c2addc23e0816053b89441dd3240", &(0x7f0000000180)=""/211}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r5) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000980)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x21}}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, '/dev/ubi_ctrl\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r9, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000089}, 0x20000010) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, r0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20004011) 00:20:51 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x68080) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) write$capi20_data(r1, &(0x7f00000002c0)={{0x10, 0x1, 0x8, 0x80, 0x1020, 0x5}, 0x169, "3649a14effa2bb6c5404706bc524a84ccb16d932b93b1c80459affd21e0313a4e9bb1cde4e639819eb2c4f499c78f28cd6febfe99b5d2bddd81af0534065a9e84f5c720c9b7f14eb58e8bb951129aedb586548ad94fea0b305887843d2a5eb37ab452a6f044214236c1d9843cfc2c3aa9c7d1ef93126c0d92c8134aa86978a3aed2038afae3466000d2bc9366c0e1831d8a4eadfa7d7723ba7a3cd7d8fc96973e9d2400f2b16e391835a3d1150a84eb4ed6945168c26b6cd00a3ba55ba7330e2852f21b8b95ba92265af9f8b64cd34c5c776575464c11704b0100462f8005020a3475b15c2ada10faa8d9538a1a234ad60da03702ddde10556921b78cbfdc354d53604aa49c6c82d85969f8aa1398955f93f99b0cac04e98e71deef0e9e6d9fee9fa886a7f814b784792c7a22651bc38553e48a806b7e6a01a660b9ebd5b89f94b87d3d043c43a6f47594bca292515b1f7d4f7fc3f62eed16d41d84a0000000000000000a580440000"}, 0x17b) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) write$capi20_data(r1, &(0x7f00000002c0)={{0x10, 0x1, 0x8, 0x80, 0x1020, 0x5}, 0x169, "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"}, 0x17b) (async) 00:20:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) fsmount(r0, 0x0, 0x83) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x5110c2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000140)={'geneve1', 0x32, 0x34}, 0xa) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) (async) fsmount(r0, 0x0, 0x83) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x5110c2, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) (async) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000140)={'geneve1', 0x32, 0x34}, 0xa) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000080)) (async) socket$key(0xf, 0x3, 0x2) (async) 00:20:51 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x68080) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x25, 0x20}, 0x10) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x6c}}, 0x40080) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='x\x00', 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x25, 0x20}, 0x10) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x6c}}, 0x40080) (async) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='x\x00', 0x0, r1) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) 00:20:51 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="3056888b82eab289bc64f39dfa611229403ccee1a7f90c5890bd8b1dfae709f1a7f94138df69faccb19bc7443cc096fa1b862043e343e190101ecef3ef34e51e51d292a517e1749452dc0465175d3e1281a718068bebb31595a0db7cfda87cabd7a252ed1351026b5bfa9d716414b5adc0663bbf8dc78f71a934a072238768d4c102a6488d6443c25342167f3aaff68a9c5343484a4ba26fe07b07291e652d0996145011bb6ce718e607f2c4d0b234e4276f242a74969bb1b473bb903d37352e1974be2d64992187afdaa71b603146818c7d247f9cd04b51735b18170395b5dd231b8df26ffcb46c24", @ANYBLOB="000a25bd7000fbdbdf250500000008000800e000000109aa9393cfc4f9da37e8760e204d309a0001759a0229c3fe5c4b040c0b3790f63d18002a2b5d850000000008000400ffffffff080002000700000014000500000000000000000000c74481eab22ce0ad943d0000000000000001"], 0x5c}}, 0x10000800) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000005) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r5) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r4, &(0x7f0000000080)="7c929d405cfa14d8287a3a052c9736cb223ce099575f167407e3494408f9b90aaefb1ee049508973d919b163dfee30dc76e720c7b19780b99075d76412497421e67290aaaf8a8990f6e2476a153ac64384248bff6b1189f24f6543d35d3ae934ffa0621850c9d148f516d44207e9a01787fbec1163ce9db93fa1b72c7c6d4181e38ad8f6b5fdbfb815183457eafdf2ab21d39d3bea4d0405b5deb567d9ebcee9aaca5bb7390c4cdbbbc3d632240a56cd970e4d7551633970ec9b044e8ac31dbb514882175b06bc8fec5d33c5b8c2addc23e0816053b89441dd3240", &(0x7f0000000180)=""/211}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r5) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000980)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x21}}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, '/dev/ubi_ctrl\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r9, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000089}, 0x20000010) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, r0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20004011) 00:20:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x404000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x0, 0x25dfdbfc}, 0x14}}, 0x20040004) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:51 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x68080) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:51 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x1, 0x31}, 0x3, 0x6}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000000c0)) 00:20:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x25, 0x20}, 0x10) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x6c}}, 0x40080) (async) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='x\x00', 0x0, r1) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x404000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:51 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/109) 00:20:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) (async) fsmount(r0, 0x0, 0x83) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x5110c2, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) (async) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000140)={'geneve1', 0x32, 0x34}, 0xa) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000080)) (async) socket$key(0xf, 0x3, 0x2) 00:20:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) (async, rerun: 32) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x0, 0x25dfdbfc}, 0x14}}, 0x20040004) (rerun: 32) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x404000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x404000, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) 00:20:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000000)="8b36e2f1bd53dc548540a0dd57383d140bef268eede13bff7c766e", &(0x7f0000000040)=""/254}, 0x20) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x600040) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x9, 0x1, 0x3, 0x1de, 0x7, 0x5, 0x0, 0x4, 0x8000], 0x9, 0x1ff, 0x8000, 0x4, 0x1, 0xe9e0, 0x8000, {0x8, 0xffff, 0x800, 0x3, 0x1f, 0xe397, 0x40, 0x5, 0x8, 0x6, 0x1, 0x80000000, 0x80, 0x67f00000, "4f5613fe81d52148c232f1c65faaeddde0709934822a9ca32290884df15bf67f"}}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000017c0), 0x46001, 0x0) fsmount(r1, 0x0, 0x80) fsmount(r1, 0x1, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0xc, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5d9}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x3}, @jmp={0x5, 0x0, 0x9, 0x0, 0x7, 0xfffffffffffffff4, 0x8}]}, &(0x7f0000001bc0)='syzkaller\x00', 0x7fffffff, 0xa5, &(0x7f0000001c00)=""/165, 0x40f00, 0x4, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001cc0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001d00)={0x2, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}, 0x80) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:51 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x1, 0x31}, 0x3, 0x6}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000000c0)) (rerun: 64) 00:20:51 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/109) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/109) (async) 00:20:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2007, @fd_index=0x7, 0xffffffffffffff00, 0x4, 0x430a4e35, 0x8}, 0x1000) 00:20:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) r1 = fsmount(r0, 0x0, 0x88) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 00:20:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000000)="8b36e2f1bd53dc548540a0dd57383d140bef268eede13bff7c766e", &(0x7f0000000040)=""/254}, 0x20) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x600040) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x9, 0x1, 0x3, 0x1de, 0x7, 0x5, 0x0, 0x4, 0x8000], 0x9, 0x1ff, 0x8000, 0x4, 0x1, 0xe9e0, 0x8000, {0x8, 0xffff, 0x800, 0x3, 0x1f, 0xe397, 0x40, 0x5, 0x8, 0x6, 0x1, 0x80000000, 0x80, 0x67f00000, "4f5613fe81d52148c232f1c65faaeddde0709934822a9ca32290884df15bf67f"}}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000017c0), 0x46001, 0x0) fsmount(r1, 0x0, 0x80) fsmount(r1, 0x1, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0xc, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5d9}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x3}, @jmp={0x5, 0x0, 0x9, 0x0, 0x7, 0xfffffffffffffff4, 0x8}]}, &(0x7f0000001bc0)='syzkaller\x00', 0x7fffffff, 0xa5, &(0x7f0000001c00)=""/165, 0x40f00, 0x4, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001cc0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001d00)={0x2, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}, 0x80) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000000)="8b36e2f1bd53dc548540a0dd57383d140bef268eede13bff7c766e", &(0x7f0000000040)=""/254}, 0x20) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x600040) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x9, 0x1, 0x3, 0x1de, 0x7, 0x5, 0x0, 0x4, 0x8000], 0x9, 0x1ff, 0x8000, 0x4, 0x1, 0xe9e0, 0x8000, {0x8, 0xffff, 0x800, 0x3, 0x1f, 0xe397, 0x40, 0x5, 0x8, 0x6, 0x1, 0x80000000, 0x80, 0x67f00000, "4f5613fe81d52148c232f1c65faaeddde0709934822a9ca32290884df15bf67f"}}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000017c0), 0x46001, 0x0) (async) fsmount(r1, 0x0, 0x80) (async) fsmount(r1, 0x1, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0xc, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5d9}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x3}, @jmp={0x5, 0x0, 0x9, 0x0, 0x7, 0xfffffffffffffff4, 0x8}]}, &(0x7f0000001bc0)='syzkaller\x00', 0x7fffffff, 0xa5, &(0x7f0000001c00)=""/165, 0x40f00, 0x4, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001cc0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001d00)={0x2, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}, 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:20:51 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x1, 0x31}, 0x3, 0x6}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000000c0)) 00:20:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x0, 0x25dfdbfc}, 0x14}}, 0x20040004) (async, rerun: 64) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (rerun: 64) 00:20:51 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/109) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/109) (async) 00:20:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2007, @fd_index=0x7, 0xffffffffffffff00, 0x4, 0x430a4e35, 0x8}, 0x1000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2007, @fd_index=0x7, 0xffffffffffffff00, 0x4, 0x430a4e35, 0x8}, 0x1000) (async) 00:20:51 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, r2, r2, r2, r2, 0x0, r3, r4, r2, r5], &(0x7f0000000200)=[0x3, 0x9, 0xfffffffeffffffff, 0x72], 0xfc, 0xa, 0x6}) fsmount(r1, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x9, 0x1, 0x1, {0x0, 0x0, r0}}, 0x80000001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 00:20:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) r1 = fsmount(r0, 0x0, 0x88) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) fsmount(r0, 0x0, 0x88) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async) 00:20:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000000)="8b36e2f1bd53dc548540a0dd57383d140bef268eede13bff7c766e", &(0x7f0000000040)=""/254}, 0x20) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x600040) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x9, 0x1, 0x3, 0x1de, 0x7, 0x5, 0x0, 0x4, 0x8000], 0x9, 0x1ff, 0x8000, 0x4, 0x1, 0xe9e0, 0x8000, {0x8, 0xffff, 0x800, 0x3, 0x1f, 0xe397, 0x40, 0x5, 0x8, 0x6, 0x1, 0x80000000, 0x80, 0x67f00000, "4f5613fe81d52148c232f1c65faaeddde0709934822a9ca32290884df15bf67f"}}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000017c0), 0x46001, 0x0) (async) fsmount(r1, 0x0, 0x80) (async) fsmount(r1, 0x1, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0xc, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5d9}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x3}, @jmp={0x5, 0x0, 0x9, 0x0, 0x7, 0xfffffffffffffff4, 0x8}]}, &(0x7f0000001bc0)='syzkaller\x00', 0x7fffffff, 0xa5, &(0x7f0000001c00)=""/165, 0x40f00, 0x4, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001cc0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001d00)={0x2, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}, 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:51 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) r1 = fsmount(r0, 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42081) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x8, 0x0, 0x40, 0x20, @empty, @mcast1, 0x700, 0x80, 0x4, 0x3f}}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x28, 0x26, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5, 0xffff}, {0xe, 0x5}, {0xe, 0x3}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x840) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5420) 00:20:51 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x0, 0x4, 0x100c, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x25, 0x10}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)) fsmount(0xffffffffffffffff, 0x0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x14, 0x0, 0x80000001, 0x3, 0x4, 0x1, 0x60b, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x48) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xf, 0x7, 0x7fffffff, 0x5, 0x40, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x48) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000440)=@raw=[@jmp={0x5, 0x0, 0x5, 0x2, 0xb, 0x8, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xe, 0x80000001, 0xffffffff}, 0x10, 0x2781f, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, r1, r2, r0, r0, r3, r0, r4]}, 0x80) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000000)="fc9a0958dd05ec3af93b862680", &(0x7f0000000040)=""/35, &(0x7f0000000080)="e97c1f7d9ced46e0cf15ecc1d247a3fd6afa3c08633d015d6ae14b5c9fd1c15cb8890ee8becd932f9430a3a20d5d6e41200a9a43d74a2ea115306a6e65cf9409d72be59b0bb177503f9dcaa4309c79034ef1865bb15609d666da23765f282f1519a0d56bbfc25d08f2f5100e40c6d610260acc4f910e650124ac2c1a1dbb8cd30cf2caeb1b051aa63f0163ea044b109cec56f47b8519dd4d7f4029073db11dcf280f0605c3fb84010a4233e3f8d6d3f5e3622a4dabffa911ad4f8a6f53aa54d0f995835738f332a6b596", &(0x7f0000000180)="4beab23ac572517de2a06149fe63a063b028686b60cdbc148c4f9611a44f808f76b1b92ebf1fe72b3459c44d15bd67b698354a9d71a89df7b05af5928961270370f01fac30776edcbe81ad819408f7c460bce6572d33a8dd18a53201a16fa3649b4ad434b8c921a18b5437277848f933f9073fdec69d601d9177830b93f6c6dea58350226dee121dfd04f69cf353b537eb18fce44a3f9804b60aca110de76710acbaf905ec934a6aa4bbd04d862d6da816630c4d34191ecd18f5f55e30128beb86be6d7e05a69d8ed5a45f251d98ab345dfa589532b14f779d63ce2529c7d852ffe079773120a2", 0x2116400, r0}, 0x38) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0xffffffff}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:51 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) r1 = fsmount(r0, 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42081) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x8, 0x0, 0x40, 0x20, @empty, @mcast1, 0x700, 0x80, 0x4, 0x3f}}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x28, 0x26, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5, 0xffff}, {0xe, 0x5}, {0xe, 0x3}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x840) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5420) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r0, 0x0, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42081) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x8, 0x0, 0x40, 0x20, @empty, @mcast1, 0x700, 0x80, 0x4, 0x3f}}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x28, 0x26, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5, 0xffff}, {0xe, 0x5}, {0xe, 0x3}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x840) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5420) (async) 00:20:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2007, @fd_index=0x7, 0xffffffffffffff00, 0x4, 0x430a4e35, 0x8}, 0x1000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2007, @fd_index=0x7, 0xffffffffffffff00, 0x4, 0x430a4e35, 0x8}, 0x1000) (async) 00:20:51 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, r2, r2, r2, r2, 0x0, r3, r4, r2, r5], &(0x7f0000000200)=[0x3, 0x9, 0xfffffffeffffffff, 0x72], 0xfc, 0xa, 0x6}) fsmount(r1, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x9, 0x1, 0x1, {0x0, 0x0, r0}}, 0x80000001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, r2, r2, r2, r2, 0x0, r3, r4, r2, r5], &(0x7f0000000200)=[0x3, 0x9, 0xfffffffeffffffff, 0x72], 0xfc, 0xa, 0x6}) (async) fsmount(r1, 0x0, 0x2) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x9, 0x1, 0x1, {0x0, 0x0, r0}}, 0x80000001) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) 00:20:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) r1 = fsmount(r0, 0x0, 0x88) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 00:20:51 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000200)={0x4, &(0x7f00000002c0)="d50370df3342d0afa6bbb81a03d60bbcd6b217acd825ab5098bde7793860c6315a1fe93dd436b51063275a32411f3afbf304955fd9b5c813f8ece8b0ef028a21ee4cd29ed3179848f46448f27fc7dfb32a7de45a45ce76c71133a6803b70a90268a6258ae42198ccdeca08ca423b2309e468b02b06b83314b47d4adba433fd03b45890b837a785f9e982103fa31815fbb4c6d80cb30f3e1871889625989dacff59eb81bb91f6e40aab80b5bec87c63af37d402de48f56ac928a364b3b24b32270b25f99ea65b03"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x149042, 0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f00000003c0)=0x5) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000000)) write$capi20(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x74, 0x83, 0x83, 0x8001}, 0x10) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000140)=0xfff) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000100)) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f00000000c0)={@any, 0x4}) 00:20:51 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x0, 0x4, 0x100c, 0xffffffffffffffff, 0x3}, 0x48) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x25, 0x10}, 0x10) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(0xffffffffffffffff, 0x0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x14, 0x0, 0x80000001, 0x3, 0x4, 0x1, 0x60b, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x48) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xf, 0x7, 0x7fffffff, 0x5, 0x40, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x48) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000440)=@raw=[@jmp={0x5, 0x0, 0x5, 0x2, 0xb, 0x8, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xe, 0x80000001, 0xffffffff}, 0x10, 0x2781f, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, r1, r2, r0, r0, r3, r0, r4]}, 0x80) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000000)="fc9a0958dd05ec3af93b862680", &(0x7f0000000040)=""/35, &(0x7f0000000080)="e97c1f7d9ced46e0cf15ecc1d247a3fd6afa3c08633d015d6ae14b5c9fd1c15cb8890ee8becd932f9430a3a20d5d6e41200a9a43d74a2ea115306a6e65cf9409d72be59b0bb177503f9dcaa4309c79034ef1865bb15609d666da23765f282f1519a0d56bbfc25d08f2f5100e40c6d610260acc4f910e650124ac2c1a1dbb8cd30cf2caeb1b051aa63f0163ea044b109cec56f47b8519dd4d7f4029073db11dcf280f0605c3fb84010a4233e3f8d6d3f5e3622a4dabffa911ad4f8a6f53aa54d0f995835738f332a6b596", &(0x7f0000000180)="4beab23ac572517de2a06149fe63a063b028686b60cdbc148c4f9611a44f808f76b1b92ebf1fe72b3459c44d15bd67b698354a9d71a89df7b05af5928961270370f01fac30776edcbe81ad819408f7c460bce6572d33a8dd18a53201a16fa3649b4ad434b8c921a18b5437277848f933f9073fdec69d601d9177830b93f6c6dea58350226dee121dfd04f69cf353b537eb18fce44a3f9804b60aca110de76710acbaf905ec934a6aa4bbd04d862d6da816630c4d34191ecd18f5f55e30128beb86be6d7e05a69d8ed5a45f251d98ab345dfa589532b14f779d63ce2529c7d852ffe079773120a2", 0x2116400, r0}, 0x38) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0xffffffff}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) [ 1251.550832][T11076] kcapi: manufacturer command 4 unknown. 00:20:51 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (rerun: 32) r1 = fsmount(r0, 0x0, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42081) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x8, 0x0, 0x40, 0x20, @empty, @mcast1, 0x700, 0x80, 0x4, 0x3f}}) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x28, 0x26, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5, 0xffff}, {0xe, 0x5}, {0xe, 0x3}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x840) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5420) (rerun: 64) 00:20:51 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, r2, r2, r2, r2, 0x0, r3, r4, r2, r5], &(0x7f0000000200)=[0x3, 0x9, 0xfffffffeffffffff, 0x72], 0xfc, 0xa, 0x6}) fsmount(r1, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x9, 0x1, 0x1, {0x0, 0x0, r0}}, 0x80000001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, r2, r2, r2, r2, 0x0, r3, r4, r2, r5], &(0x7f0000000200)=[0x3, 0x9, 0xfffffffeffffffff, 0x72], 0xfc, 0xa, 0x6}) (async) fsmount(r1, 0x0, 0x2) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x9, 0x1, 0x1, {0x0, 0x0, r0}}, 0x80000001) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) 00:20:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x321840) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000040)) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = fsmount(r3, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x541b, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="6970d8a5c635ea8e8c8a2a441e4275f794"], 0xa) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x103402) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000140)="fa49bf97395df4ad96b962010c9ed4a313b4e4995ca39cada1470e3f3dd6effa4b39b40f0629ecbcda9e0e9cfa71c0a188afdd33b78fb77dccbfc80a1130bbbf3ef27f0fb3ddbb5b2377c57aa3b9c426c23acfcacc46519c210c394e631d7436747c72e86cd6172c5c3b3a09dd4b860629d42e1d2e0f7fed8620fdcd94f090419ce598a64a33ee357bd37953fc1a160822d211ca0f70ed832f4b1072288f1d687aad876ad4a941d1f20274494608390d557a54", 0xb3}) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) 00:20:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x321840) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000040)) (async, rerun: 64) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) (rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (rerun: 64) fsmount(r3, 0x0, 0x2) (async, rerun: 64) r4 = fsmount(r3, 0x1, 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x541b, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="6970d8a5c635ea8e8c8a2a441e4275f794"], 0xa) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x103402) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000140)="fa49bf97395df4ad96b962010c9ed4a313b4e4995ca39cada1470e3f3dd6effa4b39b40f0629ecbcda9e0e9cfa71c0a188afdd33b78fb77dccbfc80a1130bbbf3ef27f0fb3ddbb5b2377c57aa3b9c426c23acfcacc46519c210c394e631d7436747c72e86cd6172c5c3b3a09dd4b860629d42e1d2e0f7fed8620fdcd94f090419ce598a64a33ee357bd37953fc1a160822d211ca0f70ed832f4b1072288f1d687aad876ad4a941d1f20274494608390d557a54", 0xb3}) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) 00:20:51 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000200)={0x4, &(0x7f00000002c0)="d50370df3342d0afa6bbb81a03d60bbcd6b217acd825ab5098bde7793860c6315a1fe93dd436b51063275a32411f3afbf304955fd9b5c813f8ece8b0ef028a21ee4cd29ed3179848f46448f27fc7dfb32a7de45a45ce76c71133a6803b70a90268a6258ae42198ccdeca08ca423b2309e468b02b06b83314b47d4adba433fd03b45890b837a785f9e982103fa31815fbb4c6d80cb30f3e1871889625989dacff59eb81bb91f6e40aab80b5bec87c63af37d402de48f56ac928a364b3b24b32270b25f99ea65b03"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x149042, 0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f00000003c0)=0x5) (async) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000000)) (async) write$capi20(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x74, 0x83, 0x83, 0x8001}, 0x10) (async) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000140)=0xfff) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000100)) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f00000000c0)={@any, 0x4}) [ 1251.635145][T11107] kcapi: manufacturer command 4 unknown. 00:20:51 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:51 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x0, 0x4, 0x100c, 0xffffffffffffffff, 0x3}, 0x48) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x25, 0x10}, 0x10) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(0xffffffffffffffff, 0x0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x14, 0x0, 0x80000001, 0x3, 0x4, 0x1, 0x60b, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x48) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xf, 0x7, 0x7fffffff, 0x5, 0x40, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x48) (async) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000440)=@raw=[@jmp={0x5, 0x0, 0x5, 0x2, 0xb, 0x8, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xe, 0x80000001, 0xffffffff}, 0x10, 0x2781f, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, r1, r2, r0, r0, r3, r0, r4]}, 0x80) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000000)="fc9a0958dd05ec3af93b862680", &(0x7f0000000040)=""/35, &(0x7f0000000080)="e97c1f7d9ced46e0cf15ecc1d247a3fd6afa3c08633d015d6ae14b5c9fd1c15cb8890ee8becd932f9430a3a20d5d6e41200a9a43d74a2ea115306a6e65cf9409d72be59b0bb177503f9dcaa4309c79034ef1865bb15609d666da23765f282f1519a0d56bbfc25d08f2f5100e40c6d610260acc4f910e650124ac2c1a1dbb8cd30cf2caeb1b051aa63f0163ea044b109cec56f47b8519dd4d7f4029073db11dcf280f0605c3fb84010a4233e3f8d6d3f5e3622a4dabffa911ad4f8a6f53aa54d0f995835738f332a6b596", &(0x7f0000000180)="4beab23ac572517de2a06149fe63a063b028686b60cdbc148c4f9611a44f808f76b1b92ebf1fe72b3459c44d15bd67b698354a9d71a89df7b05af5928961270370f01fac30776edcbe81ad819408f7c460bce6572d33a8dd18a53201a16fa3649b4ad434b8c921a18b5437277848f933f9073fdec69d601d9177830b93f6c6dea58350226dee121dfd04f69cf353b537eb18fce44a3f9804b60aca110de76710acbaf905ec934a6aa4bbd04d862d6da816630c4d34191ecd18f5f55e30128beb86be6d7e05a69d8ed5a45f251d98ab345dfa589532b14f779d63ce2529c7d852ffe079773120a2", 0x2116400, r0}, 0x38) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0xffffffff}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:51 executing program 2: socketpair(0x11, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) 00:20:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x52000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:51 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000200)={0x4, &(0x7f00000002c0)="d50370df3342d0afa6bbb81a03d60bbcd6b217acd825ab5098bde7793860c6315a1fe93dd436b51063275a32411f3afbf304955fd9b5c813f8ece8b0ef028a21ee4cd29ed3179848f46448f27fc7dfb32a7de45a45ce76c71133a6803b70a90268a6258ae42198ccdeca08ca423b2309e468b02b06b83314b47d4adba433fd03b45890b837a785f9e982103fa31815fbb4c6d80cb30f3e1871889625989dacff59eb81bb91f6e40aab80b5bec87c63af37d402de48f56ac928a364b3b24b32270b25f99ea65b03"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x149042, 0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f00000003c0)=0x5) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000000)) write$capi20(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x74, 0x83, 0x83, 0x8001}, 0x10) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000140)=0xfff) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000100)) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f00000000c0)={@any, 0x4}) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000200)={0x4, &(0x7f00000002c0)="d50370df3342d0afa6bbb81a03d60bbcd6b217acd825ab5098bde7793860c6315a1fe93dd436b51063275a32411f3afbf304955fd9b5c813f8ece8b0ef028a21ee4cd29ed3179848f46448f27fc7dfb32a7de45a45ce76c71133a6803b70a90268a6258ae42198ccdeca08ca423b2309e468b02b06b83314b47d4adba433fd03b45890b837a785f9e982103fa31815fbb4c6d80cb30f3e1871889625989dacff59eb81bb91f6e40aab80b5bec87c63af37d402de48f56ac928a364b3b24b32270b25f99ea65b03"}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x149042, 0x0) (async) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f00000003c0)=0x5) (async) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000000)) (async) write$capi20(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x74, 0x83, 0x83, 0x8001}, 0x10) (async) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000140)=0xfff) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000100)) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f00000000c0)={@any, 0x4}) (async) 00:20:51 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r0, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) [ 1251.680978][T11128] kcapi: manufacturer command 4 unknown. [ 1251.691961][T11130] kcapi: manufacturer command 4 unknown. 00:20:51 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x0, 0xc0}}}}}]}}]}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x52000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:51 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r0, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) 00:20:51 executing program 2: socketpair(0x11, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) socketpair(0x11, 0x1, 0x1, &(0x7f0000000000)) (async) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) (async) 00:20:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x321840) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000040)) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) r4 = fsmount(r3, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x541b, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="6970d8a5c635ea8e8c8a2a441e4275f794"], 0xa) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x103402) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000140)="fa49bf97395df4ad96b962010c9ed4a313b4e4995ca39cada1470e3f3dd6effa4b39b40f0629ecbcda9e0e9cfa71c0a188afdd33b78fb77dccbfc80a1130bbbf3ef27f0fb3ddbb5b2377c57aa3b9c426c23acfcacc46519c210c394e631d7436747c72e86cd6172c5c3b3a09dd4b860629d42e1d2e0f7fed8620fdcd94f090419ce598a64a33ee357bd37953fc1a160822d211ca0f70ed832f4b1072288f1d687aad876ad4a941d1f20274494608390d557a54", 0xb3}) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) [ 1251.718247][T11144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.723701][T11144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:20:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) fsmount(r1, 0x1, 0x2) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x52000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:51 executing program 2: socketpair(0x11, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) 00:20:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xe0a00, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x4, 0xfffffff7, 0x3, 0x0, 0x11}) 00:20:51 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x248000) r2 = fsmount(0xffffffffffffffff, 0x0, 0x89) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)) r4 = fsmount(r2, 0x0, 0x2) syz_open_dev$sndctrl(&(0x7f0000000080), 0x6, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) 00:20:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x18, 0xfffffffa, 0x8, 0x1, 0x400, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x1c, 0x4, 0x18c, 0x20, 0x0, 0xffffffffffffffff, 0x233f, '\x00', r1}, 0x48) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001240), 0x101800, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x1, 0x10000, 0x2, 0x2a5, 0x401, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) r6 = fsmount(0xffffffffffffffff, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0xd, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000b543e401000000000100000085000000b2000000852000000200000018430000feffffff0000000000000000186d00000e000000000000005a5b00001811000011ce5c8d4c526f0cad92cc12db1a790453ca7607f850fec9b1b1556307bb0295d244ff3327f25a9dbe4a2fe9ef7cd031e70b0a21c5ec286bcabe2ca570c55b9f15adb22c703e842408e1d8dd5d105f7f1f8df98de0a396573553ee2741cde50014afa34bf7fa01b4d5e4307bf871fbd89828d9619d432a20c998c88f48ca42aba67277f4ba36cc0845eed213ef3c444ca99940f1917691a4283cd34d2c858100454300de0b46dad170e44d5e55e88e3f728b8443f747e7dc4bb59f8a594702af06db369dc09d7ded159056c4c699ae71404b6dbd9060a1eae0493ed0e57ae99ee3d01e16dfe56f02a75ded667199d0f789f34e3ae7921a842869c45e2bf9bfe479b5c22cd032e7e0ed866abc7576b6fdbef6699406e0980079cc472f17be9e522e9187b702ca2be26a57fd911923f57ccb3ff00862e59c05acb012dcd8e50dfd5574e7f65e0dcbd47242a7b7bcc0ea5c2b65cc154cea0d552e2863bcbe8a5c1a06aa0f8c6714f7a484dca10b8592a520af9013567c2c8a5137b4357a5fdb37fa7729d7e16ea47227d2aa0c25e00cc2bc6a1b", @ANYRES32=r0, @ANYBLOB="0000000000000000182a0000", @ANYRES32, @ANYBLOB="00000000050000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x1, 0x9c, &(0x7f0000001180)=""/156, 0x82300, 0x1, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001280)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x1, 0x0, 0xf7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001380)=[r3, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6]}, 0x80) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x520041) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x5420) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f0000000040)=""/4096) 00:20:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) fsmount(r1, 0x1, 0x2) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:52 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x0, 0xc0}}}}}]}}]}}, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x18, 0xfffffffa, 0x8, 0x1, 0x400, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x1c, 0x4, 0x18c, 0x20, 0x0, 0xffffffffffffffff, 0x233f, '\x00', r1}, 0x48) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001240), 0x101800, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x1, 0x10000, 0x2, 0x2a5, 0x401, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) (async) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r5, 0x0, 0x2) r6 = fsmount(0xffffffffffffffff, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0xd, &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000182a0000", @ANYRES32, @ANYBLOB="00000000050000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x1, 0x9c, &(0x7f0000001180)=""/156, 0x82300, 0x1, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001280)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x1, 0x0, 0xf7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001380)=[r3, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6]}, 0x80) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x520041) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x5420) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f0000000040)=""/4096) 00:20:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xe0a00, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x4, 0xfffffff7, 0x3, 0x0, 0x11}) 00:20:52 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x600881) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000080)={{0x0, 0x0, 0x9, 0x1, 0xfb36}, 0x0, 0xb741, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:52 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r0, 0x0, 0x2) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x248000) r2 = fsmount(0xffffffffffffffff, 0x0, 0x89) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)) (async) r4 = fsmount(r2, 0x0, 0x2) (async) syz_open_dev$sndctrl(&(0x7f0000000080), 0x6, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x2, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) 00:20:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) fsmount(r1, 0x1, 0x2) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) fsmount(r1, 0x1, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) 00:20:52 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x600881) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000080)={{0x0, 0x0, 0x9, 0x1, 0xfb36}, 0x0, 0xb741, 0xffffffffffffffff}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x18, 0xfffffffa, 0x8, 0x1, 0x400, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x1c, 0x4, 0x18c, 0x20, 0x0, 0xffffffffffffffff, 0x233f, '\x00', r1}, 0x48) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001240), 0x101800, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x1, 0x10000, 0x2, 0x2a5, 0x401, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) r6 = fsmount(0xffffffffffffffff, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0xd, &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000182a0000", @ANYRES32, @ANYBLOB="00000000050000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x1, 0x9c, &(0x7f0000001180)=""/156, 0x82300, 0x1, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001280)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x1, 0x0, 0xf7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001380)=[r3, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6]}, 0x80) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x520041) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x5420) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f0000000040)=""/4096) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x18, 0xfffffffa, 0x8, 0x1, 0x400, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'vcan0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x1c, 0x4, 0x18c, 0x20, 0x0, 0xffffffffffffffff, 0x233f, '\x00', r1}, 0x48) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001240), 0x101800, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x1, 0x10000, 0x2, 0x2a5, 0x401, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r5, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0xd, &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000182a0000", @ANYRES32, @ANYBLOB="00000000050000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x1, 0x9c, &(0x7f0000001180)=""/156, 0x82300, 0x1, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001280)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x1, 0x0, 0xf7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001380)=[r3, r4, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6]}, 0x80) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x520041) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f0000000040)=""/4096) (async) 00:20:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) connect$can_j1939(r0, &(0x7f0000000300), 0x18) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x14424d94486caa7a, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x5421, 0x0) 00:20:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xe0a00, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x4, 0xfffffff7, 0x3, 0x0, 0x11}) 00:20:52 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 64) fsmount(r0, 0x0, 0x2) (async, rerun: 32) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x248000) (async, rerun: 32) r2 = fsmount(0xffffffffffffffff, 0x0, 0x89) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)) r4 = fsmount(r2, 0x0, 0x2) (async) syz_open_dev$sndctrl(&(0x7f0000000080), 0x6, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) [ 1252.294703][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.310202][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.321184][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:20:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) [ 1252.333799][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:20:52 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x600881) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000080)={{0x0, 0x0, 0x9, 0x1, 0xfb36}, 0x0, 0xb741, 0xffffffffffffffff}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) (async) connect$can_j1939(r0, &(0x7f0000000300), 0x18) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x14424d94486caa7a, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x5421, 0x0) 00:20:52 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd}, [@call_mgmt={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x0, 0xc0}}}}}]}}]}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:52 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x7fffffff, 0x0, 0x25a}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) (async) 00:20:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) connect$can_j1939(r0, &(0x7f0000000300), 0x18) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x14424d94486caa7a, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x5421, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) (async) connect$can_j1939(r0, &(0x7f0000000300), 0x18) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x14424d94486caa7a, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x5421, 0x0) (async) 00:20:52 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x7fffffff, 0x0, 0x25a}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x7fffffff, 0x0, 0x25a}) (async) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:20:52 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000080)={{0x0, 0x3, 0x10007, 0x1, 0x6}, 0xa6, 0x799, 'id0\x00', 'timer1\x00', 0x0, 0x9, 0x5, 0x8d1, 0xb3}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000180)=0x1f) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid\x00') [ 1252.404967][T11270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.414169][T11270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:20:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) 00:20:52 executing program 4: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@none, 0x4}) r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) 00:20:52 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x7fffffff, 0x0, 0x25a}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x7fffffff, 0x0, 0x25a}) (async) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:20:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="1590869714e22412e5fc81ba7f7eed0b8823715bac0be08012d683e88ac6168dcb9c81ebb5ce3881bbb0c47ddb69e8be6208ddfcd75039b7c62b1699f68c41dc1d1567a9fe62f2da353181b7eb5cc38a8329ebb52887295193483f9900a7", 0x5e}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:52 executing program 0: io_uring_setup(0x80726f, &(0x7f00000000c0)={0x0, 0x42fc, 0x20, 0x0, 0x181}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:52 executing program 4: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@none, 0x4}) r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@none, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (async) 00:20:52 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000080)={{0x0, 0x3, 0x10007, 0x1, 0x6}, 0xa6, 0x799, 'id0\x00', 'timer1\x00', 0x0, 0x9, 0x5, 0x8d1, 0xb3}) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000180)=0x1f) (async, rerun: 64) socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid\x00') 00:20:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="1590869714e22412e5fc81ba7f7eed0b8823715bac0be08012d683e88ac6168dcb9c81ebb5ce3881bbb0c47ddb69e8be6208ddfcd75039b7c62b1699f68c41dc1d1567a9fe62f2da353181b7eb5cc38a8329ebb52887295193483f9900a7", 0x5e}) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000000c0)={0x9, 0x6, 0x510, 0x7, 0x3, [0x26, 0x8000, 0x80000001, 0x3], [0x8, 0x8000, 0x9, 0x8], [0x40, 0x7603, 0x9a, 0x9f], [0x7, 0x8, 0x9, 0x4]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0x3, 0x0, 0x3209c00, 0x0, 0x400}, 0x3d1a, 0x1000}) 00:20:52 executing program 0: io_uring_setup(0x80726f, &(0x7f00000000c0)={0x0, 0x42fc, 0x20, 0x0, 0x181}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="1590869714e22412e5fc81ba7f7eed0b8823715bac0be08012d683e88ac6168dcb9c81ebb5ce3881bbb0c47ddb69e8be6208ddfcd75039b7c62b1699f68c41dc1d1567a9fe62f2da353181b7eb5cc38a8329ebb52887295193483f9900a7", 0x5e}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:52 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000000c0)={0x9, 0x6, 0x510, 0x7, 0x3, [0x26, 0x8000, 0x80000001, 0x3], [0x8, 0x8000, 0x9, 0x8], [0x40, 0x7603, 0x9a, 0x9f], [0x7, 0x8, 0x9, 0x4]}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0x3, 0x0, 0x3209c00, 0x0, 0x400}, 0x3d1a, 0x1000}) (rerun: 32) 00:20:52 executing program 4: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@none, 0x4}) r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@none, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (async) 00:20:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:52 executing program 0: io_uring_setup(0x80726f, &(0x7f00000000c0)={0x0, 0x42fc, 0x20, 0x0, 0x181}) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:52 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000080)={{0x0, 0x3, 0x10007, 0x1, 0x6}, 0xa6, 0x799, 'id0\x00', 'timer1\x00', 0x0, 0x9, 0x5, 0x8d1, 0xb3}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000180)=0x1f) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid\x00') openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000080)={{0x0, 0x3, 0x10007, 0x1, 0x6}, 0xa6, 0x799, 'id0\x00', 'timer1\x00', 0x0, 0x9, 0x5, 0x8d1, 0xb3}) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000180)=0x1f) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid\x00') (async) 00:20:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x15}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x541b, 0x0) r2 = fsmount(r1, 0x1, 0xf9) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x5, 0x7f, 0x1000, 0x0, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000140)={0x8, 0x4, 0x47, 0x3ff, 'syz0\x00', 0x8}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x80, 0xa3, 0x11, @loopback, @mcast1, 0x1, 0x20, 0x1f, 0xaed}}) 00:20:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3, r1}) 00:20:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000000c0)={0x9, 0x6, 0x510, 0x7, 0x3, [0x26, 0x8000, 0x80000001, 0x3], [0x8, 0x8000, 0x9, 0x8], [0x40, 0x7603, 0x9a, 0x9f], [0x7, 0x8, 0x9, 0x4]}) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0x3, 0x0, 0x3209c00, 0x0, 0x400}, 0x3d1a, 0x1000}) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async, rerun: 32) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) (rerun: 32) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3, r1}) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5df32afcbca66644392b00ebfffffffff2bbc7f9b3f7"], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x109200, 0x0) r2 = fsmount(r1, 0x0, 0xfc) r3 = fsmount(r2, 0x1, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r6 = fsmount(r5, 0x0, 0xf6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000040)={0x2, 0x81, 0xff, 0x0, 0x7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 00:20:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x15}, 0x10) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x541b, 0x0) r2 = fsmount(r1, 0x1, 0xf9) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x5, 0x7f, 0x1000, 0x0, 0x4}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000140)={0x8, 0x4, 0x47, 0x3ff, 'syz0\x00', 0x8}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x80, 0xa3, 0x11, @loopback, @mcast1, 0x1, 0x20, 0x1f, 0xaed}}) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0}, 0x10) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 64) fsmount(r1, 0x0, 0x2) (async, rerun: 64) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3, r1}) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5df32afcbca66644392b00ebfffffffff2bbc7f9b3f7"], 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 64) fsmount(r1, 0x0, 0x2) (async, rerun: 64) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x15}, 0x10) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x541b, 0x0) (async) r2 = fsmount(r1, 0x1, 0xf9) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x5, 0x7f, 0x1000, 0x0, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000140)={0x8, 0x4, 0x47, 0x3ff, 'syz0\x00', 0x8}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x80, 0xa3, 0x11, @loopback, @mcast1, 0x1, 0x20, 0x1f, 0xaed}}) 00:20:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x109200, 0x0) r2 = fsmount(r1, 0x0, 0xfc) r3 = fsmount(r2, 0x1, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r6 = fsmount(r5, 0x0, 0xf6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000040)={0x2, 0x81, 0xff, 0x0, 0x7}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x404000, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x301500, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x1, 0x6, 0x9, "74318b7edba183489cacda5758b519e61ec95e11d7b468e04468822bbbcb7aabbcd0074b8746ff7ea412d22995ddafb2e37868d8047c6ab8a295486f991ee99d", "316a9f680abc004c266ed070835b26b3fa67819b98b2516c603631d6e6ba44ab27835c7128e67e290ddb3aa6d1afa2b8ecd819319965d39a5bd43c5d557857e3", "61128acc0d70f843877c414a2f55e398bf42821560da0e1a5b429773fcb66b88", [0x9e5, 0x7]}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x158) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x109200, 0x0) r2 = fsmount(r1, 0x0, 0xfc) r3 = fsmount(r2, 0x1, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) (async) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async, rerun: 64) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (rerun: 64) r6 = fsmount(r5, 0x0, 0xf6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000040)={0x2, 0x81, 0xff, 0x0, 0x7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="5df32afcbca66644392b00ebfffffffff2bbc7f9b3f7"], 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x404000, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x50082) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) 00:20:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x301500, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x1, 0x6, 0x9, "74318b7edba183489cacda5758b519e61ec95e11d7b468e04468822bbbcb7aabbcd0074b8746ff7ea412d22995ddafb2e37868d8047c6ab8a295486f991ee99d", "316a9f680abc004c266ed070835b26b3fa67819b98b2516c603631d6e6ba44ab27835c7128e67e290ddb3aa6d1afa2b8ecd819319965d39a5bd43c5d557857e3", "61128acc0d70f843877c414a2f55e398bf42821560da0e1a5b429773fcb66b88", [0x9e5, 0x7]}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x158) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:53 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x404000, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f3feffff", @ANYRES16=0x0, @ANYBLOB="0000614585320160f162f1a54e03000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x8001) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x50082) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x301500, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x1, 0x6, 0x9, "74318b7edba183489cacda5758b519e61ec95e11d7b468e04468822bbbcb7aabbcd0074b8746ff7ea412d22995ddafb2e37868d8047c6ab8a295486f991ee99d", "316a9f680abc004c266ed070835b26b3fa67819b98b2516c603631d6e6ba44ab27835c7128e67e290ddb3aa6d1afa2b8ecd819319965d39a5bd43c5d557857e3", "61128acc0d70f843877c414a2f55e398bf42821560da0e1a5b429773fcb66b88", [0x9e5, 0x7]}) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x158) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:53 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f3feffff", @ANYRES16=0x0, @ANYBLOB="0000614585320160f162f1a54e03000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x8001) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x604240, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x0, 0x9, 0x2, 0x0, 0x5}) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) (async) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x50082) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:53 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) 00:20:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000000c0)={0x1, 0x1, 0x4, 0x1, 0x3ff}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x604240, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x0, 0x9, 0x2, 0x0, 0x5}) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa5865ddf6c922ccb) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x204101) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f3feffff", @ANYRES16=0x0, @ANYBLOB="0000614585320160f162f1a54e03000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x8001) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 00:20:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) process_madvise(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="ccac548ed68425de57f85671da9a879c2bfde087a00f6dd974974e09902f5c86ed9968a1779b0ec1736603e1c351fffd199d8c4797b7856cff977b907639fcc5bf4b86b5d1dbedf77ecf903c08b0391f75dffbf25a63ef773c8ff1ebbc13a723bc0e3f0753a6430b962d675e7dace2618b9baf46ed0b88d9ef993fe75a7605ad34a6f32c1599a4c43f814f9d43f2e71d3a06d177d49a593aafe4a9804538fdc8259d178da4061df4e557829b97acd17159f813697e83776b017e3e54b149b9d11782517a778d7a17b0d314b81dc046ac313de82ee04ec073", 0xd8}], 0x1, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x604240, 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x0, 0x9, 0x2, 0x0, 0x5}) 00:20:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000000c0)={0x1, 0x1, 0x4, 0x1, 0x3ff}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)) (rerun: 32) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa5865ddf6c922ccb) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x204101) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r2) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="a73a9cda2b9de80bee57bebe2d0758fa48274fed327126bdd2d0ad4a8f13cd9956e4849a2118b332c80372873c98e788318bd98c886f1a1ca5dd257a705b90eb15979913cda6fa43617e6a908fb5052a38e0198ea3ff1beeaec9b38c5fd049a121c48979b5655767f97aa6a053b170b325b5d4e6a3726f97764e87fc7d1a1f14de37dfedb0d012db23e44878b504ea3c5b72f7fcceeaec84e7a97f38ffff0b079889218291c0563b3308e40aff5749912bba5f47735fd4cd7419c7", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async, rerun: 32) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 00:20:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) process_madvise(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="ccac548ed68425de57f85671da9a879c2bfde087a00f6dd974974e09902f5c86ed9968a1779b0ec1736603e1c351fffd199d8c4797b7856cff977b907639fcc5bf4b86b5d1dbedf77ecf903c08b0391f75dffbf25a63ef773c8ff1ebbc13a723bc0e3f0753a6430b962d675e7dace2618b9baf46ed0b88d9ef993fe75a7605ad34a6f32c1599a4c43f814f9d43f2e71d3a06d177d49a593aafe4a9804538fdc8259d178da4061df4e557829b97acd17159f813697e83776b017e3e54b149b9d11782517a778d7a17b0d314b81dc046ac313de82ee04ec073", 0xd8}], 0x1, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa5865ddf6c922ccb) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x204101) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x100010, r0, 0x8000000) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x0, 0x8000, 0x20}) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000000c0)={0x1, 0x1, 0x4, 0x1, 0x3ff}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)) (rerun: 64) 00:20:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) process_madvise(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="ccac548ed68425de57f85671da9a879c2bfde087a00f6dd974974e09902f5c86ed9968a1779b0ec1736603e1c351fffd199d8c4797b7856cff977b907639fcc5bf4b86b5d1dbedf77ecf903c08b0391f75dffbf25a63ef773c8ff1ebbc13a723bc0e3f0753a6430b962d675e7dace2618b9baf46ed0b88d9ef993fe75a7605ad34a6f32c1599a4c43f814f9d43f2e71d3a06d177d49a593aafe4a9804538fdc8259d178da4061df4e557829b97acd17159f813697e83776b017e3e54b149b9d11782517a778d7a17b0d314b81dc046ac313de82ee04ec073", 0xd8}], 0x1, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r2) (async) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="a73a9cda2b9de80bee57bebe2d0758fa48274fed327126bdd2d0ad4a8f13cd9956e4849a2118b332c80372873c98e788318bd98c886f1a1ca5dd257a705b90eb15979913cda6fa43617e6a908fb5052a38e0198ea3ff1beeaec9b38c5fd049a121c48979b5655767f97aa6a053b170b325b5d4e6a3726f97764e87fc7d1a1f14de37dfedb0d012db23e44878b504ea3c5b72f7fcceeaec84e7a97f38ffff0b079889218291c0563b3308e40aff5749912bba5f47735fd4cd7419c7", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2e0901) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0xfe, &(0x7f0000000200)=""/254, 0x40f00, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10, 0x80000001, 0xfffff344}, 0x10}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000480)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000500)) fsmount(r3, 0x0, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, 0x0, 0x25, 0x1b}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x9, 0x2, 0x19, @local, @private0, 0x717, 0x8, 0x2, 0xfffffebc}}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1c, 0x7, 0x4, 0x0, 0x2, r3, 0x3ff, '\x00', r5, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x48) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000400)) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x100010, r0, 0x8000000) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x0, 0x8000, 0x20}) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fsmount(r1, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000200)={0x8, 0x1, 0x4, 0x1, 0x0, [0x0, 0xccd3, 0x7, 0x9], [0x744, 0x7, 0x3, 0x8], [0xffffff7f, 0xffffffff, 0xffff, 0x986], [0x3, 0x0, 0x8, 0x5]}) r2 = fsmount(r1, 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x4c61, 0x3, 0x8001}, 0x7, 0x991, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f00000000c0)) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2e0901) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="ff3b0100620b00008500000081000000ed7ad8ff010000005b3f0363f0ffffffffff18530000100000000000000000995185e1822acef50000852000e50300000018380000010000000000000000000000f3d25f8c2ff1ccbc9b193ccf92e2a9e69a8f9af5ae5b2c91dd19342068881cffb2802756653a29089dbcedea6c98f94e6055f3af88d4bc36a0d97b6d86b4f544f8e6685c087eef60b83e7bb05c72d5a22bc8ce38dac2f1ee6826672660775711d16802af5900b46aeb2f3c1583f70fab19ae4fe86fbc309237228fe8139504925712ad080cf282be270a836fa98f6e2716e47ab025c8fc7a6d74ddad851afd50321541fe7e57d8f5d635448256b5d49294aaeeaf0f7348aa734f66d54625061a825ee36c2eadf45ebaef3d907be58ba51666f7fb23c32838ba207482cb96080c684d78ad45ae4d2652686b011ba7a45a543e5f75f1630000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0xfe, &(0x7f0000000200)=""/254, 0x40f00, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10, 0x80000001, 0xfffff344}, 0x10}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000480)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000500)) fsmount(r3, 0x0, 0x2) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, 0x0, 0x25, 0x1b}, 0x10) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x9, 0x2, 0x19, @local, @private0, 0x717, 0x8, 0x2, 0xfffffebc}}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1c, 0x7, 0x4, 0x0, 0x2, r3, 0x3ff, '\x00', r5, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x48) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000400)) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x100010, r0, 0x8000000) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x0, 0x8000, 0x20}) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000140)="b771978eb8e141881ce4f5aee067b1fd33202131b780d2250b2c50cdbdd0868e9d992aff071107990b61496cb60960f799d7ed251500d349ca1e3ae00e87bc9d75465b3a5bdd0f9a3edc672ca88ffc089251353fcb4d5d05d5970c0cda4609d1063ff2b07fb2d92252f5a8baed4846132ae3767f8dc57c4e5c879dde8588e032faef8ea7c6927ce45dac4bbbaf7a319b6ebe475fbe6becf2a41a36c18f652660dbd068a730ef0f24c4b9f6ba5262a065a0cc7f47ac9bf55243727962b84fed6002af9caa7cd4c02c4f6755eacbf3e74f6f0ce7f5c7e3", &(0x7f00000002c0)=""/116}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, &(0x7f0000000000)="fa65cbba58f4e3d105856701aba8b7bbb41319c07d553b1698850a3c2028c5f8ca16e0986bf4d4473f45c18f05264eae40d4cd18078be8cc21265a6a608faafad6bf6cb4fd10be8f38b7c9ee13336c4915d6b43a0e974bf505462707e1d8a1c16fd502108a967a7dd1995a827bd4b012b9698e3ba1916734a8c6a5fb337cb010b1b3d41c5d3a2f3d7b3bee711e90573ff623b0af9998fd4acd", &(0x7f00000000c0)=""/8}, 0x20) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r2) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="a73a9cda2b9de80bee57bebe2d0758fa48274fed327126bdd2d0ad4a8f13cd9956e4849a2118b332c80372873c98e788318bd98c886f1a1ca5dd257a705b90eb15979913cda6fa43617e6a908fb5052a38e0198ea3ff1beeaec9b38c5fd049a121c48979b5655767f97aa6a053b170b325b5d4e6a3726f97764e87fc7d1a1f14de37dfedb0d012db23e44878b504ea3c5b72f7fcceeaec84e7a97f38ffff0b079889218291c0563b3308e40aff5749912bba5f47735fd4cd7419c7", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2e0901) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="ff3b0100620b00008500000081000000ed7ad8ff010000005b3f0363f0ffffffffff18530000100000000000000000995185e1822acef50000852000e50300000018380000010000000000000000000000f3d25f8c2ff1ccbc9b193ccf92e2a9e69a8f9af5ae5b2c91dd19342068881cffb2802756653a29089dbcedea6c98f94e6055f3af88d4bc36a0d97b6d86b4f544f8e6685c087eef60b83e7bb05c72d5a22bc8ce38dac2f1ee6826672660775711d16802af5900b46aeb2f3c1583f70fab19ae4fe86fbc309237228fe8139504925712ad080cf282be270a836fa98f6e2716e47ab025c8fc7a6d74ddad851afd50321541fe7e57d8f5d635448256b5d49294aaeeaf0f7348aa734f66d54625061a825ee36c2eadf45ebaef3d907be58ba51666f7fb23c32838ba207482cb96080c684d78ad45ae4d2652686b011ba7a45a543e5f75f1630000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0xfe, &(0x7f0000000200)=""/254, 0x40f00, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10, 0x80000001, 0xfffff344}, 0x10}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 64) fsmount(r1, 0x0, 0x2) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000480)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000500)) (async, rerun: 64) fsmount(r3, 0x0, 0x2) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, 0x0, 0x25, 0x1b}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x9, 0x2, 0x19, @local, @private0, 0x717, 0x8, 0x2, 0xfffffebc}}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1c, 0x7, 0x4, 0x0, 0x2, r3, 0x3ff, '\x00', r5, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x48) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000400)) (rerun: 64) 00:20:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fsmount(r1, 0x0, 0x2) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000200)={0x8, 0x1, 0x4, 0x1, 0x0, [0x0, 0xccd3, 0x7, 0x9], [0x744, 0x7, 0x3, 0x8], [0xffffff7f, 0xffffffff, 0xffff, 0x986], [0x3, 0x0, 0x8, 0x5]}) r2 = fsmount(r1, 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x4c61, 0x3, 0x8001}, 0x7, 0x991, 0xffffffffffffffff}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f00000000c0)) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0xa0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)) fsmount(0xffffffffffffffff, 0x0, 0x2) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x800, 0x561, 0x0, 0x108, r0, 0x6, '\x00', 0x0, r0, 0x3, 0x2, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1d, 0x5, 0x6, 0x8000, 0x40, r0, 0x2, '\x00', 0x0, r0, 0x5, 0x2, 0x1}, 0x48) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xff, 0x7, 0x6, 0x4, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0xd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x3, 0x6, 0x6, 0x2, 0xc, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x1f6, 0xe0, &(0x7f00000000c0)=""/224, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x9, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0, r1, r2, r3, r4, r0, r5, r6]}, 0x80) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x22c600) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000140)="b771978eb8e141881ce4f5aee067b1fd33202131b780d2250b2c50cdbdd0868e9d992aff071107990b61496cb60960f799d7ed251500d349ca1e3ae00e87bc9d75465b3a5bdd0f9a3edc672ca88ffc089251353fcb4d5d05d5970c0cda4609d1063ff2b07fb2d92252f5a8baed4846132ae3767f8dc57c4e5c879dde8588e032faef8ea7c6927ce45dac4bbbaf7a319b6ebe475fbe6becf2a41a36c18f652660dbd068a730ef0f24c4b9f6ba5262a065a0cc7f47ac9bf55243727962b84fed6002af9caa7cd4c02c4f6755eacbf3e74f6f0ce7f5c7e3", &(0x7f00000002c0)=""/116}, 0x20) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, &(0x7f0000000000)="fa65cbba58f4e3d105856701aba8b7bbb41319c07d553b1698850a3c2028c5f8ca16e0986bf4d4473f45c18f05264eae40d4cd18078be8cc21265a6a608faafad6bf6cb4fd10be8f38b7c9ee13336c4915d6b43a0e974bf505462707e1d8a1c16fd502108a967a7dd1995a827bd4b012b9698e3ba1916734a8c6a5fb337cb010b1b3d41c5d3a2f3d7b3bee711e90573ff623b0af9998fd4acd", &(0x7f00000000c0)=""/8}, 0x20) 00:20:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) fsmount(r1, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000200)={0x8, 0x1, 0x4, 0x1, 0x0, [0x0, 0xccd3, 0x7, 0x9], [0x744, 0x7, 0x3, 0x8], [0xffffff7f, 0xffffffff, 0xffff, 0x986], [0x3, 0x0, 0x8, 0x5]}) r2 = fsmount(r1, 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x4c61, 0x3, 0x8001}, 0x7, 0x991, 0xffffffffffffffff}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f00000000c0)) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x200080, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x2, 0x2, 0xfffffffe, 0x1, 0x4}}) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0xa0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)) fsmount(0xffffffffffffffff, 0x0, 0x2) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x800, 0x561, 0x0, 0x108, r0, 0x6, '\x00', 0x0, r0, 0x3, 0x2, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1d, 0x5, 0x6, 0x8000, 0x40, r0, 0x2, '\x00', 0x0, r0, 0x5, 0x2, 0x1}, 0x48) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xff, 0x7, 0x6, 0x4, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0xd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x3, 0x6, 0x6, 0x2, 0xc, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x1f6, 0xe0, &(0x7f00000000c0)=""/224, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x9, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0, r1, r2, r3, r4, r0, r5, r6]}, 0x80) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0xa0000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(0xffffffffffffffff, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x800, 0x561, 0x0, 0x108, r0, 0x6, '\x00', 0x0, r0, 0x3, 0x2, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1d, 0x5, 0x6, 0x8000, 0x40, r0, 0x2, '\x00', 0x0, r0, 0x5, 0x2, 0x1}, 0x48) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r5, 0x0, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xff, 0x7, 0x6, 0x4, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0xd}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x3, 0x6, 0x6, 0x2, 0xc, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x1f6, 0xe0, &(0x7f00000000c0)=""/224, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x9, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0, r1, r2, r3, r4, r0, r5, r6]}, 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x22c600) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000140)="b771978eb8e141881ce4f5aee067b1fd33202131b780d2250b2c50cdbdd0868e9d992aff071107990b61496cb60960f799d7ed251500d349ca1e3ae00e87bc9d75465b3a5bdd0f9a3edc672ca88ffc089251353fcb4d5d05d5970c0cda4609d1063ff2b07fb2d92252f5a8baed4846132ae3767f8dc57c4e5c879dde8588e032faef8ea7c6927ce45dac4bbbaf7a319b6ebe475fbe6becf2a41a36c18f652660dbd068a730ef0f24c4b9f6ba5262a065a0cc7f47ac9bf55243727962b84fed6002af9caa7cd4c02c4f6755eacbf3e74f6f0ce7f5c7e3", &(0x7f00000002c0)=""/116}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, &(0x7f0000000000)="fa65cbba58f4e3d105856701aba8b7bbb41319c07d553b1698850a3c2028c5f8ca16e0986bf4d4473f45c18f05264eae40d4cd18078be8cc21265a6a608faafad6bf6cb4fd10be8f38b7c9ee13336c4915d6b43a0e974bf505462707e1d8a1c16fd502108a967a7dd1995a827bd4b012b9698e3ba1916734a8c6a5fb337cb010b1b3d41c5d3a2f3d7b3bee711e90573ff623b0af9998fd4acd", &(0x7f00000000c0)=""/8}, 0x20) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x22c600) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '&-$'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40084) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x200080, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x2, 0x2, 0xfffffffe, 0x1, 0x4}}) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x200080, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x2, 0x2, 0xfffffffe, 0x1, 0x4}}) (async) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) (async) 00:20:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x3, 0x2, 0x401, &(0x7f0000000140)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2084, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d200000a", @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbde25020000000c00020008000000000000000c00050004000000000000000c00040000000080000000000c00060002000000000000000c0005002400000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x84000}, 0x4004) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 00:20:53 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0xed}, 0xa) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x6) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000300)=""/209) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0xa0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)) fsmount(0xffffffffffffffff, 0x0, 0x2) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 64) fsmount(r2, 0x0, 0x2) (rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x800, 0x561, 0x0, 0x108, r0, 0x6, '\x00', 0x0, r0, 0x3, 0x2, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1d, 0x5, 0x6, 0x8000, 0x40, r0, 0x2, '\x00', 0x0, r0, 0x5, 0x2, 0x1}, 0x48) (async) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xff, 0x7, 0x6, 0x4, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0xd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x3, 0x6, 0x6, 0x2, 0xc, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x1f6, 0xe0, &(0x7f00000000c0)=""/224, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x9, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0, r1, r2, r3, r4, r0, r5, r6]}, 0x80) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (rerun: 32) 00:20:53 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)="d1b50ada272bec436c3fd35dca905705ef11781aad764e9a58d582b7d4aa9f063f69f33a8973859eb1d53c0d5c1b20ac425eeec7ec7dbbebed4bed78e9e292093d84399444015459a9efd206d6989a7744348d536f7fa14c9b26359c4ff475f73d28613ca1698ad98400", 0x6a, 0x80000}, 0x4) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x73) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x3, 0xb241, 0x1, 0x2}, 0x0, 0x6919, 'id0\x00', 'timer0\x00', 0x0, 0x9af, 0x9, 0x7fff, 0x57}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000340)={0x18, 0x0, {0x2, @remote, 'tunl0\x00'}}) fsmount(r1, 0x0, 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x193080) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000002c0)) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x200080, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x2, 0x2, 0xfffffffe, 0x1, 0x4}}) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) 00:20:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x3, 0x2, 0x401, &(0x7f0000000140)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2084, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d200000a", @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbde25020000000c00020008000000000000000c00050004000000000000000c00040000000080000000000c00060002000000000000000c0005002400000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x84000}, 0x4004) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 00:20:53 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) (async) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0xed}, 0xa) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x6) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000300)=""/209) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 00:20:53 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)="d1b50ada272bec436c3fd35dca905705ef11781aad764e9a58d582b7d4aa9f063f69f33a8973859eb1d53c0d5c1b20ac425eeec7ec7dbbebed4bed78e9e292093d84399444015459a9efd206d6989a7744348d536f7fa14c9b26359c4ff475f73d28613ca1698ad98400", 0x6a, 0x80000}, 0x4) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x73) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x3, 0xb241, 0x1, 0x2}, 0x0, 0x6919, 'id0\x00', 'timer0\x00', 0x0, 0x9af, 0x9, 0x7fff, 0x57}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000340)={0x18, 0x0, {0x2, @remote, 'tunl0\x00'}}) fsmount(r1, 0x0, 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x193080) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000002c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)="d1b50ada272bec436c3fd35dca905705ef11781aad764e9a58d582b7d4aa9f063f69f33a8973859eb1d53c0d5c1b20ac425eeec7ec7dbbebed4bed78e9e292093d84399444015459a9efd206d6989a7744348d536f7fa14c9b26359c4ff475f73d28613ca1698ad98400", 0x6a, 0x80000}, 0x4) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x73) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x3, 0xb241, 0x1, 0x2}, 0x0, 0x6919, 'id0\x00', 'timer0\x00', 0x0, 0x9af, 0x9, 0x7fff, 0x57}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000340)={0x18, 0x0, {0x2, @remote, 'tunl0\x00'}}) (async) fsmount(r1, 0x0, 0x2) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x193080) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000002c0)) (async) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '&-$'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40084) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x40) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '&-$'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40084) (async) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x20a00, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0x2b0, 0x30, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{0x29c, 0x1, [@m_ipt={0x144, 0x5, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfff}]}, {0x8d, 0x6, "e04267a8152f913ffc3fd83a88577835f49f3c62a7a0697a801542064409d82a5a66ea51f846f90d4691316e9973e2bff00199b25f1e960b75ea76a15c69c43eb633b157cb3f08f347938fa3ef3bcfce629918963c73f48f1158dcab07eed40a0282a064ff623a1d8ac17c9ef6d2d636d62687aeb5dac631dde5df4b6d772c707f97e10dba85d9c1ff"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x84, 0x1c, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x401, 0x6, 0x2, 0x76}, 0xf}}, @TCA_SKBMOD_SMAC={0xa}]}, {0x27, 0x6, "c6e29e9e32a7343e9a906fe4146464fe829e6100f4755d1524c7b29ee0c2e30eeff648"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd0, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffb}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfffa, 0x9}}]}, {0x81, 0x6, "f29b29bc124c21015229bf49b3773621907c40a4e374c719c207b3b4c75536ef5ed1a8f9bc0a2da9920907422ed14802eb4243314da751916c0d24d0f2d283a191dfd08c4a7fb1eeeda491febf1f94c2be1026a591af924c1a6f18aad11f7eaee70de8c76e6067110de0212c5c37bb92d3056f156dbdadad3558b4f4ac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x2b0}}, 0x80) 00:20:53 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r0, 0x0, 0x2) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0xed}, 0xa) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x6) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000300)=""/209) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001040)={&(0x7f0000000040)="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", 0x1000}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001080), 0x101, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000010c0)={0x8, 0xb8d, 0xf7, 0x1, 0x2, [0x8000, 0x4, 0xb24, 0x4], [0x6, 0x8001, 0x8, 0x6], [0x9da, 0x1, 0x8000, 0x200], [0x0, 0x8, 0x7fff, 0x3]}) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x20a00, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0x2b0, 0x30, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{0x29c, 0x1, [@m_ipt={0x144, 0x5, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfff}]}, {0x8d, 0x6, "e04267a8152f913ffc3fd83a88577835f49f3c62a7a0697a801542064409d82a5a66ea51f846f90d4691316e9973e2bff00199b25f1e960b75ea76a15c69c43eb633b157cb3f08f347938fa3ef3bcfce629918963c73f48f1158dcab07eed40a0282a064ff623a1d8ac17c9ef6d2d636d62687aeb5dac631dde5df4b6d772c707f97e10dba85d9c1ff"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x84, 0x1c, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x401, 0x6, 0x2, 0x76}, 0xf}}, @TCA_SKBMOD_SMAC={0xa}]}, {0x27, 0x6, "c6e29e9e32a7343e9a906fe4146464fe829e6100f4755d1524c7b29ee0c2e30eeff648"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd0, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffb}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfffa, 0x9}}]}, {0x81, 0x6, "f29b29bc124c21015229bf49b3773621907c40a4e374c719c207b3b4c75536ef5ed1a8f9bc0a2da9920907422ed14802eb4243314da751916c0d24d0f2d283a191dfd08c4a7fb1eeeda491febf1f94c2be1026a591af924c1a6f18aad11f7eaee70de8c76e6067110de0212c5c37bb92d3056f156dbdadad3558b4f4ac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x2b0}}, 0x80) 00:20:53 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)="d1b50ada272bec436c3fd35dca905705ef11781aad764e9a58d582b7d4aa9f063f69f33a8973859eb1d53c0d5c1b20ac425eeec7ec7dbbebed4bed78e9e292093d84399444015459a9efd206d6989a7744348d536f7fa14c9b26359c4ff475f73d28613ca1698ad98400", 0x6a, 0x80000}, 0x4) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x73) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x3, 0xb241, 0x1, 0x2}, 0x0, 0x6919, 'id0\x00', 'timer0\x00', 0x0, 0x9af, 0x9, 0x7fff, 0x57}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000340)={0x18, 0x0, {0x2, @remote, 'tunl0\x00'}}) (async, rerun: 64) fsmount(r1, 0x0, 0x2) (rerun: 64) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x193080) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000002c0)) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$amidi(&(0x7f0000000100), 0xfff, 0x8000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000140)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7, 0x0, 0xc}) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001040)={&(0x7f0000000040)="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", 0x1000}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001080), 0x101, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000010c0)={0x8, 0xb8d, 0xf7, 0x1, 0x2, [0x8000, 0x4, 0xb24, 0x4], [0x6, 0x8001, 0x8, 0x6], [0x9da, 0x1, 0x8000, 0x200], [0x0, 0x8, 0x7fff, 0x3]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001040)={&(0x7f0000000040)="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", 0x1000}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000001080), 0x101, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000010c0)={0x8, 0xb8d, 0xf7, 0x1, 0x2, [0x8000, 0x4, 0xb24, 0x4], [0x6, 0x8001, 0x8, 0x6], [0x9da, 0x1, 0x8000, 0x200], [0x0, 0x8, 0x7fff, 0x3]}) (async) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x20a00, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0x2b0, 0x30, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{0x29c, 0x1, [@m_ipt={0x144, 0x5, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfff}]}, {0x8d, 0x6, "e04267a8152f913ffc3fd83a88577835f49f3c62a7a0697a801542064409d82a5a66ea51f846f90d4691316e9973e2bff00199b25f1e960b75ea76a15c69c43eb633b157cb3f08f347938fa3ef3bcfce629918963c73f48f1158dcab07eed40a0282a064ff623a1d8ac17c9ef6d2d636d62687aeb5dac631dde5df4b6d772c707f97e10dba85d9c1ff"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x84, 0x1c, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x401, 0x6, 0x2, 0x76}, 0xf}}, @TCA_SKBMOD_SMAC={0xa}]}, {0x27, 0x6, "c6e29e9e32a7343e9a906fe4146464fe829e6100f4755d1524c7b29ee0c2e30eeff648"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd0, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffb}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfffa, 0x9}}]}, {0x81, 0x6, "f29b29bc124c21015229bf49b3773621907c40a4e374c719c207b3b4c75536ef5ed1a8f9bc0a2da9920907422ed14802eb4243314da751916c0d24d0f2d283a191dfd08c4a7fb1eeeda491febf1f94c2be1026a591af924c1a6f18aad11f7eaee70de8c76e6067110de0212c5c37bb92d3056f156dbdadad3558b4f4ac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x2b0}}, 0x80) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '&-$'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40084) (rerun: 32) 00:20:53 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x3, 0x2, 0x401, &(0x7f0000000140)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2084, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d200000a", @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbde25020000000c00020008000000000000000c00050004000000000000000c00040000000080000000000c00060002000000000000000c0005002400000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x84000}, 0x4004) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair(0x3, 0x2, 0x401, &(0x7f0000000140)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2084, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d200000a", @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbde25020000000c00020008000000000000000c00050004000000000000000c00040000000080000000000c00060002000000000000000c0005002400000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x84000}, 0x4004) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) (async) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$amidi(&(0x7f0000000100), 0xfff, 0x8000) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000140)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7, 0x0, 0xc}) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2d4800, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001040)={&(0x7f0000000040)="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", 0x1000}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001080), 0x101, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000010c0)={0x8, 0xb8d, 0xf7, 0x1, 0x2, [0x8000, 0x4, 0xb24, 0x4], [0x6, 0x8001, 0x8, 0x6], [0x9da, 0x1, 0x8000, 0x200], [0x0, 0x8, 0x7fff, 0x3]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001040)={&(0x7f0000000040)="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", 0x1000}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000001080), 0x101, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000010c0)={0x8, 0xb8d, 0xf7, 0x1, 0x2, [0x8000, 0x4, 0xb24, 0x4], [0x6, 0x8001, 0x8, 0x6], [0x9da, 0x1, 0x8000, 0x200], [0x0, 0x8, 0x7fff, 0x3]}) (async) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$amidi(&(0x7f0000000100), 0xfff, 0x8000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000140)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7, 0x0, 0xc}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) syz_open_dev$amidi(&(0x7f0000000100), 0xfff, 0x8000) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000140)) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x0, 0xfffffffd, 0x7, 0x0, 0xc}) (async) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x582, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfda7ccbdf1dd4c41}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xbd8519c19bb44645}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x20004001) 00:20:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="63202a3a2aa0726d00"], 0x9) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:20:53 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1230c0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101182, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2d4800, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2d4800, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) (async) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x582, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfda7ccbdf1dd4c41}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xbd8519c19bb44645}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x20004001) 00:20:53 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:20:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="63202a3a2aa0726d00"], 0x9) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (rerun: 64) 00:20:53 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1230c0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101182, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1230c0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101182, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) 00:20:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2d4800, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2d4800, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) (async) 00:20:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="63202a3a2aa0726d00"], 0x9) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x582, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfda7ccbdf1dd4c41}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xbd8519c19bb44645}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x20004001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x582, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfda7ccbdf1dd4c41}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xbd8519c19bb44645}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x20004001) (async) 00:20:54 executing program 4: clock_gettime(0x1, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r0}) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080)="b52092b232c1c2332b736838ba42db5f3aefeab28f63631d79060c69a1b69de802b052c03935f84212fd34e21a817eb626dcb9a96e181512a5fcd50642f5de33c6670a736b8c9a64d4f6f6ba496dc6006cc38d782b65dd8fd7429f1690f5c76da12f60caa86c1b46dad4f977dfb020", &(0x7f0000000100)=@tcp6=r0, 0x5}, 0x20) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x4010, r0, 0x10000000) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2000, @fd=r3, 0xf10, 0x1, 0x7, 0x18, 0x1, {0x2}}, 0x5) 00:20:54 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async, rerun: 32) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:54 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:20:54 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1230c0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101182, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbf9, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4001) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf25050000000c000200f20d0000000000000c00060002000000000000000c000800f7ffffffffffffff05000a005d0000000c00078008000100879e232ec4f2c683640d784a3413b1e8e21c942f3932d99859b6a93b892d81314d25743e7aa7a25ef1b36721805c3062e77397ab80f254779e0447d01c022c282a024d8edef3a02881431c8502df15d1dd3067090031388f2f5c00e9519564fa78cba5cbfa7144e99ba6cf1ee3aa455140814c89", @ANYRES32, @ANYBLOB="0c00030003000000000000000c00078008000100", @ANYRES32, @ANYBLOB="04000a00"], 0x68}, 0x1, 0x0, 0x0, 0x4040014}, 0x1100) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:54 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x3e5140, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x8001, 0x3, 0x8}, 0x9, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x101, 0x1, 0x65, 0x1f}) 00:20:54 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x0, 0x8, 0x1, 0x3f}, 0x0, 0x1}) 00:20:54 executing program 1: r0 = syz_usb_connect(0x1, 0xa0e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x56, 0x7d, 0x9d, 0x40, 0x1e2d, 0x82, 0x2947, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9fc, 0x3, 0x20, 0x81, 0x60, 0x0, [{{0x9, 0x4, 0x5, 0x40, 0x6, 0xa, 0x3d, 0x3a, 0x3f, [@hid_hid={0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0xef8}}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x7f, 0x8, [@generic={0xc5, 0x30, "d56e2ab989a01837649724eb42cdbe9c17c5457611f41be7026d0b9c104acb4f9020b19e0a8a61887d6bbc3c21127e70d517380552abf362d2359a854127404d4df1ac625cff8d4484e23df7740edd1ec137864f02c09e92619eed7236898becd3c001978c9dfb67fc44ea38bd710b3a6fb403651207730d38aec11b6098529c756ac2f3f590ef903fa448d05a9c5548ca64b7cee94140d01bebc018cb6757be0d3a8b347e481dc3bc4c0adfa9ed7ee1a2229a2dec863610706af54f9901560dc51a6d"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x25, 0x8, 0x0, [@generic={0x2e, 0x1, "b1a12243473159e51871c2c56301f786bd5ab8a7280fb620baedff161e242840e350d94858dd3bf0d155307c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x6, 0x7f, 0x40, [@generic={0xfa, 0x1, "5248f188300eaaf36471ead92823a65dbaa37fb4d23480fd0fc381cb232d9d471e2d7cd6942706cee082d49d8f1e808efa94659a4acca506c32bbbe7d06d45d8ccb71ca06700fb7356b3ce3cbca891b014789b7fb2baef78fd77e080a4ebdaeddabd63d1ae8630528f8b055641860fcc4f9c57b099556b31139f6b1ac28991a36dcc38d9056cc9895dc04e544bcb2a250194c2ccfbbfc14d55686864ab03298a9bc3c59415ac7fced98a711697bbe75ebfcaf9e117d208a8d266173c6c033f9687c0ce7d7379cb7cc61635418f319495f68c9dc9353827df8a1af99f38d70017df8a6ed38bd6578cc4487dc3e2f3f538ee34a4d311888096"}]}}, {{0x9, 0x5, 0x7, 0x18, 0x8, 0x6, 0x9, 0x8, [@generic={0xc6, 0x2, "9038395769f8cb66b4d9a5d96ae45c1afadbbdb00c13d6706105aa596f1f1eb90607cb1af3f86aee58ad5dcf564112c19fe589252256b941e9413e7abe1573e242d94d2464484fa56f87c7de2c876c528670488ac1a791204d58d1441b137852704bad04051fd54f702ebc7eedafdf93f013fa809ee90a976076903697a8397f96c34255031a83a24f37b34c22a834d3e3c6c707ac49da83396c3694589d27add6f98f2f8817dc428de709bc2a07c5d29749a9275f4b35ea76200f9ee192d7702f8be0fc"}, @generic={0x86, 0xd, "f4fa1fe5263b2691d44d1696d6ec828d05eb114500258a672e2041359fde652bb8b1b720d825c9820cf97fa1dac664c609fbaeee5b81ecd0e13fbef4c10bb50da6d95a92e52086224c6427d078d8b9c49c4538d8ff6b62215f824a8ec3b478b6a2e1c198d2685a130b7b2878984c12cfba30693668fca02ca5d729eec1e65002fb8938a0"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x30, 0x9, 0x5, 0x3, [@generic={0xe7, 0x30, "a687d64ae385704d2a6c8725a027731b1d9bc586d8740717174d245a849effb9d5c80ad2a1c73f5278e9bbe2af16635e5de32fef6a80d5ff7260b13f7a665c68611d480c1745ca0b7e5290fcbd4b3de92c47f5acc3757807453eda99ba27a4c1052a779f2ecc943d0a92dacd84faf18ab564e89e7ebee9a44258158597ac4b36ab93ba011ba47c61fa41e9b56d1b551fd62eb7c8ba507ebfa93485ee7360763fb4cb944b4ed0fe8b6abc4e881d0fbbc71f75b0510e57e87a299f3452b078c775940b09cfc62c461de9718e841984813d7cd8c7b1fcc91759db6e297efa9c288ec1a2c167b8"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x5, 0x2c, 0x40, 0xa1, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0xffff}]}}]}}, {{0x9, 0x4, 0x0, 0xff, 0x2, 0x75, 0x62, 0xc2, 0x1, [@generic={0x2e, 0x21, "8d77c8963279ea1243a3f73de927f4c3a76c3cfa0c2140c5d49edc102abe45a779af537bef3c72de75a0948c"}], [{{0x9, 0x5, 0xe, 0x0, 0x8, 0x1f, 0xea, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x8000}, @generic={0x71, 0x10, "9c5dd48c6ea05adc18a7e8b6caabe735f2e5f8d40949b34e9b917abc1db38d16c2d31307cacaaa6acb7e684cb664cc1dc69c2d3cf73ce960db2dc59b3d196a0915b41866e7e57cc8b223fa3a548f08db25506dddb68e5247776f8585052d2d95786d0c1b9653080ddb6b21f2c2216b"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x7, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x1ff}]}}]}}, {{0x9, 0x4, 0x3e, 0x5, 0x7, 0x63, 0x8d, 0x96, 0xc0, [@generic={0x9b, 0xa, "f8eb041e932808d6aa1289e77d2fa974712f96805bfa39e7d5e34cd6b6c9967e9c7ea7e84b6d684c5060784f72b31e377331d6b583745a54e958cf8b851e6784a138986cc654ca5bbd419f2ca1f33707284e527c71cbc78cb253df39bebfb7cfa4bb67a973e66dde94827d478db93d0ae10a3233e102b29c1b5107ea8a7f5af81ba24d3b4b8f27c1f290ddb79b3995f49028b8064424563422"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "3ba7d6c9b5"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x800}, [@mdlm_detail={0x82, 0x24, 0x13, 0xfd, "788ecb1242a3edb02f490df9f0ff50b2b13431d8cc5bb84bc27d1eae2da8e498a325d9eb4349f0dfe7aa15342c6647c10ed212609c1dfe63c7023f23d17abfe1139c6a588d339659ec5f8e03db814f1be8b772938a4fb87a1c28e0ed6e470ed2c3cf1a4ecd5f195ac0d367c3726a8fb7aa625971a13d24108f2e6232767e"}, @mdlm_detail={0xdc, 0x24, 0x13, 0x51, "b3f42bdc9dd10a1c28dc71440d905baf08fe3c8b61419d14d69f5a367aab12f11d4c4a4511284e4bbec610a51a96ab9d89acdb6d16075f6957cd6014fc58cd142f08dc247f0287e763c41ec61c4b57f516ad9b78de82b12b5a48191a1743281e89436744710811dacdeccac0d91345ef8019239eb6e3288047a0fddae5aa5009640d291b31f3f820da8d42e37829886979e16d0733458e588ed7859eb583ea0a9339eca43432d5112e1b92e606da9df8edc2163626ef87b31ad521ceb6c7961859ea4c7c4851a136daf7cf2834d7d21aeff589c20029c4d5"}, @obex={0x5, 0x24, 0x15, 0x64}, @call_mgmt={0x5, 0x24, 0x1, 0x5, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xff2b, 0x0, 0x5, 0x0, 0x9}]}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x2, 0x9, 0x4, [@generic={0x16, 0x2, "caf12d5c96b6980e2689f58c49c9d4fcddb22399"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x3, 0x9, 0x5, [@generic={0x9e, 0x22, "9bf854d602dfee2dffcfede5ee7eb9616f470866cd83fa612455d198e6db1d63f204c4702aaa0280af76567c831fe2cc1e1f9b14631d5e0909250d7869e48db01ac07d21bf92e15ceed70281e9ff08dceddc614befeb9d242c44fbda1a6213c67ed4e2d5cbc814af80025aff2219c4a60912cb22880163fdee79c151dc750af17d326d19336f4fac1df69bd51ce6a4a9e8f6c024207ea83b5f58d5cd"}, @generic={0x3, 0xb, 'k'}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x20, 0x3, 0xff, [@generic={0x95, 0x6, "1a198effa616fa5007268b357cd77c3d5cbd134019f17fc7c6199dd9f8362f543052cc438f0167f2dda1a72929c4acde469b627f2eb466124f4d6c478d39ca5d3092642518124315a466c7202b387310f73c30ac44ca0789deb404562fd6ce3a5c30013da97e78ee5c928459b3dea42f78de64e6e300923a6af2097acbfa82e8a8bfa3c42da7cb3103a64049d649a160e0145b"}, @generic={0x72, 0x23, "6f04c0c2e228235b620211a1637f33de30d53dcbb1f6521ffca7068a823b538b01e3d00521be4faa6a4d909033b65824c7a93b50512871e74b02378feed05d1d0d40be7286485d800898037904d731f7c40ecc08d71b7daf8203b73be708b1fc424f0e2eafe476210d882f77c862f7b6"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x0, 0x81, 0x22, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x4800}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x7, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xf800}, @generic={0x61, 0x22, "ae186fd3c71d29f4533475cf30a708e9bf85f8a98106b9c8e87739f7385bd0c9a01f0806852e77d5188e46cf9214185b1ba62ebd2a36d12816947a0eff79c5f51566d4aadee0b085b3212d797201c9c52625969f71e90aedf6139a2834381b"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x0, 0x3, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x9, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x7f, 0xff, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x1}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x110, 0x4, 0x0, 0x4, 0x0, 0x6}, 0x27, &(0x7f0000000ac0)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x1, 0xf00f, 0x3, [0x0, 0x30, 0xff, 0x0]}]}, 0x5, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x424}}, {0xaa, &(0x7f0000000b40)=@string={0xaa, 0x3, "099e1c506e13df4586d027b166eae510ca767cd7de1fe4f95a32145a0c9f6373c47b4ca8f73ee372f8590391be54b42c00916056025c009018a0193de48dd69fd23dec62dfe69954b495bec14ec5f8f4672ec85cc2c5b70499762f4d7cf44f2a91bcc5c2a5717a578fb8d3d0483f40c5b6f53a3e7bb38f055a95919631455f463fab2b39bc8e39183d065d104191ba16051588467597d31fac70be5e8b60454a7851626bb1cf8275"}}, {0xa0, &(0x7f0000000c00)=@string={0xa0, 0x3, "e27eaad4f31244373dc4386c3e9381f65b1e33a71d1469aca63283f9f22d3837768d8078858807696905f97c609b84af35545a9f972b2cfd992999023cac9d4666a86b7de1e217baac6e9aadd7819cd2f9d77ee2da7d2ca27c0b019a1e25f6b1c94c59408573ffedeb2964265e960701a8918b529ebd3f3742311cfa21d80b67689491384caf3acb77a5575345bf762d8611892afb3039693fc2e1f83a99"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x440a}}, {0xd7, &(0x7f0000000d00)=@string={0xd7, 0x3, "bd2b8005a15b39c3359666543ec4fa43e0b7dd6be5c1c3ac00769288ca3890358bb7bbd74e026d998355fb616d3f29f70303a1d925a4cb7f9c832858f96e74e346a00d9d8e8e280b81a755e48d287604b03688890edff52bf0cb8ecda6ad37e632818a2b5c18363f72e4b1e180118a866d4406cb42fcf1f3c134e30e3468094167b20818658f593379a06321aeb5c9c5104eb8534d2d7d68716f366f2af86ada827a3733d63c83c313191f1dcd3f1568a00b10fb30ec7dce8d56bc7e723efef5e75d1306783e09a48bd9217348e9f18376b8d7eada"}}]}) syz_usb_ep_read(r0, 0x2, 0xea, &(0x7f0000000e80)=""/234) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5420) 00:20:54 executing program 4: clock_gettime(0x1, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r0}) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080)="b52092b232c1c2332b736838ba42db5f3aefeab28f63631d79060c69a1b69de802b052c03935f84212fd34e21a817eb626dcb9a96e181512a5fcd50642f5de33c6670a736b8c9a64d4f6f6ba496dc6006cc38d782b65dd8fd7429f1690f5c76da12f60caa86c1b46dad4f977dfb020", &(0x7f0000000100)=@tcp6=r0, 0x5}, 0x20) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x4010, r0, 0x10000000) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2000, @fd=r3, 0xf10, 0x1, 0x7, 0x18, 0x1, {0x2}}, 0x5) clock_gettime(0x1, &(0x7f0000000000)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r0}) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080)="b52092b232c1c2332b736838ba42db5f3aefeab28f63631d79060c69a1b69de802b052c03935f84212fd34e21a817eb626dcb9a96e181512a5fcd50642f5de33c6670a736b8c9a64d4f6f6ba496dc6006cc38d782b65dd8fd7429f1690f5c76da12f60caa86c1b46dad4f977dfb020", &(0x7f0000000100)=@tcp6=r0, 0x5}, 0x20) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x4010, r0, 0x10000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2000, @fd=r3, 0xf10, 0x1, 0x7, 0x18, 0x1, {0x2}}, 0x5) (async) 00:20:54 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x3e5140, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x8001, 0x3, 0x8}, 0x9, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x101, 0x1, 0x65, 0x1f}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x3e5140, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8}) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x8001, 0x3, 0x8}, 0x9, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x101, 0x1, 0x65, 0x1f}) (async) [ 1254.134133][T11779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:20:54 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x0, 0x8, 0x1, 0x3f}, 0x0, 0x1}) 00:20:54 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) [ 1254.150751][T11779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:20:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbf9, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4001) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf25050000000c000200f20d0000000000000c00060002000000000000000c000800f7ffffffffffffff05000a005d0000000c00078008000100879e232ec4f2c683640d784a3413b1e8e21c942f3932d99859b6a93b892d81314d25743e7aa7a25ef1b36721805c3062e77397ab80f254779e0447d01c022c282a024d8edef3a02881431c8502df15d1dd3067090031388f2f5c00e9519564fa78cba5cbfa7144e99ba6cf1ee3aa455140814c89", @ANYRES32, @ANYBLOB="0c00030003000000000000000c00078008000100", @ANYRES32, @ANYBLOB="04000a00"], 0x68}, 0x1, 0x0, 0x0, 0x4040014}, 0x1100) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbf9, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4001) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf25050000000c000200f20d0000000000000c00060002000000000000000c000800f7ffffffffffffff05000a005d0000000c00078008000100879e232ec4f2c683640d784a3413b1e8e21c942f3932d99859b6a93b892d81314d25743e7aa7a25ef1b36721805c3062e77397ab80f254779e0447d01c022c282a024d8edef3a02881431c8502df15d1dd3067090031388f2f5c00e9519564fa78cba5cbfa7144e99ba6cf1ee3aa455140814c89", @ANYRES32, @ANYBLOB="0c00030003000000000000000c00078008000100", @ANYRES32, @ANYBLOB="04000a00"], 0x68}, 0x1, 0x0, 0x0, 0x4040014}, 0x1100) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) 00:20:54 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x0, 0x8, 0x1, 0x3f}, 0x0, 0x1}) 00:20:54 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x3e5140, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1, 0x8001, 0x3, 0x8}, 0x9, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x101, 0x1, 0x65, 0x1f}) 00:20:54 executing program 4: clock_gettime(0x1, &(0x7f0000000000)) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r0}) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080)="b52092b232c1c2332b736838ba42db5f3aefeab28f63631d79060c69a1b69de802b052c03935f84212fd34e21a817eb626dcb9a96e181512a5fcd50642f5de33c6670a736b8c9a64d4f6f6ba496dc6006cc38d782b65dd8fd7429f1690f5c76da12f60caa86c1b46dad4f977dfb020", &(0x7f0000000100)=@tcp6=r0, 0x5}, 0x20) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x4010, r0, 0x10000000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2000, @fd=r3, 0xf10, 0x1, 0x7, 0x18, 0x1, {0x2}}, 0x5) 00:20:54 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = pidfd_open(0x0, 0x0) process_madvise(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="2ff54144d6cf95ea545d7e1874720ef3006ed62d440ebec73b42e2081d5dfedbc33ea86f543140901c5fee63d4520cf92f662530c22676e5c2fcff564291944da839ce5e88a4b62b698ad0bacb2e1a1d4b4c6538e920c005eb6e5899f3e5abf55f3c9b0238fbdad454578a679ef1aac146a88637a885f6e3a59944683ca8a6441e0b1a95790c386949e8aa9e2fd9bf046b0f0daec9055d5d46f854f02acfc30f151843c35c", 0xa5}], 0x1, 0xf, 0x0) 00:20:54 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x409800, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbf9, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4001) (async, rerun: 64) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf25050000000c000200f20d0000000000000c00060002000000000000000c000800f7ffffffffffffff05000a005d0000000c00078008000100879e232ec4f2c683640d784a3413b1e8e21c942f3932d99859b6a93b892d81314d25743e7aa7a25ef1b36721805c3062e77397ab80f254779e0447d01c022c282a024d8edef3a02881431c8502df15d1dd3067090031388f2f5c00e9519564fa78cba5cbfa7144e99ba6cf1ee3aa455140814c89", @ANYRES32, @ANYBLOB="0c00030003000000000000000c00078008000100", @ANYRES32, @ANYBLOB="04000a00"], 0x68}, 0x1, 0x0, 0x0, 0x4040014}, 0x1100) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:54 executing program 1: r0 = syz_usb_connect(0x1, 0xa0e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x56, 0x7d, 0x9d, 0x40, 0x1e2d, 0x82, 0x2947, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9fc, 0x3, 0x20, 0x81, 0x60, 0x0, [{{0x9, 0x4, 0x5, 0x40, 0x6, 0xa, 0x3d, 0x3a, 0x3f, [@hid_hid={0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0xef8}}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x7f, 0x8, [@generic={0xc5, 0x30, "d56e2ab989a01837649724eb42cdbe9c17c5457611f41be7026d0b9c104acb4f9020b19e0a8a61887d6bbc3c21127e70d517380552abf362d2359a854127404d4df1ac625cff8d4484e23df7740edd1ec137864f02c09e92619eed7236898becd3c001978c9dfb67fc44ea38bd710b3a6fb403651207730d38aec11b6098529c756ac2f3f590ef903fa448d05a9c5548ca64b7cee94140d01bebc018cb6757be0d3a8b347e481dc3bc4c0adfa9ed7ee1a2229a2dec863610706af54f9901560dc51a6d"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x25, 0x8, 0x0, [@generic={0x2e, 0x1, "b1a12243473159e51871c2c56301f786bd5ab8a7280fb620baedff161e242840e350d94858dd3bf0d155307c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x6, 0x7f, 0x40, [@generic={0xfa, 0x1, "5248f188300eaaf36471ead92823a65dbaa37fb4d23480fd0fc381cb232d9d471e2d7cd6942706cee082d49d8f1e808efa94659a4acca506c32bbbe7d06d45d8ccb71ca06700fb7356b3ce3cbca891b014789b7fb2baef78fd77e080a4ebdaeddabd63d1ae8630528f8b055641860fcc4f9c57b099556b31139f6b1ac28991a36dcc38d9056cc9895dc04e544bcb2a250194c2ccfbbfc14d55686864ab03298a9bc3c59415ac7fced98a711697bbe75ebfcaf9e117d208a8d266173c6c033f9687c0ce7d7379cb7cc61635418f319495f68c9dc9353827df8a1af99f38d70017df8a6ed38bd6578cc4487dc3e2f3f538ee34a4d311888096"}]}}, {{0x9, 0x5, 0x7, 0x18, 0x8, 0x6, 0x9, 0x8, [@generic={0xc6, 0x2, "9038395769f8cb66b4d9a5d96ae45c1afadbbdb00c13d6706105aa596f1f1eb90607cb1af3f86aee58ad5dcf564112c19fe589252256b941e9413e7abe1573e242d94d2464484fa56f87c7de2c876c528670488ac1a791204d58d1441b137852704bad04051fd54f702ebc7eedafdf93f013fa809ee90a976076903697a8397f96c34255031a83a24f37b34c22a834d3e3c6c707ac49da83396c3694589d27add6f98f2f8817dc428de709bc2a07c5d29749a9275f4b35ea76200f9ee192d7702f8be0fc"}, @generic={0x86, 0xd, "f4fa1fe5263b2691d44d1696d6ec828d05eb114500258a672e2041359fde652bb8b1b720d825c9820cf97fa1dac664c609fbaeee5b81ecd0e13fbef4c10bb50da6d95a92e52086224c6427d078d8b9c49c4538d8ff6b62215f824a8ec3b478b6a2e1c198d2685a130b7b2878984c12cfba30693668fca02ca5d729eec1e65002fb8938a0"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x30, 0x9, 0x5, 0x3, [@generic={0xe7, 0x30, "a687d64ae385704d2a6c8725a027731b1d9bc586d8740717174d245a849effb9d5c80ad2a1c73f5278e9bbe2af16635e5de32fef6a80d5ff7260b13f7a665c68611d480c1745ca0b7e5290fcbd4b3de92c47f5acc3757807453eda99ba27a4c1052a779f2ecc943d0a92dacd84faf18ab564e89e7ebee9a44258158597ac4b36ab93ba011ba47c61fa41e9b56d1b551fd62eb7c8ba507ebfa93485ee7360763fb4cb944b4ed0fe8b6abc4e881d0fbbc71f75b0510e57e87a299f3452b078c775940b09cfc62c461de9718e841984813d7cd8c7b1fcc91759db6e297efa9c288ec1a2c167b8"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x5, 0x2c, 0x40, 0xa1, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0xffff}]}}]}}, {{0x9, 0x4, 0x0, 0xff, 0x2, 0x75, 0x62, 0xc2, 0x1, [@generic={0x2e, 0x21, "8d77c8963279ea1243a3f73de927f4c3a76c3cfa0c2140c5d49edc102abe45a779af537bef3c72de75a0948c"}], [{{0x9, 0x5, 0xe, 0x0, 0x8, 0x1f, 0xea, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x8000}, @generic={0x71, 0x10, "9c5dd48c6ea05adc18a7e8b6caabe735f2e5f8d40949b34e9b917abc1db38d16c2d31307cacaaa6acb7e684cb664cc1dc69c2d3cf73ce960db2dc59b3d196a0915b41866e7e57cc8b223fa3a548f08db25506dddb68e5247776f8585052d2d95786d0c1b9653080ddb6b21f2c2216b"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x7, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x1ff}]}}]}}, {{0x9, 0x4, 0x3e, 0x5, 0x7, 0x63, 0x8d, 0x96, 0xc0, [@generic={0x9b, 0xa, "f8eb041e932808d6aa1289e77d2fa974712f96805bfa39e7d5e34cd6b6c9967e9c7ea7e84b6d684c5060784f72b31e377331d6b583745a54e958cf8b851e6784a138986cc654ca5bbd419f2ca1f33707284e527c71cbc78cb253df39bebfb7cfa4bb67a973e66dde94827d478db93d0ae10a3233e102b29c1b5107ea8a7f5af81ba24d3b4b8f27c1f290ddb79b3995f49028b8064424563422"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "3ba7d6c9b5"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x800}, [@mdlm_detail={0x82, 0x24, 0x13, 0xfd, "788ecb1242a3edb02f490df9f0ff50b2b13431d8cc5bb84bc27d1eae2da8e498a325d9eb4349f0dfe7aa15342c6647c10ed212609c1dfe63c7023f23d17abfe1139c6a588d339659ec5f8e03db814f1be8b772938a4fb87a1c28e0ed6e470ed2c3cf1a4ecd5f195ac0d367c3726a8fb7aa625971a13d24108f2e6232767e"}, @mdlm_detail={0xdc, 0x24, 0x13, 0x51, "b3f42bdc9dd10a1c28dc71440d905baf08fe3c8b61419d14d69f5a367aab12f11d4c4a4511284e4bbec610a51a96ab9d89acdb6d16075f6957cd6014fc58cd142f08dc247f0287e763c41ec61c4b57f516ad9b78de82b12b5a48191a1743281e89436744710811dacdeccac0d91345ef8019239eb6e3288047a0fddae5aa5009640d291b31f3f820da8d42e37829886979e16d0733458e588ed7859eb583ea0a9339eca43432d5112e1b92e606da9df8edc2163626ef87b31ad521ceb6c7961859ea4c7c4851a136daf7cf2834d7d21aeff589c20029c4d5"}, @obex={0x5, 0x24, 0x15, 0x64}, @call_mgmt={0x5, 0x24, 0x1, 0x5, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xff2b, 0x0, 0x5, 0x0, 0x9}]}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x2, 0x9, 0x4, [@generic={0x16, 0x2, "caf12d5c96b6980e2689f58c49c9d4fcddb22399"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x3, 0x9, 0x5, [@generic={0x9e, 0x22, "9bf854d602dfee2dffcfede5ee7eb9616f470866cd83fa612455d198e6db1d63f204c4702aaa0280af76567c831fe2cc1e1f9b14631d5e0909250d7869e48db01ac07d21bf92e15ceed70281e9ff08dceddc614befeb9d242c44fbda1a6213c67ed4e2d5cbc814af80025aff2219c4a60912cb22880163fdee79c151dc750af17d326d19336f4fac1df69bd51ce6a4a9e8f6c024207ea83b5f58d5cd"}, @generic={0x3, 0xb, 'k'}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x20, 0x3, 0xff, [@generic={0x95, 0x6, "1a198effa616fa5007268b357cd77c3d5cbd134019f17fc7c6199dd9f8362f543052cc438f0167f2dda1a72929c4acde469b627f2eb466124f4d6c478d39ca5d3092642518124315a466c7202b387310f73c30ac44ca0789deb404562fd6ce3a5c30013da97e78ee5c928459b3dea42f78de64e6e300923a6af2097acbfa82e8a8bfa3c42da7cb3103a64049d649a160e0145b"}, @generic={0x72, 0x23, "6f04c0c2e228235b620211a1637f33de30d53dcbb1f6521ffca7068a823b538b01e3d00521be4faa6a4d909033b65824c7a93b50512871e74b02378feed05d1d0d40be7286485d800898037904d731f7c40ecc08d71b7daf8203b73be708b1fc424f0e2eafe476210d882f77c862f7b6"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x0, 0x81, 0x22, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x4800}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x7, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xf800}, @generic={0x61, 0x22, "ae186fd3c71d29f4533475cf30a708e9bf85f8a98106b9c8e87739f7385bd0c9a01f0806852e77d5188e46cf9214185b1ba62ebd2a36d12816947a0eff79c5f51566d4aadee0b085b3212d797201c9c52625969f71e90aedf6139a2834381b"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x0, 0x3, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x9, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x7f, 0xff, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x1}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x110, 0x4, 0x0, 0x4, 0x0, 0x6}, 0x27, &(0x7f0000000ac0)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x1, 0xf00f, 0x3, [0x0, 0x30, 0xff, 0x0]}]}, 0x5, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x424}}, {0xaa, &(0x7f0000000b40)=@string={0xaa, 0x3, "099e1c506e13df4586d027b166eae510ca767cd7de1fe4f95a32145a0c9f6373c47b4ca8f73ee372f8590391be54b42c00916056025c009018a0193de48dd69fd23dec62dfe69954b495bec14ec5f8f4672ec85cc2c5b70499762f4d7cf44f2a91bcc5c2a5717a578fb8d3d0483f40c5b6f53a3e7bb38f055a95919631455f463fab2b39bc8e39183d065d104191ba16051588467597d31fac70be5e8b60454a7851626bb1cf8275"}}, {0xa0, &(0x7f0000000c00)=@string={0xa0, 0x3, "e27eaad4f31244373dc4386c3e9381f65b1e33a71d1469aca63283f9f22d3837768d8078858807696905f97c609b84af35545a9f972b2cfd992999023cac9d4666a86b7de1e217baac6e9aadd7819cd2f9d77ee2da7d2ca27c0b019a1e25f6b1c94c59408573ffedeb2964265e960701a8918b529ebd3f3742311cfa21d80b67689491384caf3acb77a5575345bf762d8611892afb3039693fc2e1f83a99"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x440a}}, {0xd7, &(0x7f0000000d00)=@string={0xd7, 0x3, "bd2b8005a15b39c3359666543ec4fa43e0b7dd6be5c1c3ac00769288ca3890358bb7bbd74e026d998355fb616d3f29f70303a1d925a4cb7f9c832858f96e74e346a00d9d8e8e280b81a755e48d287604b03688890edff52bf0cb8ecda6ad37e632818a2b5c18363f72e4b1e180118a866d4406cb42fcf1f3c134e30e3468094167b20818658f593379a06321aeb5c9c5104eb8534d2d7d68716f366f2af86ada827a3733d63c83c313191f1dcd3f1568a00b10fb30ec7dce8d56bc7e723efef5e75d1306783e09a48bd9217348e9f18376b8d7eada"}}]}) syz_usb_ep_read(r0, 0x2, 0xea, &(0x7f0000000e80)=""/234) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5420) 00:20:54 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) r1 = syz_clone3(&(0x7f0000001380)={0x100, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0), {0x1e}, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/4096, &(0x7f0000001340)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4, {r0}}, 0x58) r2 = syz_clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000014c0)={0x0, {}, 0x0, {}, 0x5, 0x6, 0x2, 0x14, "28da2576ec2ffa084f65b5a3b7fb25230be57d73087e3f22511b88f358c2c8579c131993fddb5efc6cf6de191605a3942bb71c713679568067487587e263ef10", "ebdc4f5e2c0115d0ac6ea3fe5014a905cbbf5f4ad4a25e8d0a9fc82176f209d4", [0x439, 0x4]}) r3 = syz_clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_rr_get_interval(r3, &(0x7f0000001380)) r4 = syz_clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_rr_get_interval(r4, &(0x7f0000001380)) r5 = fsmount(r0, 0x0, 0x2) syz_clone3(&(0x7f0000001440)={0x1b002180, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xa}, &(0x7f00000000c0)=""/2, 0x2, &(0x7f0000000100)=""/251, &(0x7f0000001400)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3, r4, 0x0], 0x7, {r5}}, 0x58) 00:20:54 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x409800, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:54 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:20:54 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = pidfd_open(0x0, 0x0) process_madvise(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="2ff54144d6cf95ea545d7e1874720ef3006ed62d440ebec73b42e2081d5dfedbc33ea86f543140901c5fee63d4520cf92f662530c22676e5c2fcff564291944da839ce5e88a4b62b698ad0bacb2e1a1d4b4c6538e920c005eb6e5899f3e5abf55f3c9b0238fbdad454578a679ef1aac146a88637a885f6e3a59944683ca8a6441e0b1a95790c386949e8aa9e2fd9bf046b0f0daec9055d5d46f854f02acfc30f151843c35c", 0xa5}], 0x1, 0xf, 0x0) 00:20:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x70bd2d, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140079281436cd33db2738fdba2612f458d2025d1a9ef6b9fb18cf51bef1e80acf9f682590d28904d307e5c1f65e4aa8ff632f446a6fe621601f2fa6703b00334bbf00a12627477d35c36d7e41fca83e4d3fbef22d08d014281c5d478413a82526f41e8cdfbcac28096aacd711e1", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) 00:20:54 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:20:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x70bd2d, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140079281436cd33db2738fdba2612f458d2025d1a9ef6b9fb18cf51bef1e80acf9f682590d28904d307e5c1f65e4aa8ff632f446a6fe621601f2fa6703b00334bbf00a12627477d35c36d7e41fca83e4d3fbef22d08d014281c5d478413a82526f41e8cdfbcac28096aacd711e1", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) 00:20:54 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = pidfd_open(0x0, 0x0) process_madvise(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="2ff54144d6cf95ea545d7e1874720ef3006ed62d440ebec73b42e2081d5dfedbc33ea86f543140901c5fee63d4520cf92f662530c22676e5c2fcff564291944da839ce5e88a4b62b698ad0bacb2e1a1d4b4c6538e920c005eb6e5899f3e5abf55f3c9b0238fbdad454578a679ef1aac146a88637a885f6e3a59944683ca8a6441e0b1a95790c386949e8aa9e2fd9bf046b0f0daec9055d5d46f854f02acfc30f151843c35c", 0xa5}], 0x1, 0xf, 0x0) 00:20:54 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x409800, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) [ 1254.702228][T11851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.705298][T11851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:20:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x70bd2d, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140079281436cd33db2738fdba2612f458d2025d1a9ef6b9fb18cf51bef1e80acf9f682590d28904d307e5c1f65e4aa8ff632f446a6fe621601f2fa6703b00334bbf00a12627477d35c36d7e41fca83e4d3fbef22d08d014281c5d478413a82526f41e8cdfbcac28096aacd711e1", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x70bd2d, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140079281436cd33db2738fdba2612f458d2025d1a9ef6b9fb18cf51bef1e80acf9f682590d28904d307e5c1f65e4aa8ff632f446a6fe621601f2fa6703b00334bbf00a12627477d35c36d7e41fca83e4d3fbef22d08d014281c5d478413a82526f41e8cdfbcac28096aacd711e1", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) (async) 00:20:54 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x185000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100, 0x0, 0x81}) 00:20:55 executing program 1: r0 = syz_usb_connect(0x1, 0xa0e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x56, 0x7d, 0x9d, 0x40, 0x1e2d, 0x82, 0x2947, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9fc, 0x3, 0x20, 0x81, 0x60, 0x0, [{{0x9, 0x4, 0x5, 0x40, 0x6, 0xa, 0x3d, 0x3a, 0x3f, [@hid_hid={0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0xef8}}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x7f, 0x8, [@generic={0xc5, 0x30, "d56e2ab989a01837649724eb42cdbe9c17c5457611f41be7026d0b9c104acb4f9020b19e0a8a61887d6bbc3c21127e70d517380552abf362d2359a854127404d4df1ac625cff8d4484e23df7740edd1ec137864f02c09e92619eed7236898becd3c001978c9dfb67fc44ea38bd710b3a6fb403651207730d38aec11b6098529c756ac2f3f590ef903fa448d05a9c5548ca64b7cee94140d01bebc018cb6757be0d3a8b347e481dc3bc4c0adfa9ed7ee1a2229a2dec863610706af54f9901560dc51a6d"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x25, 0x8, 0x0, [@generic={0x2e, 0x1, "b1a12243473159e51871c2c56301f786bd5ab8a7280fb620baedff161e242840e350d94858dd3bf0d155307c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x6, 0x7f, 0x40, [@generic={0xfa, 0x1, "5248f188300eaaf36471ead92823a65dbaa37fb4d23480fd0fc381cb232d9d471e2d7cd6942706cee082d49d8f1e808efa94659a4acca506c32bbbe7d06d45d8ccb71ca06700fb7356b3ce3cbca891b014789b7fb2baef78fd77e080a4ebdaeddabd63d1ae8630528f8b055641860fcc4f9c57b099556b31139f6b1ac28991a36dcc38d9056cc9895dc04e544bcb2a250194c2ccfbbfc14d55686864ab03298a9bc3c59415ac7fced98a711697bbe75ebfcaf9e117d208a8d266173c6c033f9687c0ce7d7379cb7cc61635418f319495f68c9dc9353827df8a1af99f38d70017df8a6ed38bd6578cc4487dc3e2f3f538ee34a4d311888096"}]}}, {{0x9, 0x5, 0x7, 0x18, 0x8, 0x6, 0x9, 0x8, [@generic={0xc6, 0x2, "9038395769f8cb66b4d9a5d96ae45c1afadbbdb00c13d6706105aa596f1f1eb90607cb1af3f86aee58ad5dcf564112c19fe589252256b941e9413e7abe1573e242d94d2464484fa56f87c7de2c876c528670488ac1a791204d58d1441b137852704bad04051fd54f702ebc7eedafdf93f013fa809ee90a976076903697a8397f96c34255031a83a24f37b34c22a834d3e3c6c707ac49da83396c3694589d27add6f98f2f8817dc428de709bc2a07c5d29749a9275f4b35ea76200f9ee192d7702f8be0fc"}, @generic={0x86, 0xd, "f4fa1fe5263b2691d44d1696d6ec828d05eb114500258a672e2041359fde652bb8b1b720d825c9820cf97fa1dac664c609fbaeee5b81ecd0e13fbef4c10bb50da6d95a92e52086224c6427d078d8b9c49c4538d8ff6b62215f824a8ec3b478b6a2e1c198d2685a130b7b2878984c12cfba30693668fca02ca5d729eec1e65002fb8938a0"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x30, 0x9, 0x5, 0x3, [@generic={0xe7, 0x30, "a687d64ae385704d2a6c8725a027731b1d9bc586d8740717174d245a849effb9d5c80ad2a1c73f5278e9bbe2af16635e5de32fef6a80d5ff7260b13f7a665c68611d480c1745ca0b7e5290fcbd4b3de92c47f5acc3757807453eda99ba27a4c1052a779f2ecc943d0a92dacd84faf18ab564e89e7ebee9a44258158597ac4b36ab93ba011ba47c61fa41e9b56d1b551fd62eb7c8ba507ebfa93485ee7360763fb4cb944b4ed0fe8b6abc4e881d0fbbc71f75b0510e57e87a299f3452b078c775940b09cfc62c461de9718e841984813d7cd8c7b1fcc91759db6e297efa9c288ec1a2c167b8"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x5, 0x2c, 0x40, 0xa1, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0xffff}]}}]}}, {{0x9, 0x4, 0x0, 0xff, 0x2, 0x75, 0x62, 0xc2, 0x1, [@generic={0x2e, 0x21, "8d77c8963279ea1243a3f73de927f4c3a76c3cfa0c2140c5d49edc102abe45a779af537bef3c72de75a0948c"}], [{{0x9, 0x5, 0xe, 0x0, 0x8, 0x1f, 0xea, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x8000}, @generic={0x71, 0x10, "9c5dd48c6ea05adc18a7e8b6caabe735f2e5f8d40949b34e9b917abc1db38d16c2d31307cacaaa6acb7e684cb664cc1dc69c2d3cf73ce960db2dc59b3d196a0915b41866e7e57cc8b223fa3a548f08db25506dddb68e5247776f8585052d2d95786d0c1b9653080ddb6b21f2c2216b"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x7, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x1ff}]}}]}}, {{0x9, 0x4, 0x3e, 0x5, 0x7, 0x63, 0x8d, 0x96, 0xc0, [@generic={0x9b, 0xa, "f8eb041e932808d6aa1289e77d2fa974712f96805bfa39e7d5e34cd6b6c9967e9c7ea7e84b6d684c5060784f72b31e377331d6b583745a54e958cf8b851e6784a138986cc654ca5bbd419f2ca1f33707284e527c71cbc78cb253df39bebfb7cfa4bb67a973e66dde94827d478db93d0ae10a3233e102b29c1b5107ea8a7f5af81ba24d3b4b8f27c1f290ddb79b3995f49028b8064424563422"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "3ba7d6c9b5"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x800}, [@mdlm_detail={0x82, 0x24, 0x13, 0xfd, "788ecb1242a3edb02f490df9f0ff50b2b13431d8cc5bb84bc27d1eae2da8e498a325d9eb4349f0dfe7aa15342c6647c10ed212609c1dfe63c7023f23d17abfe1139c6a588d339659ec5f8e03db814f1be8b772938a4fb87a1c28e0ed6e470ed2c3cf1a4ecd5f195ac0d367c3726a8fb7aa625971a13d24108f2e6232767e"}, @mdlm_detail={0xdc, 0x24, 0x13, 0x51, "b3f42bdc9dd10a1c28dc71440d905baf08fe3c8b61419d14d69f5a367aab12f11d4c4a4511284e4bbec610a51a96ab9d89acdb6d16075f6957cd6014fc58cd142f08dc247f0287e763c41ec61c4b57f516ad9b78de82b12b5a48191a1743281e89436744710811dacdeccac0d91345ef8019239eb6e3288047a0fddae5aa5009640d291b31f3f820da8d42e37829886979e16d0733458e588ed7859eb583ea0a9339eca43432d5112e1b92e606da9df8edc2163626ef87b31ad521ceb6c7961859ea4c7c4851a136daf7cf2834d7d21aeff589c20029c4d5"}, @obex={0x5, 0x24, 0x15, 0x64}, @call_mgmt={0x5, 0x24, 0x1, 0x5, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xff2b, 0x0, 0x5, 0x0, 0x9}]}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x2, 0x9, 0x4, [@generic={0x16, 0x2, "caf12d5c96b6980e2689f58c49c9d4fcddb22399"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x3, 0x9, 0x5, [@generic={0x9e, 0x22, "9bf854d602dfee2dffcfede5ee7eb9616f470866cd83fa612455d198e6db1d63f204c4702aaa0280af76567c831fe2cc1e1f9b14631d5e0909250d7869e48db01ac07d21bf92e15ceed70281e9ff08dceddc614befeb9d242c44fbda1a6213c67ed4e2d5cbc814af80025aff2219c4a60912cb22880163fdee79c151dc750af17d326d19336f4fac1df69bd51ce6a4a9e8f6c024207ea83b5f58d5cd"}, @generic={0x3, 0xb, 'k'}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x20, 0x3, 0xff, [@generic={0x95, 0x6, "1a198effa616fa5007268b357cd77c3d5cbd134019f17fc7c6199dd9f8362f543052cc438f0167f2dda1a72929c4acde469b627f2eb466124f4d6c478d39ca5d3092642518124315a466c7202b387310f73c30ac44ca0789deb404562fd6ce3a5c30013da97e78ee5c928459b3dea42f78de64e6e300923a6af2097acbfa82e8a8bfa3c42da7cb3103a64049d649a160e0145b"}, @generic={0x72, 0x23, "6f04c0c2e228235b620211a1637f33de30d53dcbb1f6521ffca7068a823b538b01e3d00521be4faa6a4d909033b65824c7a93b50512871e74b02378feed05d1d0d40be7286485d800898037904d731f7c40ecc08d71b7daf8203b73be708b1fc424f0e2eafe476210d882f77c862f7b6"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x0, 0x81, 0x22, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x4800}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x7, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xf800}, @generic={0x61, 0x22, "ae186fd3c71d29f4533475cf30a708e9bf85f8a98106b9c8e87739f7385bd0c9a01f0806852e77d5188e46cf9214185b1ba62ebd2a36d12816947a0eff79c5f51566d4aadee0b085b3212d797201c9c52625969f71e90aedf6139a2834381b"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x0, 0x3, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x9, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x7f, 0xff, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x1}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x110, 0x4, 0x0, 0x4, 0x0, 0x6}, 0x27, &(0x7f0000000ac0)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x1, 0xf00f, 0x3, [0x0, 0x30, 0xff, 0x0]}]}, 0x5, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x424}}, {0xaa, &(0x7f0000000b40)=@string={0xaa, 0x3, "099e1c506e13df4586d027b166eae510ca767cd7de1fe4f95a32145a0c9f6373c47b4ca8f73ee372f8590391be54b42c00916056025c009018a0193de48dd69fd23dec62dfe69954b495bec14ec5f8f4672ec85cc2c5b70499762f4d7cf44f2a91bcc5c2a5717a578fb8d3d0483f40c5b6f53a3e7bb38f055a95919631455f463fab2b39bc8e39183d065d104191ba16051588467597d31fac70be5e8b60454a7851626bb1cf8275"}}, {0xa0, &(0x7f0000000c00)=@string={0xa0, 0x3, "e27eaad4f31244373dc4386c3e9381f65b1e33a71d1469aca63283f9f22d3837768d8078858807696905f97c609b84af35545a9f972b2cfd992999023cac9d4666a86b7de1e217baac6e9aadd7819cd2f9d77ee2da7d2ca27c0b019a1e25f6b1c94c59408573ffedeb2964265e960701a8918b529ebd3f3742311cfa21d80b67689491384caf3acb77a5575345bf762d8611892afb3039693fc2e1f83a99"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x440a}}, {0xd7, &(0x7f0000000d00)=@string={0xd7, 0x3, "bd2b8005a15b39c3359666543ec4fa43e0b7dd6be5c1c3ac00769288ca3890358bb7bbd74e026d998355fb616d3f29f70303a1d925a4cb7f9c832858f96e74e346a00d9d8e8e280b81a755e48d287604b03688890edff52bf0cb8ecda6ad37e632818a2b5c18363f72e4b1e180118a866d4406cb42fcf1f3c134e30e3468094167b20818658f593379a06321aeb5c9c5104eb8534d2d7d68716f366f2af86ada827a3733d63c83c313191f1dcd3f1568a00b10fb30ec7dce8d56bc7e723efef5e75d1306783e09a48bd9217348e9f18376b8d7eada"}}]}) syz_usb_ep_read(r0, 0x2, 0xea, &(0x7f0000000e80)=""/234) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5420) syz_usb_connect(0x1, 0xa0e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x56, 0x7d, 0x9d, 0x40, 0x1e2d, 0x82, 0x2947, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9fc, 0x3, 0x20, 0x81, 0x60, 0x0, [{{0x9, 0x4, 0x5, 0x40, 0x6, 0xa, 0x3d, 0x3a, 0x3f, [@hid_hid={0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0xef8}}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x7f, 0x8, [@generic={0xc5, 0x30, "d56e2ab989a01837649724eb42cdbe9c17c5457611f41be7026d0b9c104acb4f9020b19e0a8a61887d6bbc3c21127e70d517380552abf362d2359a854127404d4df1ac625cff8d4484e23df7740edd1ec137864f02c09e92619eed7236898becd3c001978c9dfb67fc44ea38bd710b3a6fb403651207730d38aec11b6098529c756ac2f3f590ef903fa448d05a9c5548ca64b7cee94140d01bebc018cb6757be0d3a8b347e481dc3bc4c0adfa9ed7ee1a2229a2dec863610706af54f9901560dc51a6d"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x25, 0x8, 0x0, [@generic={0x2e, 0x1, "b1a12243473159e51871c2c56301f786bd5ab8a7280fb620baedff161e242840e350d94858dd3bf0d155307c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x6, 0x7f, 0x40, [@generic={0xfa, 0x1, "5248f188300eaaf36471ead92823a65dbaa37fb4d23480fd0fc381cb232d9d471e2d7cd6942706cee082d49d8f1e808efa94659a4acca506c32bbbe7d06d45d8ccb71ca06700fb7356b3ce3cbca891b014789b7fb2baef78fd77e080a4ebdaeddabd63d1ae8630528f8b055641860fcc4f9c57b099556b31139f6b1ac28991a36dcc38d9056cc9895dc04e544bcb2a250194c2ccfbbfc14d55686864ab03298a9bc3c59415ac7fced98a711697bbe75ebfcaf9e117d208a8d266173c6c033f9687c0ce7d7379cb7cc61635418f319495f68c9dc9353827df8a1af99f38d70017df8a6ed38bd6578cc4487dc3e2f3f538ee34a4d311888096"}]}}, {{0x9, 0x5, 0x7, 0x18, 0x8, 0x6, 0x9, 0x8, [@generic={0xc6, 0x2, "9038395769f8cb66b4d9a5d96ae45c1afadbbdb00c13d6706105aa596f1f1eb90607cb1af3f86aee58ad5dcf564112c19fe589252256b941e9413e7abe1573e242d94d2464484fa56f87c7de2c876c528670488ac1a791204d58d1441b137852704bad04051fd54f702ebc7eedafdf93f013fa809ee90a976076903697a8397f96c34255031a83a24f37b34c22a834d3e3c6c707ac49da83396c3694589d27add6f98f2f8817dc428de709bc2a07c5d29749a9275f4b35ea76200f9ee192d7702f8be0fc"}, @generic={0x86, 0xd, "f4fa1fe5263b2691d44d1696d6ec828d05eb114500258a672e2041359fde652bb8b1b720d825c9820cf97fa1dac664c609fbaeee5b81ecd0e13fbef4c10bb50da6d95a92e52086224c6427d078d8b9c49c4538d8ff6b62215f824a8ec3b478b6a2e1c198d2685a130b7b2878984c12cfba30693668fca02ca5d729eec1e65002fb8938a0"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x30, 0x9, 0x5, 0x3, [@generic={0xe7, 0x30, "a687d64ae385704d2a6c8725a027731b1d9bc586d8740717174d245a849effb9d5c80ad2a1c73f5278e9bbe2af16635e5de32fef6a80d5ff7260b13f7a665c68611d480c1745ca0b7e5290fcbd4b3de92c47f5acc3757807453eda99ba27a4c1052a779f2ecc943d0a92dacd84faf18ab564e89e7ebee9a44258158597ac4b36ab93ba011ba47c61fa41e9b56d1b551fd62eb7c8ba507ebfa93485ee7360763fb4cb944b4ed0fe8b6abc4e881d0fbbc71f75b0510e57e87a299f3452b078c775940b09cfc62c461de9718e841984813d7cd8c7b1fcc91759db6e297efa9c288ec1a2c167b8"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x5, 0x2c, 0x40, 0xa1, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0xffff}]}}]}}, {{0x9, 0x4, 0x0, 0xff, 0x2, 0x75, 0x62, 0xc2, 0x1, [@generic={0x2e, 0x21, "8d77c8963279ea1243a3f73de927f4c3a76c3cfa0c2140c5d49edc102abe45a779af537bef3c72de75a0948c"}], [{{0x9, 0x5, 0xe, 0x0, 0x8, 0x1f, 0xea, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x8000}, @generic={0x71, 0x10, "9c5dd48c6ea05adc18a7e8b6caabe735f2e5f8d40949b34e9b917abc1db38d16c2d31307cacaaa6acb7e684cb664cc1dc69c2d3cf73ce960db2dc59b3d196a0915b41866e7e57cc8b223fa3a548f08db25506dddb68e5247776f8585052d2d95786d0c1b9653080ddb6b21f2c2216b"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x7, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x1ff}]}}]}}, {{0x9, 0x4, 0x3e, 0x5, 0x7, 0x63, 0x8d, 0x96, 0xc0, [@generic={0x9b, 0xa, "f8eb041e932808d6aa1289e77d2fa974712f96805bfa39e7d5e34cd6b6c9967e9c7ea7e84b6d684c5060784f72b31e377331d6b583745a54e958cf8b851e6784a138986cc654ca5bbd419f2ca1f33707284e527c71cbc78cb253df39bebfb7cfa4bb67a973e66dde94827d478db93d0ae10a3233e102b29c1b5107ea8a7f5af81ba24d3b4b8f27c1f290ddb79b3995f49028b8064424563422"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "3ba7d6c9b5"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x800}, [@mdlm_detail={0x82, 0x24, 0x13, 0xfd, "788ecb1242a3edb02f490df9f0ff50b2b13431d8cc5bb84bc27d1eae2da8e498a325d9eb4349f0dfe7aa15342c6647c10ed212609c1dfe63c7023f23d17abfe1139c6a588d339659ec5f8e03db814f1be8b772938a4fb87a1c28e0ed6e470ed2c3cf1a4ecd5f195ac0d367c3726a8fb7aa625971a13d24108f2e6232767e"}, @mdlm_detail={0xdc, 0x24, 0x13, 0x51, "b3f42bdc9dd10a1c28dc71440d905baf08fe3c8b61419d14d69f5a367aab12f11d4c4a4511284e4bbec610a51a96ab9d89acdb6d16075f6957cd6014fc58cd142f08dc247f0287e763c41ec61c4b57f516ad9b78de82b12b5a48191a1743281e89436744710811dacdeccac0d91345ef8019239eb6e3288047a0fddae5aa5009640d291b31f3f820da8d42e37829886979e16d0733458e588ed7859eb583ea0a9339eca43432d5112e1b92e606da9df8edc2163626ef87b31ad521ceb6c7961859ea4c7c4851a136daf7cf2834d7d21aeff589c20029c4d5"}, @obex={0x5, 0x24, 0x15, 0x64}, @call_mgmt={0x5, 0x24, 0x1, 0x5, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xff2b, 0x0, 0x5, 0x0, 0x9}]}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x2, 0x9, 0x4, [@generic={0x16, 0x2, "caf12d5c96b6980e2689f58c49c9d4fcddb22399"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x3, 0x9, 0x5, [@generic={0x9e, 0x22, "9bf854d602dfee2dffcfede5ee7eb9616f470866cd83fa612455d198e6db1d63f204c4702aaa0280af76567c831fe2cc1e1f9b14631d5e0909250d7869e48db01ac07d21bf92e15ceed70281e9ff08dceddc614befeb9d242c44fbda1a6213c67ed4e2d5cbc814af80025aff2219c4a60912cb22880163fdee79c151dc750af17d326d19336f4fac1df69bd51ce6a4a9e8f6c024207ea83b5f58d5cd"}, @generic={0x3, 0xb, 'k'}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x20, 0x3, 0xff, [@generic={0x95, 0x6, "1a198effa616fa5007268b357cd77c3d5cbd134019f17fc7c6199dd9f8362f543052cc438f0167f2dda1a72929c4acde469b627f2eb466124f4d6c478d39ca5d3092642518124315a466c7202b387310f73c30ac44ca0789deb404562fd6ce3a5c30013da97e78ee5c928459b3dea42f78de64e6e300923a6af2097acbfa82e8a8bfa3c42da7cb3103a64049d649a160e0145b"}, @generic={0x72, 0x23, "6f04c0c2e228235b620211a1637f33de30d53dcbb1f6521ffca7068a823b538b01e3d00521be4faa6a4d909033b65824c7a93b50512871e74b02378feed05d1d0d40be7286485d800898037904d731f7c40ecc08d71b7daf8203b73be708b1fc424f0e2eafe476210d882f77c862f7b6"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x0, 0x81, 0x22, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x4800}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x7, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xf800}, @generic={0x61, 0x22, "ae186fd3c71d29f4533475cf30a708e9bf85f8a98106b9c8e87739f7385bd0c9a01f0806852e77d5188e46cf9214185b1ba62ebd2a36d12816947a0eff79c5f51566d4aadee0b085b3212d797201c9c52625969f71e90aedf6139a2834381b"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x0, 0x3, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x9, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x7f, 0xff, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x1}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x110, 0x4, 0x0, 0x4, 0x0, 0x6}, 0x27, &(0x7f0000000ac0)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x1, 0xf00f, 0x3, [0x0, 0x30, 0xff, 0x0]}]}, 0x5, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x424}}, {0xaa, &(0x7f0000000b40)=@string={0xaa, 0x3, "099e1c506e13df4586d027b166eae510ca767cd7de1fe4f95a32145a0c9f6373c47b4ca8f73ee372f8590391be54b42c00916056025c009018a0193de48dd69fd23dec62dfe69954b495bec14ec5f8f4672ec85cc2c5b70499762f4d7cf44f2a91bcc5c2a5717a578fb8d3d0483f40c5b6f53a3e7bb38f055a95919631455f463fab2b39bc8e39183d065d104191ba16051588467597d31fac70be5e8b60454a7851626bb1cf8275"}}, {0xa0, &(0x7f0000000c00)=@string={0xa0, 0x3, "e27eaad4f31244373dc4386c3e9381f65b1e33a71d1469aca63283f9f22d3837768d8078858807696905f97c609b84af35545a9f972b2cfd992999023cac9d4666a86b7de1e217baac6e9aadd7819cd2f9d77ee2da7d2ca27c0b019a1e25f6b1c94c59408573ffedeb2964265e960701a8918b529ebd3f3742311cfa21d80b67689491384caf3acb77a5575345bf762d8611892afb3039693fc2e1f83a99"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x440a}}, {0xd7, &(0x7f0000000d00)=@string={0xd7, 0x3, "bd2b8005a15b39c3359666543ec4fa43e0b7dd6be5c1c3ac00769288ca3890358bb7bbd74e026d998355fb616d3f29f70303a1d925a4cb7f9c832858f96e74e346a00d9d8e8e280b81a755e48d287604b03688890edff52bf0cb8ecda6ad37e632818a2b5c18363f72e4b1e180118a866d4406cb42fcf1f3c134e30e3468094167b20818658f593379a06321aeb5c9c5104eb8534d2d7d68716f366f2af86ada827a3733d63c83c313191f1dcd3f1568a00b10fb30ec7dce8d56bc7e723efef5e75d1306783e09a48bd9217348e9f18376b8d7eada"}}]}) (async) syz_usb_ep_read(r0, 0x2, 0xea, &(0x7f0000000e80)=""/234) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5420) (async) 00:20:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (rerun: 64) 00:20:55 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x1, 0x76) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) 00:20:55 executing program 3: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x14, r0, 0x4, 0x0, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4018) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) r1 = syz_clone3(&(0x7f0000001380)={0x100, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0), {0x1e}, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/4096, &(0x7f0000001340)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4, {r0}}, 0x58) (async) r2 = syz_clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000014c0)={0x0, {}, 0x0, {}, 0x5, 0x6, 0x2, 0x14, "28da2576ec2ffa084f65b5a3b7fb25230be57d73087e3f22511b88f358c2c8579c131993fddb5efc6cf6de191605a3942bb71c713679568067487587e263ef10", "ebdc4f5e2c0115d0ac6ea3fe5014a905cbbf5f4ad4a25e8d0a9fc82176f209d4", [0x439, 0x4]}) (async) r3 = syz_clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_rr_get_interval(r3, &(0x7f0000001380)) r4 = syz_clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_rr_get_interval(r4, &(0x7f0000001380)) (async) r5 = fsmount(r0, 0x0, 0x2) syz_clone3(&(0x7f0000001440)={0x1b002180, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xa}, &(0x7f00000000c0)=""/2, 0x2, &(0x7f0000000100)=""/251, &(0x7f0000001400)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3, r4, 0x0], 0x7, {r5}}, 0x58) 00:20:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x185000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100, 0x0, 0x81}) [ 1255.261709][T11887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:20:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x185000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100, 0x0, 0x81}) 00:20:55 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x1, 0x76) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x76) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) (async) [ 1255.264575][T11887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:20:55 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) r1 = fsmount(r0, 0x0, 0x2) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) write$capi20(r2, &(0x7f00000000c0)={0x10, 0x8000, 0x8, 0x83, 0x8000, 0x6c0}, 0x10) fsmount(r1, 0x0, 0x9) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x88001) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x5421, 0x0) [ 1255.270281][T11887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.273241][T11887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:20:55 executing program 3: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x14, r0, 0x4, 0x0, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4018) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x14, r0, 0x4, 0x0, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4018) (async) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) 00:20:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x46a181) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/40) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f00000000c0)=0xfff) 00:20:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) r1 = syz_clone3(&(0x7f0000001380)={0x100, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0), {0x1e}, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/4096, &(0x7f0000001340)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4, {r0}}, 0x58) r2 = syz_clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000014c0)={0x0, {}, 0x0, {}, 0x5, 0x6, 0x2, 0x14, "28da2576ec2ffa084f65b5a3b7fb25230be57d73087e3f22511b88f358c2c8579c131993fddb5efc6cf6de191605a3942bb71c713679568067487587e263ef10", "ebdc4f5e2c0115d0ac6ea3fe5014a905cbbf5f4ad4a25e8d0a9fc82176f209d4", [0x439, 0x4]}) (async) r3 = syz_clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_rr_get_interval(r3, &(0x7f0000001380)) (async) r4 = syz_clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_rr_get_interval(r4, &(0x7f0000001380)) r5 = fsmount(r0, 0x0, 0x2) syz_clone3(&(0x7f0000001440)={0x1b002180, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xa}, &(0x7f00000000c0)=""/2, 0x2, &(0x7f0000000100)=""/251, &(0x7f0000001400)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3, r4, 0x0], 0x7, {r5}}, 0x58) 00:20:55 executing program 3: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x14, r0, 0x4, 0x0, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4018) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x14, r0, 0x4, 0x0, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4018) (async) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) 00:20:55 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x1, 0x76) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) 00:20:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 00:20:55 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 32) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async, rerun: 32) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 64) r1 = fsmount(r0, 0x0, 0x2) (rerun: 64) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) write$capi20(r2, &(0x7f00000000c0)={0x10, 0x8000, 0x8, 0x83, 0x8000, 0x6c0}, 0x10) (async) fsmount(r1, 0x0, 0x9) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x88001) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x5421, 0x0) 00:20:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x46a181) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/40) (async) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f00000000c0)=0xfff) 00:20:55 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x76) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRES64=r2], &(0x7f0000000340)='syzkaller\x00', 0x37f, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x400000a, 0x9, 0x6}, 0x3c, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3, r0}, 0xc) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000004c0)=r1, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000600)={0x1, {&(0x7f0000000500)=""/95, 0x5f, &(0x7f0000000580)=""/93, 0x0, 0x2}}, 0x48) fsmount(r4, 0x0, 0x2) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000001c0)='\\{$))(\'c\x00', &(0x7f0000000200)="c88664bf67fc5fbb520221b63b82144dac770e23eb35c853f89e7e45a113f6844481b1749d5ddbc7cc2cdcd026962717fe37b771bffd2d02c744280aa17ec91655a2a597e5ac0bae4edc613c02163b2005f94d2c6c", 0x55) fsmount(r2, 0x0, 0xf0) r5 = fsmount(r0, 0x0, 0x2) sendmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="b88499ef227a1c33d72c9c10238627a4dbeddc2486cab742525ba941b8c209db608c5a152db4cbf9c5d3d353143e9a54b8655dce80e2ab7e4d49d3a8c90004757af67cc87c10134464f903ddbdb8b2ca1feef5148f63489ca187c7d7e3bbb826a79030f302f813d6314029a032d9196839a6040d832fed022a53e032170e5411c3e087d26ebcc3e5889d9b669aa7b0e179d0ec06abc704f18a8631d87681c23d61f5763991e69e749f7589672e0fe5f60409", 0xb2}, 0x1, 0x0, 0x0, 0x1}, 0x44094) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x541b, 0x0) 00:20:55 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x44300) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0) write$capi20(r2, &(0x7f00000000c0)={0x10, 0x9, 0x80, 0x82, 0x7ff, 0x8}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000100)=0x4) 00:20:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x0, 0x20, 0x1, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0xc1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async) 00:20:55 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x44300) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0) write$capi20(r2, &(0x7f00000000c0)={0x10, 0x9, 0x80, 0x82, 0x7ff, 0x8}, 0x10) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000100)=0x4) 00:20:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x46a181) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/40) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f00000000c0)=0xfff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x46a181) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/40) (async) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f00000000c0)=0xfff) (async) 00:20:55 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) r1 = fsmount(r0, 0x0, 0x2) (async) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) write$capi20(r2, &(0x7f00000000c0)={0x10, 0x8000, 0x8, 0x83, 0x8000, 0x6c0}, 0x10) (async) fsmount(r1, 0x0, 0x9) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x88001) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x5421, 0x0) 00:20:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x0, 0x20, 0x1, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0xc1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:55 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (rerun: 64) r2 = fsmount(r1, 0x0, 0x76) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRES64=r2], &(0x7f0000000340)='syzkaller\x00', 0x37f, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x400000a, 0x9, 0x6}, 0x3c, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3, r0}, 0xc) (async, rerun: 32) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000004c0)=r1, 0x4) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (rerun: 64) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000600)={0x1, {&(0x7f0000000500)=""/95, 0x5f, &(0x7f0000000580)=""/93, 0x0, 0x2}}, 0x48) fsmount(r4, 0x0, 0x2) (async) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000001c0)='\\{$))(\'c\x00', &(0x7f0000000200)="c88664bf67fc5fbb520221b63b82144dac770e23eb35c853f89e7e45a113f6844481b1749d5ddbc7cc2cdcd026962717fe37b771bffd2d02c744280aa17ec91655a2a597e5ac0bae4edc613c02163b2005f94d2c6c", 0x55) fsmount(r2, 0x0, 0xf0) r5 = fsmount(r0, 0x0, 0x2) sendmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="b88499ef227a1c33d72c9c10238627a4dbeddc2486cab742525ba941b8c209db608c5a152db4cbf9c5d3d353143e9a54b8655dce80e2ab7e4d49d3a8c90004757af67cc87c10134464f903ddbdb8b2ca1feef5148f63489ca187c7d7e3bbb826a79030f302f813d6314029a032d9196839a6040d832fed022a53e032170e5411c3e087d26ebcc3e5889d9b669aa7b0e179d0ec06abc704f18a8631d87681c23d61f5763991e69e749f7589672e0fe5f60409", 0xb2}, 0x1, 0x0, 0x0, 0x1}, 0x44094) (async) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x541b, 0x0) 00:20:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 00:20:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x0, 0x20, 0x1, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0xc1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x0, 0x20, 0x1, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0xc1) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) 00:20:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x3, 0x2, 0x6}, 0x8000000000000001, 0x8}) 00:20:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000200)=[0x6800000, 0x0, 0x1, 0x3], 0x4, 0x400, 0x3, 0x1, 0x280, 0x3, 0x1, {0x1, 0x3ff, 0x81, 0x81, 0xffff, 0x40, 0x3, 0x3, 0x401, 0x1f, 0x4, 0x7, 0x40, 0x836, "eab40dffe165bafe53f9263a64224dee07c9b45807534d32224353a3ccad27c7"}}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000080)="c119d71417ae089eea99cc73e8857163681c7155a1890dd26e65028cc17e2960e6bd9314e2de8338f537fe967a5fc245c819e745f3b7c108aaec4e85f18fa130416b3d1ef14e79e4142a5cd28b0a8a68ac21ff40f7af9eed49164261fc118f18702ab85f19a9aabfe8dfd75435dcc1f938fb84f6ffcbb5fdc5ea714e9c65cb8f6f5549e66eec9de23188fe01c423c07951d3a32aac02d5649d159ed2f49c04d77a2f89ed1979459d51e362ec00da037d01249f7030e3a836d0f06c975d3038dc7cea79ecc8d1099ada00a8cf67057aa9cdc374589e0d97425ac6d3e4", &(0x7f0000000180)=""/29}, 0x20) 00:20:55 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0xef, 0x200480) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:55 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x44300) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0) write$capi20(r2, &(0x7f00000000c0)={0x10, 0x9, 0x80, 0x82, 0x7ff, 0x8}, 0x10) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000100)=0x4) 00:20:55 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0xef, 0x200480) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:55 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x76) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRES64=r2], &(0x7f0000000340)='syzkaller\x00', 0x37f, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x400000a, 0x9, 0x6}, 0x3c, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3, r0}, 0xc) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000004c0)=r1, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000600)={0x1, {&(0x7f0000000500)=""/95, 0x5f, &(0x7f0000000580)=""/93, 0x0, 0x2}}, 0x48) fsmount(r4, 0x0, 0x2) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000001c0)='\\{$))(\'c\x00', &(0x7f0000000200)="c88664bf67fc5fbb520221b63b82144dac770e23eb35c853f89e7e45a113f6844481b1749d5ddbc7cc2cdcd026962717fe37b771bffd2d02c744280aa17ec91655a2a597e5ac0bae4edc613c02163b2005f94d2c6c", 0x55) fsmount(r2, 0x0, 0xf0) r5 = fsmount(r0, 0x0, 0x2) sendmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="b88499ef227a1c33d72c9c10238627a4dbeddc2486cab742525ba941b8c209db608c5a152db4cbf9c5d3d353143e9a54b8655dce80e2ab7e4d49d3a8c90004757af67cc87c10134464f903ddbdb8b2ca1feef5148f63489ca187c7d7e3bbb826a79030f302f813d6314029a032d9196839a6040d832fed022a53e032170e5411c3e087d26ebcc3e5889d9b669aa7b0e179d0ec06abc704f18a8631d87681c23d61f5763991e69e749f7589672e0fe5f60409", 0xb2}, 0x1, 0x0, 0x0, 0x1}, 0x44094) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x541b, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x76) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRES64=r2], &(0x7f0000000340)='syzkaller\x00', 0x37f, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x400000a, 0x9, 0x6}, 0x3c, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x80) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3, r0}, 0xc) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000004c0)=r1, 0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000600)={0x1, {&(0x7f0000000500)=""/95, 0x5f, &(0x7f0000000580)=""/93, 0x0, 0x2}}, 0x48) (async) fsmount(r4, 0x0, 0x2) (async) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000001c0)='\\{$))(\'c\x00', &(0x7f0000000200)="c88664bf67fc5fbb520221b63b82144dac770e23eb35c853f89e7e45a113f6844481b1749d5ddbc7cc2cdcd026962717fe37b771bffd2d02c744280aa17ec91655a2a597e5ac0bae4edc613c02163b2005f94d2c6c", 0x55) (async) fsmount(r2, 0x0, 0xf0) (async) fsmount(r0, 0x0, 0x2) (async) sendmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="b88499ef227a1c33d72c9c10238627a4dbeddc2486cab742525ba941b8c209db608c5a152db4cbf9c5d3d353143e9a54b8655dce80e2ab7e4d49d3a8c90004757af67cc87c10134464f903ddbdb8b2ca1feef5148f63489ca187c7d7e3bbb826a79030f302f813d6314029a032d9196839a6040d832fed022a53e032170e5411c3e087d26ebcc3e5889d9b669aa7b0e179d0ec06abc704f18a8631d87681c23d61f5763991e69e749f7589672e0fe5f60409", 0xb2}, 0x1, 0x0, 0x0, 0x1}, 0x44094) (async) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x541b, 0x0) (async) 00:20:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x3, 0x2, 0x6}, 0x8000000000000001, 0x8}) 00:20:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000200)=[0x6800000, 0x0, 0x1, 0x3], 0x4, 0x400, 0x3, 0x1, 0x280, 0x3, 0x1, {0x1, 0x3ff, 0x81, 0x81, 0xffff, 0x40, 0x3, 0x3, 0x401, 0x1f, 0x4, 0x7, 0x40, 0x836, "eab40dffe165bafe53f9263a64224dee07c9b45807534d32224353a3ccad27c7"}}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000080)="c119d71417ae089eea99cc73e8857163681c7155a1890dd26e65028cc17e2960e6bd9314e2de8338f537fe967a5fc245c819e745f3b7c108aaec4e85f18fa130416b3d1ef14e79e4142a5cd28b0a8a68ac21ff40f7af9eed49164261fc118f18702ab85f19a9aabfe8dfd75435dcc1f938fb84f6ffcbb5fdc5ea714e9c65cb8f6f5549e66eec9de23188fe01c423c07951d3a32aac02d5649d159ed2f49c04d77a2f89ed1979459d51e362ec00da037d01249f7030e3a836d0f06c975d3038dc7cea79ecc8d1099ada00a8cf67057aa9cdc374589e0d97425ac6d3e4", &(0x7f0000000180)=""/29}, 0x20) 00:20:55 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0xfb) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x2, 0x2, 0x1, 0x8001}, 0xf4, 0x715, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0x4, 0xffbffffeffffffff, 0xffffffff}) 00:20:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x3, 0x2, 0x6}, 0x8000000000000001, 0x8}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x3, 0x2, 0x6}, 0x8000000000000001, 0x8}) (async) 00:20:55 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async, rerun: 32) r1 = fsmount(0xffffffffffffffff, 0x1, 0xfb) (rerun: 32) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) r2 = fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x2, 0x2, 0x1, 0x8001}, 0xf4, 0x715, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0x4, 0xffbffffeffffffff, 0xffffffff}) 00:20:55 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0xef, 0x200480) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) syz_open_dev$amidi(&(0x7f0000000040), 0xef, 0x200480) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) 00:20:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3de78202", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x681d077f09e0eb51, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r5}]}]}, 0x74}}, 0x40) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/&%\'&\\-*-$\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x30000094}, 0xca38cf9f5752ce42) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000200)=[0x6800000, 0x0, 0x1, 0x3], 0x4, 0x400, 0x3, 0x1, 0x280, 0x3, 0x1, {0x1, 0x3ff, 0x81, 0x81, 0xffff, 0x40, 0x3, 0x3, 0x401, 0x1f, 0x4, 0x7, 0x40, 0x836, "eab40dffe165bafe53f9263a64224dee07c9b45807534d32224353a3ccad27c7"}}) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000080)="c119d71417ae089eea99cc73e8857163681c7155a1890dd26e65028cc17e2960e6bd9314e2de8338f537fe967a5fc245c819e745f3b7c108aaec4e85f18fa130416b3d1ef14e79e4142a5cd28b0a8a68ac21ff40f7af9eed49164261fc118f18702ab85f19a9aabfe8dfd75435dcc1f938fb84f6ffcbb5fdc5ea714e9c65cb8f6f5549e66eec9de23188fe01c423c07951d3a32aac02d5649d159ed2f49c04d77a2f89ed1979459d51e362ec00da037d01249f7030e3a836d0f06c975d3038dc7cea79ecc8d1099ada00a8cf67057aa9cdc374589e0d97425ac6d3e4", &(0x7f0000000180)=""/29}, 0x20) 00:20:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=@deltaction={0x28, 0x31, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x401, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x2404c811) 00:20:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3de78202", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x681d077f09e0eb51, 0x0) (async) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r5}]}]}, 0x74}}, 0x40) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/&%\'&\\-*-$\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x30000094}, 0xca38cf9f5752ce42) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=@deltaction={0x28, 0x31, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x401, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x2404c811) 00:20:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)) 00:20:55 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0xfb) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 32) r2 = fsmount(r1, 0x0, 0x2) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x2, 0x2, 0x1, 0x8001}, 0xf4, 0x715, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0x4, 0xffbffffeffffffff, 0xffffffff}) 00:20:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) 00:20:55 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3de78202", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x2) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x681d077f09e0eb51, 0x0) (async) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) (async) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r5, 0x0, 0x2) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r5}]}]}, 0x74}}, 0x40) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/&%\'&\\-*-$\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x30000094}, 0xca38cf9f5752ce42) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)) 00:20:55 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) 00:20:55 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x11}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=@deltaction={0x28, 0x31, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x401, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x2404c811) 00:20:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)) (async) 00:20:55 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x11}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x11}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:20:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x800000}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x58, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x1e, 0x1, '\xae\xcdH\xab\xd4v\xd9\nX\xa6d\xfd\x01b\xf8{\xd6C\x16m\xb80xffffffffffffffff}) r5 = fsmount(0xffffffffffffffff, 0x0, 0x88) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf25020000000c00050008000000000000005400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080c6689", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000300ab00000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 00:20:55 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x800000}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x58, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x1e, 0x1, '\xae\xcdH\xab\xd4v\xd9\nX\xa6d\xfd\x01b\xf8{\xd6C\x16m\xb80xffffffffffffffff}) (async) r5 = fsmount(0xffffffffffffffff, 0x0, 0x88) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r5, 0x0, 0x2) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf25020000000c00050008000000000000005400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080c6689", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000300ab00000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 00:20:55 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x11}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) write$smackfs_labels_list(r1, &(0x7f0000000000)={[{'/dev/ubi_ctrl\x00'}, {'/dev/ubi_ctrl\x00'}, {}, {}]}, 0x21) 00:20:55 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) r1 = fsmount(r0, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5420) 00:20:55 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) r1 = fsmount(r0, 0x0, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f00000002c0)="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", &(0x7f0000000000)=""/223, 0x4}, 0x20) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) fsmount(r0, 0x1, 0x70) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x5421, 0x0) 00:20:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) write$smackfs_labels_list(r1, &(0x7f0000000000)={[{'/dev/ubi_ctrl\x00'}, {'/dev/ubi_ctrl\x00'}, {}, {}]}, 0x21) 00:20:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:55 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) r1 = fsmount(r0, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5420) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r0, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5420) (async) 00:20:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x800000}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x58, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x1e, 0x1, '\xae\xcdH\xab\xd4v\xd9\nX\xa6d\xfd\x01b\xf8{\xd6C\x16m\xb80xffffffffffffffff}) r5 = fsmount(0xffffffffffffffff, 0x0, 0x88) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf25020000000c00050008000000000000005400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080c6689", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000300ab00000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x800000}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x58, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x1e, 0x1, '\xae\xcdH\xab\xd4v\xd9\nX\xa6d\xfd\x01b\xf8{\xd6C\x16m\xb80x0, 0x2f, 0x1, 0x0, 0x1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7, 0x20, 0x3, 0x3}}) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@mpls_getroute={0x44, 0x1a, 0x20, 0x70bd29, 0x25dfdbfc, {0x1c, 0x14, 0x20, 0x6, 0xff, 0x1, 0xff, 0x7, 0x1000}, [@RTA_VIA={0x14, 0x12, {0x2c, "a06c6be5d04b2d4fe386c77ce691"}}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0xfff8, 0x0, 0x1, r3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x20000000) 00:20:56 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x753201) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000040)={0x1}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:56 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x2f8, 0x24, 0x8, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0xe, 0x3}, {0xffff, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3f}}, @TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0x9, 0x0, 0x0, 0x9, 0xfffffffe, 0x6}}, {0x10, 0x2, [0x4, 0x0, 0xc29, 0x1ff, 0x96, 0x81]}}, {{0x1c, 0x1, {0x20, 0x5, 0x0, 0x5, 0x2, 0x5, 0x6, 0x6}}, {0x10, 0x2, [0x77, 0x2, 0x1, 0x7, 0x5, 0x800]}}, {{0x1c, 0x1, {0x8, 0xe4, 0x8000, 0x7, 0x1, 0xfff, 0x1, 0x5}}, {0xe, 0x2, [0x8, 0x1f, 0x3, 0x8, 0x6]}}, {{0x1c, 0x1, {0x3, 0x7f, 0x76d8, 0x2b, 0x2, 0xc5c, 0x1ff, 0x3}}, {0xa, 0x2, [0x3, 0x8a, 0x5]}}, {{0x1c, 0x1, {0x6, 0x8, 0x40, 0x5, 0x1, 0x9, 0x8, 0x4}}, {0xc, 0x2, [0x8001, 0x7, 0x8, 0x800]}}, {{0x1c, 0x1, {0x6, 0xf1, 0xffff, 0x0, 0x2, 0xffffff8e, 0x8, 0x2}}, {0x8, 0x2, [0x2, 0xfffa]}}, {{0x1c, 0x1, {0xf9, 0x40, 0x3, 0x200, 0x1, 0x3, 0x1, 0x3}}, {0xa, 0x2, [0x6, 0x2, 0x56c]}}]}, @TCA_STAB={0x178, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x30, 0x9, 0x4, 0x2, 0x1, 0x0, 0x2}}, {0x8, 0x2, [0x6, 0x5]}}, {{0x1c, 0x1, {0x20, 0x0, 0x2a, 0x5, 0x2, 0xe343, 0x0, 0x4}}, {0xc, 0x2, [0x88b1, 0x6, 0x40, 0x80]}}, {{0x1c, 0x1, {0x80, 0xb3, 0x400, 0x2, 0x1, 0x7, 0x8000, 0x5}}, {0xe, 0x2, [0x81, 0x9, 0xfdc4, 0x9, 0x7]}}, {{0x1c, 0x1, {0x5, 0x1f, 0x4f4e, 0x4, 0x0, 0x0, 0x4, 0x9}}, {0x16, 0x2, [0x4, 0x5, 0x2, 0xfffd, 0xffff, 0x1, 0x9, 0x6, 0xfff]}}, {{0x1c, 0x1, {0x5, 0x6, 0xfff9, 0x44, 0x0, 0x101, 0x3, 0x5}}, {0xe, 0x2, [0x2, 0x1000, 0x3, 0x80, 0x100]}}, {{0x1c, 0x1, {0x40, 0x7f, 0x7, 0x5, 0x2, 0x1, 0x3, 0x2}}, {0x8, 0x2, [0x7, 0x1f]}}, {{0x1c, 0x1, {0x2, 0x1f, 0x2, 0x10, 0x2, 0x28, 0x6, 0x6}}, {0x10, 0x2, [0x4, 0x1, 0x400, 0x8, 0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0xe1, 0x876, 0x7fff, 0x2, 0x2, 0x5, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x7f, 0x9, 0x4, 0xffffff01, 0x0, 0x6, 0xfaa, 0x4}}, {0xc, 0x2, [0x8, 0x101, 0x5, 0x4]}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4000}, 0x20) (rerun: 32) 00:20:56 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000000)={0x8000, 0x1, 0x5, 0x401, 0x1, [0x8, 0x3, 0xfffffff9, 0x1ff], [0x7f, 0x5, 0x3ff], [0x7, 0x8, 0x5, 0xffffffff], [0x4, 0x4bb8, 0x401, 0x6]}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7, 0x20, 0x3, 0x3}}) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@mpls_getroute={0x44, 0x1a, 0x20, 0x70bd29, 0x25dfdbfc, {0x1c, 0x14, 0x20, 0x6, 0xff, 0x1, 0xff, 0x7, 0x1000}, [@RTA_VIA={0x14, 0x12, {0x2c, "a06c6be5d04b2d4fe386c77ce691"}}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0xfff8, 0x0, 0x1, r3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x20000000) 00:20:56 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5000000, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x989680}}, 0x81) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, r3, 0x0, 0x0], &(0x7f0000000280)=[0xea, 0x2, 0x734, 0x101, 0x4], 0xc61, 0x4, 0x7}) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000000c0)='/dev/snd/timer\x00', &(0x7f0000000100)='./file0\x00', r2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsopen(&(0x7f0000000140)='pstore\x00', 0x1) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000040)) 00:20:56 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0xe0000000, 0x3, 0x100009}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0xffffffffffffffff, 0x2, 0x1000, 0x3, 0x2}, 0x3, 0x70, 0x9}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0xe0000000, 0x3, 0x100009}}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000100)) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0xffffffffffffffff, 0x2, 0x1000, 0x3, 0x2}, 0x3, 0x70, 0x9}) (async) 00:20:56 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000000)={0x8000, 0x1, 0x5, 0x401, 0x1, [0x8, 0x3, 0xfffffff9, 0x1ff], [0x7f, 0x5, 0x3ff], [0x7, 0x8, 0x5, 0xffffffff], [0x4, 0x4bb8, 0x401, 0x6]}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7, 0x20, 0x3, 0x3}}) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@mpls_getroute={0x44, 0x1a, 0x20, 0x70bd29, 0x25dfdbfc, {0x1c, 0x14, 0x20, 0x6, 0xff, 0x1, 0xff, 0x7, 0x1000}, [@RTA_VIA={0x14, 0x12, {0x2c, "a06c6be5d04b2d4fe386c77ce691"}}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0xfff8, 0x0, 0x1, r3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x20000000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000000)={0x8000, 0x1, 0x5, 0x401, 0x1, [0x8, 0x3, 0xfffffff9, 0x1ff], [0x7f, 0x5, 0x3ff], [0x7, 0x8, 0x5, 0xffffffff], [0x4, 0x4bb8, 0x401, 0x6]}) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7, 0x20, 0x3, 0x3}}) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@mpls_getroute={0x44, 0x1a, 0x20, 0x70bd29, 0x25dfdbfc, {0x1c, 0x14, 0x20, 0x6, 0xff, 0x1, 0xff, 0x7, 0x1000}, [@RTA_VIA={0x14, 0x12, {0x2c, "a06c6be5d04b2d4fe386c77ce691"}}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0xfff8, 0x0, 0x1, r3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x20000000) (async) 00:20:56 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 64) fsmount(r0, 0x0, 0x2) (async, rerun: 64) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (rerun: 32) 00:20:56 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x753201) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000040)={0x1}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x753201) (async) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000040)={0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) 00:20:56 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:56 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000080)={{0x0, 0x0, 0xf85, 0x2}, 0x5, 0x4}) 00:20:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r1, 0xa8704b24f12b13ee, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0xffffffffffffff89}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) 00:20:56 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x4010, 0xffffffffffffffff, 0x10000000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x480000) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0xffff, 0x0, 0x5}, 0x8001, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0xfffffffffffffffe, 0x388, 0x7, 0x4}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:56 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) 00:20:56 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) (async, rerun: 32) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (rerun: 64) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000080)={{0x0, 0x0, 0xf85, 0x2}, 0x5, 0x4}) 00:20:56 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20600, 0x0) 00:20:57 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5000000, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x989680}}, 0x81) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, r3, 0x0, 0x0], &(0x7f0000000280)=[0xea, 0x2, 0x734, 0x101, 0x4], 0xc61, 0x4, 0x7}) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000000c0)='/dev/snd/timer\x00', &(0x7f0000000100)='./file0\x00', r2) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsopen(&(0x7f0000000140)='pstore\x00', 0x1) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000040)) 00:20:57 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x4010, 0xffffffffffffffff, 0x10000000) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x480000) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0xffff, 0x0, 0x5}, 0x8001, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0xfffffffffffffffe, 0x388, 0x7, 0x4}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r1, 0xa8704b24f12b13ee, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0xffffffffffffff89}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) 00:20:57 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:57 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20600, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20600, 0x0) (async) 00:20:57 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000080)={{0x0, 0x0, 0xf85, 0x2}, 0x5, 0x4}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000080)={{0x0, 0x0, 0xf85, 0x2}, 0x5, 0x4}) (async) 00:20:57 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:20:57 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x3, 0x3, 0x5, 0x2, 0x10000}, 0x3, 0x4}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:57 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x4010, 0xffffffffffffffff, 0x10000000) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x480000) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0xffff, 0x0, 0x5}, 0x8001, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0xfffffffffffffffe, 0x388, 0x7, 0x4}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r1, 0xa8704b24f12b13ee, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0xffffffffffffff89}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) 00:20:57 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20600, 0x0) 00:20:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="06000000f7c11948bd4c1dcb6efeb55393e0938c4b2c40850356beefdc5e6e9a54c4f61ec2a02fa2630806f7982fb712c5f2d204a819af329cb437e776dd6decb589", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:57 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5000000, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x989680}}, 0x81) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, r3, 0x0, 0x0], &(0x7f0000000280)=[0xea, 0x2, 0x734, 0x101, 0x4], 0xc61, 0x4, 0x7}) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000000c0)='/dev/snd/timer\x00', &(0x7f0000000100)='./file0\x00', r2) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsopen(&(0x7f0000000140)='pstore\x00', 0x1) (async) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000040)) 00:20:57 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5420) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1}, 0xffffffffffffffdd) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='/dev/snd/timer\x00', &(0x7f00000000c0)='./file0\x00', r3) 00:20:57 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:57 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:20:57 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x3, 0x3, 0x5, 0x2, 0x10000}, 0x3, 0x4}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="06000000f7c11948bd4c1dcb6efeb55393e0938c4b2c40850356beefdc5e6e9a54c4f61ec2a02fa2630806f7982fb712c5f2d204a819af329cb437e776dd6decb589", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="06000000f7c11948bd4c1dcb6efeb55393e0938c4b2c40850356beefdc5e6e9a54c4f61ec2a02fa2630806f7982fb712c5f2d204a819af329cb437e776dd6decb589", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) 00:20:57 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x3, 0x3, 0x5, 0x2, 0x10000}, 0x3, 0x4}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:57 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:20:57 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) 00:20:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="06000000f7c11948bd4c1dcb6efeb55393e0938c4b2c40850356beefdc5e6e9a54c4f61ec2a02fa2630806f7982fb712c5f2d204a819af329cb437e776dd6decb589", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="06000000f7c11948bd4c1dcb6efeb55393e0938c4b2c40850356beefdc5e6e9a54c4f61ec2a02fa2630806f7982fb712c5f2d204a819af329cb437e776dd6decb589", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) 00:20:57 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5420) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1}, 0xffffffffffffffdd) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='/dev/snd/timer\x00', &(0x7f00000000c0)='./file0\x00', r3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r0, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5420) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1}, 0xffffffffffffffdd) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='/dev/snd/timer\x00', &(0x7f00000000c0)='./file0\x00', r3) (async) 00:20:57 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400a40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x7, 0x2, 0x9}, 0x100, 0xfe000000, 'id1\x00', 'timer1\x00', 0x0, 0x2, 0x6, 0x81, 0x9}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) syz_open_dev$midi(&(0x7f0000000200), 0x100000000, 0x40200) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) 00:20:58 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:58 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x24801, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000fd0000faffffffff06000000"], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:58 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 32) fsmount(r0, 0x0, 0x2) (rerun: 32) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 64) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5420) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1}, 0xffffffffffffffdd) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='/dev/snd/timer\x00', &(0x7f00000000c0)='./file0\x00', r3) 00:20:58 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) 00:20:58 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400a40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x7, 0x2, 0x9}, 0x100, 0xfe000000, 'id1\x00', 'timer1\x00', 0x0, 0x2, 0x6, 0x81, 0x9}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) syz_open_dev$midi(&(0x7f0000000200), 0x100000000, 0x40200) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400a40) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x7, 0x2, 0x9}, 0x100, 0xfe000000, 'id1\x00', 'timer1\x00', 0x0, 0x2, 0x6, 0x81, 0x9}) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) syz_open_dev$midi(&(0x7f0000000200), 0x100000000, 0x40200) (async) fsmount(r2, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) (async) 00:20:58 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x7, 0x0, 0x100, r1, 0x775, '\x00', 0x0, r0, 0x3, 0x3, 0x4, 0x9}, 0x48) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000fd0000faffffffff06000000"], 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:58 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400a40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x7, 0x2, 0x9}, 0x100, 0xfe000000, 'id1\x00', 'timer1\x00', 0x0, 0x2, 0x6, 0x81, 0x9}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) syz_open_dev$midi(&(0x7f0000000200), 0x100000000, 0x40200) fsmount(r2, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400a40) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x7, 0x2, 0x9}, 0x100, 0xfe000000, 'id1\x00', 'timer1\x00', 0x0, 0x2, 0x6, 0x81, 0x9}) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) syz_open_dev$midi(&(0x7f0000000200), 0x100000000, 0x40200) (async) fsmount(r2, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) (async) 00:20:58 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x24801, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:20:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) 00:20:58 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async, rerun: 64) r1 = fsmount(0xffffffffffffffff, 0x1, 0x1) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000fd0000faffffffff06000000"], 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:58 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x24801, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x24801, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) 00:20:58 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x7, 0x0, 0x100, r1, 0x775, '\x00', 0x0, r0, 0x3, 0x3, 0x4, 0x9}, 0x48) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) 00:20:58 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x88) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = fsmount(r0, 0x0, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x100, 0x1, 0x5}}) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'ipvlan0\x00'}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:20:58 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x7, 0x0, 0x100, r1, 0x775, '\x00', 0x0, r0, 0x3, 0x3, 0x4, 0x9}, 0x48) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) 00:20:58 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x1, 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = fsmount(r0, 0x0, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x100, 0x1, 0x5}}) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'ipvlan0\x00'}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) fsmount(r0, 0x0, 0x90) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x100, 0x1, 0x5}}) (async) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'ipvlan0\x00'}}) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) 00:20:58 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x88) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x88) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0xffffffffffffffff) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:20:58 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000300)=0x1) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, 0x0, 0x2, {0x2, 0xff, 0x3}, 0xfd}, 0x18, &(0x7f0000000280)={&(0x7f0000000200)="44493148aadf645b330417b8fe7fcff2ba8f7d24e8a08f5c5b9699ed185931b0bc991afac8f9384296b59ec8", 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10010) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000080)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x82001) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000380)={{0x1, 0x2, 0x725, 0x1, 0xd70}, 0x9, 0x2}) 00:20:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 00:20:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:58 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xd0d, 0x8, 0xc10000, 0x0, r0, 0x400, '\x00', 0x0, r1, 0x5, 0x3, 0x4, 0xffffffffffffffff}, 0x48) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r2}, 0x8585551f71aba8e9) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) fsmount(r0, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x0, 0x3, 0x3, 0x0, 0x3}, 0xd589, 0x7, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) 00:20:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 00:20:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) r1 = fsmount(r0, 0x0, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x100, 0x1, 0x5}}) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'ipvlan0\x00'}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:20:58 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 32) fsmount(r1, 0x0, 0x2) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xd0d, 0x8, 0xc10000, 0x0, r0, 0x400, '\x00', 0x0, r1, 0x5, 0x3, 0x4, 0xffffffffffffffff}, 0x48) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r2}, 0x8585551f71aba8e9) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 32) fsmount(r0, 0x0, 0x2) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x0, 0x3, 0x3, 0x0, 0x3}, 0xd589, 0x7, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) 00:20:58 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x88) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x88) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0xffffffffffffffff) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:20:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:58 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000300)=0x1) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, 0x0, 0x2, {0x2, 0xff, 0x3}, 0xfd}, 0x18, &(0x7f0000000280)={&(0x7f0000000200)="44493148aadf645b330417b8fe7fcff2ba8f7d24e8a08f5c5b9699ed185931b0bc991afac8f9384296b59ec8", 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10010) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000080)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x82001) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000380)={{0x1, 0x2, 0x725, 0x1, 0xd70}, 0x9, 0x2}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000300)=0x1) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, 0x0, 0x2, {0x2, 0xff, 0x3}, 0xfd}, 0x18, &(0x7f0000000280)={&(0x7f0000000200)="44493148aadf645b330417b8fe7fcff2ba8f7d24e8a08f5c5b9699ed185931b0bc991afac8f9384296b59ec8", 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10010) (async) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000080)) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x82001) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000380)={{0x1, 0x2, 0x725, 0x1, 0xd70}, 0x9, 0x2}) (async) 00:20:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 00:20:58 executing program 4: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f0000000300)="aa79cf1512ed2c0fffffffffffffff53f4934be18ba35c20cd65f284d4503705d989ba88f02f78cbe698155541c2db061c00cb3a6299d6101b00000000000000000000000000000000000000000000000000d74d3af1511375ba323f4725cea318b986ca1512d375fa449214d6209d124f3d953d027d2e37231f9abe4fd5cb03e67b3b1afc5b67a2bbbafadd2590f984aad1fecd8dc123595878cecd54b7d5b43219855c7d00b5e984076dbb23d2614d51f5eab815492b4ddaba8d6907c7e785950179", &(0x7f0000000040)=""/100, &(0x7f0000000140)="574ecdad69ff149c431f9bc41a26bfc564c7ffbe30291c4c3efbeda0c808bda0967a462ea9631ee4be496305c2f2e73cafce44fa601137ac578a127b395f5088b1aa1cfacae53a3966f28b0258f20cc6a11ee6582f49ddbb1183e16623bf74ed4f929122440e325c234c705d3c0f70707f436e58d097d14cfcf069afa8b3f7ce8d30201cff6b34cd77eacf6a0a24e285f43b42b43b26369f270c61ad8ff7fe7a4260905c8608d5822e8c840644e3732049416b5b551e8942364b238cb64e00139ddfa743482707da0eaa98a3dc546650233b6c2c108039778b40a060be704a0bb2559ae904bd33f10d7389b5bc4b02776f8243", &(0x7f0000000240)="cc7ef427166770a17f86592065d78d73530fc332607f06cf76520c97ffd2", 0x9, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 00:20:58 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 00:20:58 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xd0d, 0x8, 0xc10000, 0x0, r0, 0x400, '\x00', 0x0, r1, 0x5, 0x3, 0x4, 0xffffffffffffffff}, 0x48) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r2}, 0x8585551f71aba8e9) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r0, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x0, 0x3, 0x3, 0x0, 0x3}, 0xd589, 0x7, 0x5}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x541b, 0x0) 00:20:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x44808}, 0x400c044) 00:20:58 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000001, 0x1, 0x0, 0x2, 0x1a, 0x0, "4b62aabb00aa26be2013b4f64f08d7bd1f59a4293b2c2a43afe69c63af33000000000000007fbb19b722af533232c1019ab3c1ebd2bf2e351df8ad9e81169dfa", "02923ac3fc7bf9c52f74a2a55ec5bc479b6516a58eef6168d705007dd1b6220b67a096936371b44163daf6c422e02c65dfa0ed4d28d4ab2fcd1cb81eeaa2eb79", "a6ca58e0dceb17e300f7221bc03fe905514b9430a6636381d6bb169565d91c23", [0x3, 0x5]}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x3, 0x3, 0x9f08, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:58 executing program 4: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f0000000300)="aa79cf1512ed2c0fffffffffffffff53f4934be18ba35c20cd65f284d4503705d989ba88f02f78cbe698155541c2db061c00cb3a6299d6101b00000000000000000000000000000000000000000000000000d74d3af1511375ba323f4725cea318b986ca1512d375fa449214d6209d124f3d953d027d2e37231f9abe4fd5cb03e67b3b1afc5b67a2bbbafadd2590f984aad1fecd8dc123595878cecd54b7d5b43219855c7d00b5e984076dbb23d2614d51f5eab815492b4ddaba8d6907c7e785950179", &(0x7f0000000040)=""/100, &(0x7f0000000140)="574ecdad69ff149c431f9bc41a26bfc564c7ffbe30291c4c3efbeda0c808bda0967a462ea9631ee4be496305c2f2e73cafce44fa601137ac578a127b395f5088b1aa1cfacae53a3966f28b0258f20cc6a11ee6582f49ddbb1183e16623bf74ed4f929122440e325c234c705d3c0f70707f436e58d097d14cfcf069afa8b3f7ce8d30201cff6b34cd77eacf6a0a24e285f43b42b43b26369f270c61ad8ff7fe7a4260905c8608d5822e8c840644e3732049416b5b551e8942364b238cb64e00139ddfa743482707da0eaa98a3dc546650233b6c2c108039778b40a060be704a0bb2559ae904bd33f10d7389b5bc4b02776f8243", &(0x7f0000000240)="cc7ef427166770a17f86592065d78d73530fc332607f06cf76520c97ffd2", 0x9, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 00:20:58 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 00:20:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x44808}, 0x400c044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x44808}, 0x400c044) (async) 00:20:58 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000300)=0x1) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, 0x0, 0x2, {0x2, 0xff, 0x3}, 0xfd}, 0x18, &(0x7f0000000280)={&(0x7f0000000200)="44493148aadf645b330417b8fe7fcff2ba8f7d24e8a08f5c5b9699ed185931b0bc991afac8f9384296b59ec8", 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10010) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000080)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x82001) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000380)={{0x1, 0x2, 0x725, 0x1, 0xd70}, 0x9, 0x2}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000300)=0x1) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, 0x0, 0x2, {0x2, 0xff, 0x3}, 0xfd}, 0x18, &(0x7f0000000280)={&(0x7f0000000200)="44493148aadf645b330417b8fe7fcff2ba8f7d24e8a08f5c5b9699ed185931b0bc991afac8f9384296b59ec8", 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10010) (async) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000080)) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x82001) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000380)={{0x1, 0x2, 0x725, 0x1, 0xd70}, 0x9, 0x2}) (async) 00:20:58 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x145100, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:58 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000001, 0x1, 0x0, 0x2, 0x1a, 0x0, "4b62aabb00aa26be2013b4f64f08d7bd1f59a4293b2c2a43afe69c63af33000000000000007fbb19b722af533232c1019ab3c1ebd2bf2e351df8ad9e81169dfa", "02923ac3fc7bf9c52f74a2a55ec5bc479b6516a58eef6168d705007dd1b6220b67a096936371b44163daf6c422e02c65dfa0ed4d28d4ab2fcd1cb81eeaa2eb79", "a6ca58e0dceb17e300f7221bc03fe905514b9430a6636381d6bb169565d91c23", [0x3, 0x5]}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x3, 0x3, 0x9f08, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:58 executing program 4: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f0000000300)="aa79cf1512ed2c0fffffffffffffff53f4934be18ba35c20cd65f284d4503705d989ba88f02f78cbe698155541c2db061c00cb3a6299d6101b00000000000000000000000000000000000000000000000000d74d3af1511375ba323f4725cea318b986ca1512d375fa449214d6209d124f3d953d027d2e37231f9abe4fd5cb03e67b3b1afc5b67a2bbbafadd2590f984aad1fecd8dc123595878cecd54b7d5b43219855c7d00b5e984076dbb23d2614d51f5eab815492b4ddaba8d6907c7e785950179", &(0x7f0000000040)=""/100, &(0x7f0000000140)="574ecdad69ff149c431f9bc41a26bfc564c7ffbe30291c4c3efbeda0c808bda0967a462ea9631ee4be496305c2f2e73cafce44fa601137ac578a127b395f5088b1aa1cfacae53a3966f28b0258f20cc6a11ee6582f49ddbb1183e16623bf74ed4f929122440e325c234c705d3c0f70707f436e58d097d14cfcf069afa8b3f7ce8d30201cff6b34cd77eacf6a0a24e285f43b42b43b26369f270c61ad8ff7fe7a4260905c8608d5822e8c840644e3732049416b5b551e8942364b238cb64e00139ddfa743482707da0eaa98a3dc546650233b6c2c108039778b40a060be704a0bb2559ae904bd33f10d7389b5bc4b02776f8243", &(0x7f0000000240)="cc7ef427166770a17f86592065d78d73530fc332607f06cf76520c97ffd2", 0x9, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f0000000300)="aa79cf1512ed2c0fffffffffffffff53f4934be18ba35c20cd65f284d4503705d989ba88f02f78cbe698155541c2db061c00cb3a6299d6101b00000000000000000000000000000000000000000000000000d74d3af1511375ba323f4725cea318b986ca1512d375fa449214d6209d124f3d953d027d2e37231f9abe4fd5cb03e67b3b1afc5b67a2bbbafadd2590f984aad1fecd8dc123595878cecd54b7d5b43219855c7d00b5e984076dbb23d2614d51f5eab815492b4ddaba8d6907c7e785950179", &(0x7f0000000040)=""/100, &(0x7f0000000140)="574ecdad69ff149c431f9bc41a26bfc564c7ffbe30291c4c3efbeda0c808bda0967a462ea9631ee4be496305c2f2e73cafce44fa601137ac578a127b395f5088b1aa1cfacae53a3966f28b0258f20cc6a11ee6582f49ddbb1183e16623bf74ed4f929122440e325c234c705d3c0f70707f436e58d097d14cfcf069afa8b3f7ce8d30201cff6b34cd77eacf6a0a24e285f43b42b43b26369f270c61ad8ff7fe7a4260905c8608d5822e8c840644e3732049416b5b551e8942364b238cb64e00139ddfa743482707da0eaa98a3dc546650233b6c2c108039778b40a060be704a0bb2559ae904bd33f10d7389b5bc4b02776f8243", &(0x7f0000000240)="cc7ef427166770a17f86592065d78d73530fc332607f06cf76520c97ffd2", 0x9, 0xffffffffffffffff, 0x4}, 0x38) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) (async) 00:20:58 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 00:20:58 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x145100, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:20:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x44808}, 0x400c044) 00:20:58 executing program 1: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000001, 0x1, 0x0, 0x2, 0x1a, 0x0, "4b62aabb00aa26be2013b4f64f08d7bd1f59a4293b2c2a43afe69c63af33000000000000007fbb19b722af533232c1019ab3c1ebd2bf2e351df8ad9e81169dfa", "02923ac3fc7bf9c52f74a2a55ec5bc479b6516a58eef6168d705007dd1b6220b67a096936371b44163daf6c422e02c65dfa0ed4d28d4ab2fcd1cb81eeaa2eb79", "a6ca58e0dceb17e300f7221bc03fe905514b9430a6636381d6bb169565d91c23", [0x3, 0x5]}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x3, 0x3, 0x9f08, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:20:58 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000001080)=0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x48882) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000080)=""/4096) 00:20:58 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000100)={@none, 0x33, 0x3, 0x6, 0x9, 0x4, "2dbd10ad1d5900558ab18076cb7ebf3cacc0ebcd9072bbdd54b47c9c860129770345116e29f5cdfd432342559f3f081fc2cbe7f9a8e186a3794b69da25c1377fb2b7f0a0265bf16b400c7cf8aea2a43f1044df8b86468f0bd73438da6f25a569f8b0831105efae67ba82234b8f0039fa884cdf53da9b9cf4c282186eba139a50"}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x4001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1, 0x9, 0x3, 0xbfe}}) syz_open_dev$amidi(&(0x7f0000000000), 0xe, 0x62000) syz_open_dev$amidi(&(0x7f0000000040), 0x3, 0x200) 00:20:58 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x145100, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x145100, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) 00:20:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 00:20:58 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async, rerun: 64) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) (rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000001080)=0x4) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x48882) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000080)=""/4096) 00:20:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x102800, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x1, 0x3, 0x0, 0x1, 0x1}, 0x6, 0x7, 0x3}) ioctl$CAPI_INSTALLED(r1, 0x80024322) 00:20:58 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:20:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000100)={@none, 0x33, 0x3, 0x6, 0x9, 0x4, "2dbd10ad1d5900558ab18076cb7ebf3cacc0ebcd9072bbdd54b47c9c860129770345116e29f5cdfd432342559f3f081fc2cbe7f9a8e186a3794b69da25c1377fb2b7f0a0265bf16b400c7cf8aea2a43f1044df8b86468f0bd73438da6f25a569f8b0831105efae67ba82234b8f0039fa884cdf53da9b9cf4c282186eba139a50"}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x4001) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1, 0x9, 0x3, 0xbfe}}) (async) syz_open_dev$amidi(&(0x7f0000000000), 0xe, 0x62000) syz_open_dev$amidi(&(0x7f0000000040), 0x3, 0x200) 00:20:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) 00:20:58 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:58 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000001080)=0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x48882) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000080)=""/4096) 00:20:58 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x6, 0x5b, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x1f, 0xa0, 0x4f, [{{0x9, 0x4, 0x0, 0x3f, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0xfffc, 0xf9}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1f}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x0, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x40, 0x1}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xa8, 0x1, 0x9, 0x20, 0x1}, 0x56, &(0x7f0000000140)={0x5, 0xf, 0x56, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1f, "9c12e39a610cfdfd8b5850e3804b0eee"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d274fb319e77072f5285d59d65a3442b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x20, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x56, "7f69533e9854fc428c21368a9b559eaa"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xdc, 0x40, 0x9, 0x3}]}, 0x3, [{0x4e, &(0x7f00000001c0)=@string={0x4e, 0x3, "5a7f9285510e8bdc3b10cbb8c3aab241cf1ab572ca49739da8e0d3e4ed8ee2bdfe492a50a98f00ba7eba2b2c84033f3b167f2691c9b90e2be836380de5809bf4464297b6ea579f0f90ce2876"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_ep_write(r0, 0x95, 0x1a, &(0x7f0000000340)="e9536e4e3df84a6f1ff7a6ce9e9fb3cd42f43ec2fb83ee411763") r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000380), 0x2200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r2}) socket$nl_route(0x10, 0x3, 0x0) 00:20:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x102800, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x1, 0x3, 0x0, 0x1, 0x1}, 0x6, 0x7, 0x3}) ioctl$CAPI_INSTALLED(r1, 0x80024322) 00:20:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) 00:20:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000100)={@none, 0x33, 0x3, 0x6, 0x9, 0x4, "2dbd10ad1d5900558ab18076cb7ebf3cacc0ebcd9072bbdd54b47c9c860129770345116e29f5cdfd432342559f3f081fc2cbe7f9a8e186a3794b69da25c1377fb2b7f0a0265bf16b400c7cf8aea2a43f1044df8b86468f0bd73438da6f25a569f8b0831105efae67ba82234b8f0039fa884cdf53da9b9cf4c282186eba139a50"}) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x4001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1, 0x9, 0x3, 0xbfe}}) (async) syz_open_dev$amidi(&(0x7f0000000000), 0xe, 0x62000) syz_open_dev$amidi(&(0x7f0000000040), 0x3, 0x200) 00:20:58 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x20202) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc02864ca, &(0x7f0000000240)={&(0x7f0000000140)=[r2], &(0x7f0000000200)=[0x8, 0x3, 0x1, 0x6e749ceb, 0x9, 0x5, 0xffffffffffffffff, 0x0], 0x0, 0x1, 0x7}) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/169) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x102800, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x1, 0x3, 0x0, 0x1, 0x1}, 0x6, 0x7, 0x3}) (async) ioctl$CAPI_INSTALLED(r1, 0x80024322) 00:20:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x30041) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x40, 0x800, 0x81, 0x83, 0x401, 0x100], 0x6, 0x2, 0x3, 0xd7, 0x0, 0x5, 0x7, {0x80, 0x0, 0x9, 0x3, 0x5, 0x0, 0x3, 0x80, 0x8, 0x280, 0x2, 0x3, 0xfe, 0x0, "096e83f064503f899106b2d29b47d942ca0cefe5c8429d3ca6d8c2da82d6e50a"}}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000100)={0x2, 0x95}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xf2a}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) 00:20:58 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async, rerun: 64) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) (rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0}) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x20202) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc02864ca, &(0x7f0000000240)={&(0x7f0000000140)=[r2], &(0x7f0000000200)=[0x8, 0x3, 0x1, 0x6e749ceb, 0x9, 0x5, 0xffffffffffffffff, 0x0], 0x0, 0x1, 0x7}) fsmount(r1, 0x0, 0x2) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/169) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0xfffffffd}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="f24c37", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) 00:20:58 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x82480, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x7, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x8840) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb, 0x10, r2, 0x10000000) r4 = fsmount(0xffffffffffffffff, 0x1, 0x72) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r4, &(0x7f0000000480)={0x88540, 0x24}, &(0x7f00000004c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x741f) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000003200)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000031c0)={&(0x7f0000003240)=ANY=[@ANYBLOB="fc2b0000640020002dbd7000ffdbb765277dc4459656df2500000000ac526e5c244c9de81a8de4", @ANYRES32=r6, @ANYBLOB="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"], 0x2bfc}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000080)) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5422) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000340)={{0x1, 0x5, 0x0, 0x7, 'syz0\x00', 0x3}, 0x6, 0x20000000, 0x5, 0x0, 0x4, 0x8, 'syz0\x00', &(0x7f0000000300)=['/dev/ubi_ctrl\x00', '/dev/ubi_ctrl\x00', '/dev/snd/timer\x00', '+\x00'], 0x2d, '\x00', [0x6f, 0x431c, 0x0, 0x9]}) 00:20:58 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) r1 = fsmount(r0, 0x0, 0x2) r2 = fsmount(r1, 0x0, 0x7e) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x5420) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) r6 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r6}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000001c0)) fsmount(r6, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="eb96ece621e1b06f18490000000000e84e5e3493799e7949feb22cd8b457811a63fcfa5ef8a2cdbfce2fc0a4058e78777cf388b31c184d16620bd97b3adfaf6f892976a96c5a00d71033280927c7f099aff0f5ae4f9f6973921e4e630f33c5be71e361b283a86733843b4a7d5274d9d34fc1d671ef32778313ce362c0e21495c737d2b78bfe1ce001996b510b315a2f5fc2893e6e578f2e4d5d7a939a0bf00"/168], &(0x7f0000000080)='syzkaller\x00', 0xfffffbff, 0x69, &(0x7f00000000c0)=""/105, 0x40f00, 0x2, '\x00', 0x0, 0x12, r5, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x0, 0x20}, 0x10, 0x0, r6, 0x0, &(0x7f0000000240)=[0x1, r2, r0]}, 0x80) 00:20:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0xfffffffd}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="f24c37", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) 00:20:59 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x6, 0x5b, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x1f, 0xa0, 0x4f, [{{0x9, 0x4, 0x0, 0x3f, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0xfffc, 0xf9}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1f}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x0, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x40, 0x1}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xa8, 0x1, 0x9, 0x20, 0x1}, 0x56, &(0x7f0000000140)={0x5, 0xf, 0x56, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1f, "9c12e39a610cfdfd8b5850e3804b0eee"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d274fb319e77072f5285d59d65a3442b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x20, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x56, "7f69533e9854fc428c21368a9b559eaa"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xdc, 0x40, 0x9, 0x3}]}, 0x3, [{0x4e, &(0x7f00000001c0)=@string={0x4e, 0x3, "5a7f9285510e8bdc3b10cbb8c3aab241cf1ab572ca49739da8e0d3e4ed8ee2bdfe492a50a98f00ba7eba2b2c84033f3b167f2691c9b90e2be836380de5809bf4464297b6ea579f0f90ce2876"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_ep_write(r0, 0x95, 0x1a, &(0x7f0000000340)="e9536e4e3df84a6f1ff7a6ce9e9fb3cd42f43ec2fb83ee411763") r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000380), 0x2200, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r2}) (async) socket$nl_route(0x10, 0x3, 0x0) 00:20:59 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) r1 = fsmount(r0, 0x0, 0x2) r2 = fsmount(r1, 0x0, 0x7e) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x5420) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r5, 0x0, 0x2) r6 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r6}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000001c0)) fsmount(r6, 0x0, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="eb96ece621e1b06f18490000000000e84e5e3493799e7949feb22cd8b457811a63fcfa5ef8a2cdbfce2fc0a4058e78777cf388b31c184d16620bd97b3adfaf6f892976a96c5a00d71033280927c7f099aff0f5ae4f9f6973921e4e630f33c5be71e361b283a86733843b4a7d5274d9d34fc1d671ef32778313ce362c0e21495c737d2b78bfe1ce001996b510b315a2f5fc2893e6e578f2e4d5d7a939a0bf00"/168], &(0x7f0000000080)='syzkaller\x00', 0xfffffbff, 0x69, &(0x7f00000000c0)=""/105, 0x40f00, 0x2, '\x00', 0x0, 0x12, r5, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x0, 0x20}, 0x10, 0x0, r6, 0x0, &(0x7f0000000240)=[0x1, r2, r0]}, 0x80) 00:20:59 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x20202) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc02864ca, &(0x7f0000000240)={&(0x7f0000000140)=[r2], &(0x7f0000000200)=[0x8, 0x3, 0x1, 0x6e749ceb, 0x9, 0x5, 0xffffffffffffffff, 0x0], 0x0, 0x1, 0x7}) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/169) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:59 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x82480, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x7, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x8840) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb, 0x10, r2, 0x10000000) r4 = fsmount(0xffffffffffffffff, 0x1, 0x72) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r4, &(0x7f0000000480)={0x88540, 0x24}, &(0x7f00000004c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x741f) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000003200)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000031c0)={&(0x7f0000003240)=ANY=[@ANYBLOB="fc2b0000640020002dbd7000ffdbb765277dc4459656df2500000000ac526e5c244c9de81a8de4", @ANYRES32=r6, @ANYBLOB="07000b000b000300ffffa86906000500017f000006000500810000000d0001006d61746368616c6c00000000b82b0200080001000800e6ff942b0200902b08000a00010070656469740000003c2b0280680e0200ff070000e90000000500000072fb0000018000000104000012b100000200000009000000ff00000010460000aa00000000000080a10d0000090000000300000002000000bb02000003000000080000000400000000feff0103000000f9ffffff04000000080000000001000001000000050000000000008001000000e100000000000000ffffff7f2e00000021ec000000000000570e00000200000000000000a700000001000000000000017f0000000400000005000000f7ffffff080000000500000007000000020000000800000038000000080000000000000080000000ff0f00000400000001000000070000000080000008000000ffff000009000000810000000800000000000000ffffffff7f000000ff030000d000000016000000000000000600000054050000070000003f0000004a000000090000000001000007000000cd020000018000000200000000feffff0600000009000000060000000104000008000000090000004a7f000005000000050000000700000020000000070000000100000020000000040000000100008004000000040000000800000080000000080000007f000000800000000900000000020000fc9900001c000000030000000002000005000000070000000100000001010000020000007400000000feffff4d000000000000000400000004000000050000004a7d00000004000001ffffff0000000006000000040000008650000000000000040000000180000009000000ffff0000200000001f000000020000002000000006000000fffbffff010000000002000000000080ffff000004000000ffffffff0300000007000000ffff000008000000c8000000a3ffffffe80f0000000000000200000002000000cc0f00000700000006000000ffff0000070000000300000007000000242e00003f000000000000ff00000000008000000100010008000000010000000900000004000000050000001306000003f800006cb9000005000000a008000007000000070000000000010096ad0000030000000500000028000000b9ae000008000000060000000001000006000000010000800000010000800000070000000600000000040000080000002d0b000009000000080000000900000020000000030000000500000006000000d8d000000300000003000000ff7f000000010000ff0f00000500000005000000110000007e7a00003f000000f936000001000080000000000600000005000000000000000000008005000000080000000900000006000000000000000000010001040000dfbc00000000008005000000080000000e080000ffffffffffffffff1f0500000400000007000000c601000005000000800000000900000003000000bb000000050000000000000000080000020000000200000089000000080000001c060000a7c3000088b700000000008005000000030000000000999d060000000000010081000000ff07000002000000bd0e0000e99d000009000000ffffff7f03000000090000000500000001000000020000000000000005000000940000000000000006000000060000000600000000000300f20000000900000003000000200000000700000000000000d7010000ff0f00009a9a00007f00000015e0000004000000070000001f00000000000080ffffff7f01000080feffffff00000000a50f00000700000002000000000000000700000062000000040000000900000001040000ef0e000004000000c83a000005000000050000000000300002000000000001000300000000020000840000000200000007000000a10e0000bd0d0000f7ffffff01040000bd0a0000935c00000800000086010000018000000600000009000000ff000000000000000002000008000000000040004c00000000010000050000000300000000000100ff7f0000010000000400000000000090ff0300000500000007000000cbffffff5e3b000009000000000000003f0000000800000082000000010400000500000006000000060000000080000003000000030000000700000000000000030000000000010007000000040000003ad4000000020000a3bf691f0300000005000000010000001314000002000000080000000600000001000000ff0f00000000000001000000feffffff01000000050000000700000018ffffff03000000080000000100000004000000030000000800000001c70000ffff00000900000009000000ef0000000000000092000000050000000000008040000000fea4000001000000010000008f000000080000000700000000080000030000000100000006000000000000000100000008000000000000000900000006000000020000000500000002000000080000000900000009000000c0000000040000000000000002000000030000000001000005000000060000000000000007000000ab0000009887000049070000000400000400000000020000000000000180000005000000ffff000062920000040000000200000000000000070000000180000000800000070000000500000004000000bb0d0000090000004f0000000180000008000000d86600008100000001000000050000009f9800000000000c030000003e830000010000000600000000000000ff030000060000007f000000f000000002000000d877ffff0400000000080000720000000900000001800000080000000100000009000000070000004d0000000400000009000000000000000700000000000000010100000500000000000000ffffffffffffff7f080d0000333d00000900000009000000810000000001000000000000070000007f000000ff0000000000000000000200ff07000005000000ffffffff02000000400000000101000008000000b795000079ff000009000000ff0f0000ff0f0000050000000001000000800000010000000700000005000000060000000300000001000100010000000000000001000000a100000004000000090000000900000009000000070000000300000001000000090000000400000000000000ff7f000000000028000000003b0a0000f7ffffff06000000f8ffffff3f00000005000000020000000500000006000000010000000080000000a0a600f9ffffff0200000009000000020000000400000003000000000000000104000006000000020000000900000009000000fbffffffff00000001000000020000000008000008000000000200007f000000940f000001000080e94900000100010001000000e100000080000000c800000002000000b600000004000000060000007d00000007000000a4040000ff070000010000007f00000001800000b3030000060000000180000000f8ffff02000000aaffffff0c00000000800000030000004000000001000000000000000800000008000000040000000300000000c0010005000000080000000700000006000000d500000004000000fe000000ec06ffff0000000008000000051c000001000080ffff00000100000007000000f5a70000200000000100010009000000e60a00005b08000000000080000001000200000002000000970f000000000080f9ffffff04000000ff030000010100000100000002000000950900002000000001000080ffffffff030000000000000009000000050000000100000002000000f7ffffff0900000000000000090000000000000008000000000000008b37ffff000008000100000026000000ffffffff03000000720c00000400000092000000840500000800000003000000010000000101000002000000080000002000000006000000050000000100000004000000f7ffffff02000000000200000700000000000000320000005d2500002e030000070000000000000003000000ffffff7f010000000400000000000000af00000004000000a011000003000000020000000500000006000000ff030000000000000400000000100000010000000500000006000000000400007f000000ff0700008c0a0000060000000700000001000000de0000000200000006000000080000000100000072d40000ff070000010000000000000000008001020000000400000007000000fffffffff4e175ee070000000000000000040000030000000100000017060000ff0700000300000000000000010000000000ffff790b00000000000069010000faffffff000001000000000000020000000000000700000007000000ff0000000600000006000000ffffff7f440100007f000000f90d312e0e2300007ffffffffbffffffff01000007000000ffffffff00000000feffffff08000000060000000900000003000000070000001f0000000001000001000100000000000000000007000000000001000100000000000000040001000200000003000100040000000400010004000100000000000100000001000000a8940000000000000500000005000000010000000500000001000000010001000000000000000000010001000200010003000100050001000100000002000100030000000100010005000000040076f5010001000500010001000100040000000000e01e03000000030001000500000004000000040000000300000004000000050001000000010002000100010000000200010004000100000000000500000002000000030001000200010000000100040001000500000003000100000001000200000004000100020001000100000001000100030001000500010004000100040000000200000004000000079e0100040001000600010003000100050000000000010003000100010001000400000001000000050001000200000003000000020000000400000005000100070001000400000005000000020000000100000001000000000000000200000002000000000000000000000001000100050001000400010005000100020001000200010003000000010000000500010005000000010001000100000004000100000000000000010003000100000001000000010004000000000001000400000001004fca040000000000000002000100050001000300000004000100000000000100000001000000500e04001f000000660b0000ffffffff03000000ff00000003e10000000000000b00000007000000ff0f0000ff03000005000000080000000000000008000000ff070000f8ffffff01000000ffffffff000000000900000004000000050000000900000005000000030000000100000005000000ff7f0000feffffff020000000200000002000000c8cd0000ff010000800000000700000006090000ea0000000200000001000000200000000400000009000000010000000600000002000000020000004000000008000000090000000900000002000000e57f00007f000000010100000100000007000000010000000300000003000000008000003e00000007000000030e0000080000000700000004000000070000001f0000000400000001040000860c0000ffff000004000000ff000000ff03000007000000001000007f0000003f000000070000000600000008000000ff01000001800000ff0f0000faffffff00800000030000000200000007000000401a00000000000003000000084d1a63030000000200000001000080010000800400000006000000ffff00000200000009000000c30000000000000001040000e38c0000cd000000ffffff7f01800000000000000600000007000000010000000800000001000000000000000100000000040000ae90000003000000110000000500000004000000260000000004000006000000070000007108000007000000001000000400000006000000000000007f00000007000000010000000900000002000000060000000180000000000100ffffff7f060000000800000001000000faea000006000000010000000100000001000000000200000600000006000000000001000900000004000000ff0f00007a01000004000000b2cd00002000000009000000572d000003000000000000809600000009000000040000000004000006000000050000005700000003000000800000000100000003000000690f00005f03000002000000fffffffffa04000000000000feffffff010001000100000009000000fbffffff9c0000000010000007000000db28000009000000000400000100000005000000070000000800000002000000000000000600000004000000fbffffffef0a0000080000000300000005000000d6000000bc0000000bfc6c6e0200000009000000070000000010000001040000695d000005000000aa0a000006000000060000006500000005000000040000002867000081000000010000000700000005000000000000000200000097da000008000000010000005dda000007000000ff0f000003000000030000000600000005000000fdffffff0200000000000100096f000001000000040000000900000002000000fcffffff7f00000050280000040000002000000004000000000000000104000008000000040000001f000000080000000700000001000000c1ffffff01000000d00f0000ac0b0000ffffffffffffffff01000000020000000080ffff01010000018000000900000009000000000000f0040000000900000005000000000000009509000009000000040000000400000000000080090800000100000009000000fc0000001f000000f10900000700000091510000000000000200000007000000ffffffff05000000ff00000003000000018000000200000000020000df000000020000000700000005000000d424173804000000010001000000000001040000ff0f000008000000fbffffff00000000060000000200000000080000400000000700000007000000010000006ed90000001000000400000081000000040000000700000040000000090000000101000001000000ffffffff04000000f2a200000100000008000000ffffffff000000004a000000030000000400000002000000800000000400000001feffff13000000c7000000ff0f0000400000000100010000000100fbffffff5af20000ff0f000000040000000000000500000000100000fffffffff7ffffff0100010001000000000200001f0000000700000000040000080000000600000005000000f9000000040000001f0000000200000001000000c900000008000000050000000500000000f0ff070000008000020000ffff000005000000ffffff7fff000000040000003f000000080000001f0000000100000009000000ffffffff0900000002000000ffffff7f050000000600000006000000070000000c0b0000030000000000000005000000dcad0000080000000100010003000000d60000000200000000000000080000000100000000000100ff01000009000000060000000004000001000000090000000100000006000000ff7f0000050000007f000000020000007603000009000000030000000600000001000000ff0100000300000001000000399b7304020000007f000000c90f0000cd20f777ffffffff010001000200000008000000b2da000047ce0000010000003ce2ffffffffff7f0000000000010000ff01000008000000147400000700000008000000ffffff7f01800000010400008a0c00000300000005000000050000000900000006000000040000000300000001f8ffff43fffffffdffffff000000c0d4000000ff01000002000000d8000000018000000900000009000000040000000900000009000000020000000500000020000000000000000900000009000000e707000001000000fffffffffeffffff08000000feffffff0600000005000000ff0700000900000004000000010000800600000006000000830c00000ff0ffff8000000005000000ff07000009000000e2000000ff0f0000030000000700000009000000234d000001000080000000000000000002000000cd0d0000180000000100008000000080050000000700000003000000fffeffff090000000a0a000004000000e2150000ab27000009000000000000007f000000ff0f00000700000008000000810000005877000007000000070000000600000009000000ff7f000009000000060000007b2e161f040000004b410000010001001ac2e425000000000008000008000000010000000000000002000000030000000900000000010000080000000000000008000000010001000800000000080000030000000902000000000000ffffffff07000000574e000005000000ff01000005000000040000000700000071000000780a0000a40d000000000000ee0000004000000004000000cdcd000003000000800000000800000006000000f989000009000000c46d0000060000000004000003000000c6090000040000000300000000080000020000000700000000000000ffffff7f06000000010100000700000000000000783500000900000020000000fb00000007000000b7050000030e00000004000080000000020000000500000000020000020000000200000027c100000200000009000000000000000001000000000000140000000200000000080000bdb40000010000000500000007000000da0000002000000004000000ff00000000010000020000000104000002000000ffff000000020000030000000100000000feffffe0ffffff0000000001000000853000000200000001000000ff0f000001000000090000003d06000003000000ff010000020000000800000085fb0000040000000900000002000000070000000600000001800000ff010000040000000200000029ffffff00000000dd00000000000200a7000000470000000400000005000000f60b000002000000fb0000000004000039890000ff01000004000000ff0f0000ff0300000300000004000000090000000800000009000000ffff00000604000005000000010001000100000000000000ffffffff080000000500000009000000070000002100000008000000001000000100000005000000fcffffff050000003a0000000080000014c000000300000000080000ccc1000005000000018000000180000009000000810000000300000004000000060000007f0200000300000005000000ff01000007000000030000000400000000800000770300000000000000000000fdffffff0200000000000000080000000600000006000000ff03000001000000680000000200000001000000020000000000000081000000faffffff05000000010400001308000002000000134f0000ff7f0000ff0300003cc50000030000007e00000009000000040000000800000002000000ff7f00000300000002000000000000003f0000002900000000020000020000000900000000100000fbffffffff7f000001000000e9b00000030000000800000004000000dc00000004000000fbffffff00000000050000000300000001000100010000000300010004000000010000000400000000000100050000000200010000000000020001000400000002000000010000000000010003000100030000000400010001000000010001000200010000000100000001000500000002000100010000000000000001000100020001000500000004000000030001000400000005000100010001000100010005000100040000000500000002000000010001000000010001000100020001000200010001000100040001000200010002000000020001000100000005000000050001000200010005000000781d010003000000020000000000000005000000030001000300010004000100030000000000010000000100030001000300010004000100030001000300010001000100020001000700000004000100040001000400000001000000020000000300010003000000030000000300000005000100010000000100010000000100040001000500000004000100040000000400000005000100050000000100000003000100020000000200000002000100010000000200010005000000000000000000010003000000000001000000000002000100010001000400010001000100040001000300000000000000020000000400010001000000000000000100000005000000040000000100000004000000000001000400000001000000800e02000500000009000000000000000100000083e700000206000008000000070000000101000032af0000f9ffffff0100008009000000ff010000080000000700000000000000040000002f000000000000000500000007000000ff00000000080000b40f0000080000000c00000000020000040000000b000000008000000800000000000000ff7f0000f8ffffff090000000500000007000000001000000700000006000000090000000010000009000000d30e0000b06000000600000005000000df30000005000000690000003e3d3b36ff070000000000000700000009000000000800000900000043df00002c39000000800000d9b10000bd0100000008000001000000040000007728ffffef0000008100000002000000e66f000009000000fbffffff000410002000000020000000060000000900000000000080750d00000300000000000000080000009acb0000faffffff0000000000000050200000000900000007000000090000002000000007000000ff0300000008000001000000070000000700000001000000070000000700000002000000feffffff050000000800000002000000c3540000900b0000537c1e2f0002000008000000ffffff7f0800000005000000ff0f0000050000006d24000006000000ff070000090000000900000041cf00000104000006000000f9ffffffffff000004000000ff0f000001000000080000000300000038000000820000002e0000000600000002000000fe070000000000000700000004000000cf0700000800000000100000010000000500000057ffffff06000000030000000002000001ffffff9b000000010400000400000005000000060c000000800000f00c0000240a000002000000090000009000000008000000800000007f00000001010000cfcb0000f201000004000000050000000100000003000000090000000000008004000000faffffff0300000006000000000400000100000002000000018000000300000007000000ff7f00000700000000feffffea00000004000000ffffff7f3f000000f00c00005500000001000000030000000200000006000000cf02000002000000cc0400008000000007000000ff7f0000bd08000008000000e30c0000080000000300000000000000010000000200000080000000050000000fe0000000100000ce0d000001000000ff0f0000010000001f000000010000000500000001000000ffffffff01000000ff00000004000000060000000800000007000000440000000900000000000000cc590000000000007fffffff00000100000000000300000008000000860c0000f9ffffff030000000000000000000100ffffff7f0200000040000000000800000100000008000000ff0300004000000000000080fbffffff7c01000000000000ff070000eb040000fbffffffff07000005000000000100007f000000030000003f0000000600000009000000ff7f00000000000029d3fb77a1010000ffffffff0101000009000000ff030000010000804000000008000000ff0100000200000075e8fffffcffffff090000000100000002000000e5000000040000000400000000000000000000000100008000010000090000000000ffff81000000000000007e000000040000000600000009000000800000000800000009000000020100000500000009000000070000000000000006000000b90000000900000005000000090000006398000008000000ffff0000000000000300000001000000080000000600000005000000ff01000001010000000000000000000001000000c8000000010000000f00000001000000760900000200000020000000ffffff7fa10b0000e900000000040000018000000500000020000000090000000004000081000000ff7f00000200000008000000810000000000000002000000070000001400000000000000400000000000000004000000993af71b98000000fbffffff040000000600000000000000000000000101000069ffffff0200000040000000000000003009000046ef000001000000070000007f070000ffffffff0000000002000000400000002000000076b600009508000088000000ff0f000009000000090000000300000000080000018000000400000003000000b71900000700000000100000020000000900000008000000ff0100000200000000000000000000008000000000000000000000000008000000000000ffff0000be0800000600000003000000040000006e0b0000ff030000010000000600000071450000ff00000002000000040000009300000002000000030000000500000005000000ab000000ff030000050000000080000002000000f8ffffffbc08000009000000ff0700000200000000000000030000000300000002000000050000000010000000080000060000000700000000020000060000000700000000040000005000000700000002000000000020005f0c000000f8ff070300000076940000070000000001000000100000090000000002000000000000e101000000000080050000000000000001000000001000000000000001000080ffffff7f080000000900000001000000ff00000000100000ff00000008000000060000008b0e0000090000001f00000000010000fcffffff43ad291b08000000ffffffff070000000800000008000000c386000007000000ff0300000800000001000000010000000100000001000000080000000100000000000000f7ffffff09000000060000000900000000080000060000000800000000020000ff000000ff7fffff00000000a3040000d50e000004000000920f0000ff03000003000000030000000500000081000000ac74000006000000ffffffff050000000004000007000000ffff000068000000080000004000000000000000040000000500000008000000050000000300000003000000730b0000ff030000040000000200000040000000040000000101000004000000ff7f000001000000030000000900000003000000ff03000000000000030000000700000076090000a34f00000080000001feffffd9090000faffffff0300000008000000000001001c00000007000000ffff0000070000001f00000000feffff0000000027000000057c0000ff0000000100000000000000000000001f00000001040000ff7f00009305000000000080090000000900000007000000a000000008000000060000000500000000000080060000000080000000010000bf51000008000000ab2500000200000000000000f9ffffffb13b000000000000ffffff7fc2fa00008617565800010000ff0f00007f000000090000000500000005000000020000000000000006000000ffff00000100008000000000ff0100000300000093970000450e0000e9010000f20000000700000004000000fbffffff220e0000c8000000ff0f000050000000f8ffffff01000100ffffff7f01040000010000000900000000000000010400000641000017aaa509b600000002000000810000003c0000008e70603a000400000700000006000000000200000500000020000000010001000800000004000000060000000100000001000000faffffff070000000100000009000000020000000300000032080000ddc8bd3900800000050000003f000000090000000000000038030000dbe700000100000007000000030000000180ffff07000000ff07000002000000040000000600000005000000090000000000000001000000bd780000ffffffff00000100050000000500000008000000fd5c0000000000000100000000020000c8a3000062e4ffff0000000007000000050000000a3e000003000000b600000009000000ffffff7fa1000000010100000700000001000000030000002109000001800000050000000100000001800000010000002900000003000000ff01000006000000060000003f0000000008000005000000000000000100008005000000050000000000000000000000010000007f0000000800000000ffffff04000000030000000900000008000000090000000100ffff03000000d90600000300000000800000bdc4ffff01000000010000000101000021fdffff010000000700000004000000ffff00000000000007000000010000007fffffff00000000070000003600000008000000090000000040160301000000070000000100000000010000010000000700000005000000ff0100000000000000800000050000000200000007000000030000000400000001000000030000000300000001000080050000000800000005000000080000000000000004000000f8ffffff81000000060000000180000000000000fbffffffff7f00000000000067b4d5730200000001000100ffffffffff030000ffffffff05000100030001000300010002000100000001000600010004000000010001000100010004000000000001000400010005000000040000000500010000000000010001000400010003000100000001000500010000000000d99601000000010059cf010004000100010001000000000003000000000000000200010003000000050000000000000002000100030001000200010003000100000001000400010001000100000000000200010003000100050001000100000004000100020001000500000003000100000001000100010005000100050001003fd4010000000000010001000100010004000000010001000500000002000100020001000400000003000100020000000100000003000000000001000000000001000000050000000300010000000000020001000100010004000100030001000200000003000000040001000400010005000100020000000100010005000000000000000000010003000000000001000100000000000000040001000200020000000000070001000000010001000000050000000500010002000000020000000400000002000100040000000200000003000000030000000500000005000100040000000000000002000100010000000100000000000100000001000300000002000000030001000200010003000000010000000100010004000100020001000300010003000000010000002a000600f5b1a16efb9b87dc3b4cfe94b296e29e59dbbcd07755a272df05788be507fc16254647efb9ff00000c00070001000000000000000c000800020000000200000008000100ffff0700080001000d0006000800030004000000"], 0x2bfc}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000080)) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5422) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000340)={{0x1, 0x5, 0x0, 0x7, 'syz0\x00', 0x3}, 0x6, 0x20000000, 0x5, 0x0, 0x4, 0x8, 'syz0\x00', &(0x7f0000000300)=['/dev/ubi_ctrl\x00', '/dev/ubi_ctrl\x00', '/dev/snd/timer\x00', '+\x00'], 0x2d, '\x00', [0x6f, 0x431c, 0x0, 0x9]}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x82480, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x7, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x8840) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb, 0x10, r2, 0x10000000) (async) fsmount(0xffffffffffffffff, 0x1, 0x72) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r4, &(0x7f0000000480)={0x88540, 0x24}, &(0x7f00000004c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x741f) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000580)={'vxcan0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000003200)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000031c0)={&(0x7f0000003240)=ANY=[@ANYBLOB="fc2b0000640020002dbd7000ffdbb765277dc4459656df2500000000ac526e5c244c9de81a8de4", @ANYRES32=r6, @ANYBLOB="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"], 0x2bfc}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000080)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5422) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000340)={{0x1, 0x5, 0x0, 0x7, 'syz0\x00', 0x3}, 0x6, 0x20000000, 0x5, 0x0, 0x4, 0x8, 'syz0\x00', &(0x7f0000000300)=['/dev/ubi_ctrl\x00', '/dev/ubi_ctrl\x00', '/dev/snd/timer\x00', '+\x00'], 0x2d, '\x00', [0x6f, 0x431c, 0x0, 0x9]}) (async) 00:20:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x30041) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x40, 0x800, 0x81, 0x83, 0x401, 0x100], 0x6, 0x2, 0x3, 0xd7, 0x0, 0x5, 0x7, {0x80, 0x0, 0x9, 0x3, 0x5, 0x0, 0x3, 0x80, 0x8, 0x280, 0x2, 0x3, 0xfe, 0x0, "096e83f064503f899106b2d29b47d942ca0cefe5c8429d3ca6d8c2da82d6e50a"}}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000100)={0x2, 0x95}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) (rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xf2a}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) 00:20:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0xfffffffd}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="f24c37", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) (rerun: 32) 00:20:59 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) r1 = fsmount(r0, 0x0, 0x2) r2 = fsmount(r1, 0x0, 0x7e) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x5420) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) r6 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r6}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000001c0)) fsmount(r6, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="eb96ece621e1b06f18490000000000e84e5e3493799e7949feb22cd8b457811a63fcfa5ef8a2cdbfce2fc0a4058e78777cf388b31c184d16620bd97b3adfaf6f892976a96c5a00d71033280927c7f099aff0f5ae4f9f6973921e4e630f33c5be71e361b283a86733843b4a7d5274d9d34fc1d671ef32778313ce362c0e21495c737d2b78bfe1ce001996b510b315a2f5fc2893e6e578f2e4d5d7a939a0bf00"/168], &(0x7f0000000080)='syzkaller\x00', 0xfffffbff, 0x69, &(0x7f00000000c0)=""/105, 0x40f00, 0x2, '\x00', 0x0, 0x12, r5, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x0, 0x20}, 0x10, 0x0, r6, 0x0, &(0x7f0000000240)=[0x1, r2, r0]}, 0x80) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r0}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r0, 0x0, 0x2) (async) fsmount(r1, 0x0, 0x7e) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x5420) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r5, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r6}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r6, 0x0, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="eb96ece621e1b06f18490000000000e84e5e3493799e7949feb22cd8b457811a63fcfa5ef8a2cdbfce2fc0a4058e78777cf388b31c184d16620bd97b3adfaf6f892976a96c5a00d71033280927c7f099aff0f5ae4f9f6973921e4e630f33c5be71e361b283a86733843b4a7d5274d9d34fc1d671ef32778313ce362c0e21495c737d2b78bfe1ce001996b510b315a2f5fc2893e6e578f2e4d5d7a939a0bf00"/168], &(0x7f0000000080)='syzkaller\x00', 0xfffffbff, 0x69, &(0x7f00000000c0)=""/105, 0x40f00, 0x2, '\x00', 0x0, 0x12, r5, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x0, 0x20}, 0x10, 0x0, r6, 0x0, &(0x7f0000000240)=[0x1, r2, r0]}, 0x80) (async) 00:20:59 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x32dc42) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x30041) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x40, 0x800, 0x81, 0x83, 0x401, 0x100], 0x6, 0x2, 0x3, 0xd7, 0x0, 0x5, 0x7, {0x80, 0x0, 0x9, 0x3, 0x5, 0x0, 0x3, 0x80, 0x8, 0x280, 0x2, 0x3, 0xfe, 0x0, "096e83f064503f899106b2d29b47d942ca0cefe5c8429d3ca6d8c2da82d6e50a"}}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000100)={0x2, 0x95}) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x5421, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xf2a}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) 00:20:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r1, 0x706, 0xffffffff, 0x25dfdbff}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:59 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x82480, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) r2 = fsmount(r1, 0x0, 0x2) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x7, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x8840) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb, 0x10, r2, 0x10000000) r4 = fsmount(0xffffffffffffffff, 0x1, 0x72) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r4, &(0x7f0000000480)={0x88540, 0x24}, &(0x7f00000004c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x741f) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000003200)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000031c0)={&(0x7f0000003240)=ANY=[@ANYBLOB="fc2b0000640020002dbd7000ffdbb765277dc4459656df2500000000ac526e5c244c9de81a8de4", @ANYRES32=r6, @ANYBLOB="07000b000b000300ffffa86906000500017f000006000500810000000d0001006d61746368616c6c00000000b82b0200080001000800e6ff942b0200902b08000a00010070656469740000003c2b0280680e0200ff070000e90000000500000072fb0000018000000104000012b100000200000009000000ff00000010460000aa00000000000080a10d0000090000000300000002000000bb02000003000000080000000400000000feff0103000000f9ffffff04000000080000000001000001000000050000000000008001000000e100000000000000ffffff7f2e00000021ec000000000000570e00000200000000000000a700000001000000000000017f0000000400000005000000f7ffffff080000000500000007000000020000000800000038000000080000000000000080000000ff0f00000400000001000000070000000080000008000000ffff000009000000810000000800000000000000ffffffff7f000000ff030000d000000016000000000000000600000054050000070000003f0000004a000000090000000001000007000000cd020000018000000200000000feffff0600000009000000060000000104000008000000090000004a7f000005000000050000000700000020000000070000000100000020000000040000000100008004000000040000000800000080000000080000007f000000800000000900000000020000fc9900001c000000030000000002000005000000070000000100000001010000020000007400000000feffff4d000000000000000400000004000000050000004a7d00000004000001ffffff0000000006000000040000008650000000000000040000000180000009000000ffff0000200000001f000000020000002000000006000000fffbffff010000000002000000000080ffff000004000000ffffffff0300000007000000ffff000008000000c8000000a3ffffffe80f0000000000000200000002000000cc0f00000700000006000000ffff0000070000000300000007000000242e00003f000000000000ff00000000008000000100010008000000010000000900000004000000050000001306000003f800006cb9000005000000a008000007000000070000000000010096ad0000030000000500000028000000b9ae000008000000060000000001000006000000010000800000010000800000070000000600000000040000080000002d0b000009000000080000000900000020000000030000000500000006000000d8d000000300000003000000ff7f000000010000ff0f00000500000005000000110000007e7a00003f000000f936000001000080000000000600000005000000000000000000008005000000080000000900000006000000000000000000010001040000dfbc00000000008005000000080000000e080000ffffffffffffffff1f0500000400000007000000c601000005000000800000000900000003000000bb000000050000000000000000080000020000000200000089000000080000001c060000a7c3000088b700000000008005000000030000000000999d060000000000010081000000ff07000002000000bd0e0000e99d000009000000ffffff7f03000000090000000500000001000000020000000000000005000000940000000000000006000000060000000600000000000300f20000000900000003000000200000000700000000000000d7010000ff0f00009a9a00007f00000015e0000004000000070000001f00000000000080ffffff7f01000080feffffff00000000a50f00000700000002000000000000000700000062000000040000000900000001040000ef0e000004000000c83a000005000000050000000000300002000000000001000300000000020000840000000200000007000000a10e0000bd0d0000f7ffffff01040000bd0a0000935c00000800000086010000018000000600000009000000ff000000000000000002000008000000000040004c00000000010000050000000300000000000100ff7f0000010000000400000000000090ff0300000500000007000000cbffffff5e3b000009000000000000003f0000000800000082000000010400000500000006000000060000000080000003000000030000000700000000000000030000000000010007000000040000003ad4000000020000a3bf691f0300000005000000010000001314000002000000080000000600000001000000ff0f00000000000001000000feffffff01000000050000000700000018ffffff03000000080000000100000004000000030000000800000001c70000ffff00000900000009000000ef0000000000000092000000050000000000008040000000fea4000001000000010000008f000000080000000700000000080000030000000100000006000000000000000100000008000000000000000900000006000000020000000500000002000000080000000900000009000000c0000000040000000000000002000000030000000001000005000000060000000000000007000000ab0000009887000049070000000400000400000000020000000000000180000005000000ffff000062920000040000000200000000000000070000000180000000800000070000000500000004000000bb0d0000090000004f0000000180000008000000d86600008100000001000000050000009f9800000000000c030000003e830000010000000600000000000000ff030000060000007f000000f000000002000000d877ffff0400000000080000720000000900000001800000080000000100000009000000070000004d0000000400000009000000000000000700000000000000010100000500000000000000ffffffffffffff7f080d0000333d00000900000009000000810000000001000000000000070000007f000000ff0000000000000000000200ff07000005000000ffffffff02000000400000000101000008000000b795000079ff000009000000ff0f0000ff0f0000050000000001000000800000010000000700000005000000060000000300000001000100010000000000000001000000a100000004000000090000000900000009000000070000000300000001000000090000000400000000000000ff7f000000000028000000003b0a0000f7ffffff06000000f8ffffff3f00000005000000020000000500000006000000010000000080000000a0a600f9ffffff0200000009000000020000000400000003000000000000000104000006000000020000000900000009000000fbffffffff00000001000000020000000008000008000000000200007f000000940f000001000080e94900000100010001000000e100000080000000c800000002000000b600000004000000060000007d00000007000000a4040000ff070000010000007f00000001800000b3030000060000000180000000f8ffff02000000aaffffff0c00000000800000030000004000000001000000000000000800000008000000040000000300000000c0010005000000080000000700000006000000d500000004000000fe000000ec06ffff0000000008000000051c000001000080ffff00000100000007000000f5a70000200000000100010009000000e60a00005b08000000000080000001000200000002000000970f000000000080f9ffffff04000000ff030000010100000100000002000000950900002000000001000080ffffffff030000000000000009000000050000000100000002000000f7ffffff0900000000000000090000000000000008000000000000008b37ffff000008000100000026000000ffffffff03000000720c00000400000092000000840500000800000003000000010000000101000002000000080000002000000006000000050000000100000004000000f7ffffff02000000000200000700000000000000320000005d2500002e030000070000000000000003000000ffffff7f010000000400000000000000af00000004000000a011000003000000020000000500000006000000ff030000000000000400000000100000010000000500000006000000000400007f000000ff0700008c0a0000060000000700000001000000de0000000200000006000000080000000100000072d40000ff070000010000000000000000008001020000000400000007000000fffffffff4e175ee070000000000000000040000030000000100000017060000ff0700000300000000000000010000000000ffff790b00000000000069010000faffffff000001000000000000020000000000000700000007000000ff0000000600000006000000ffffff7f440100007f000000f90d312e0e2300007ffffffffbffffffff01000007000000ffffffff00000000feffffff08000000060000000900000003000000070000001f0000000001000001000100000000000000000007000000000001000100000000000000040001000200000003000100040000000400010004000100000000000100000001000000a8940000000000000500000005000000010000000500000001000000010001000000000000000000010001000200010003000100050001000100000002000100030000000100010005000000040076f5010001000500010001000100040000000000e01e03000000030001000500000004000000040000000300000004000000050001000000010002000100010000000200010004000100000000000500000002000000030001000200010000000100040001000500000003000100000001000200000004000100020001000100000001000100030001000500010004000100040000000200000004000000079e0100040001000600010003000100050000000000010003000100010001000400000001000000050001000200000003000000020000000400000005000100070001000400000005000000020000000100000001000000000000000200000002000000000000000000000001000100050001000400010005000100020001000200010003000000010000000500010005000000010001000100000004000100000000000000010003000100000001000000010004000000000001000400000001004fca040000000000000002000100050001000300000004000100000000000100000001000000500e04001f000000660b0000ffffffff03000000ff00000003e10000000000000b00000007000000ff0f0000ff03000005000000080000000000000008000000ff070000f8ffffff01000000ffffffff000000000900000004000000050000000900000005000000030000000100000005000000ff7f0000feffffff020000000200000002000000c8cd0000ff010000800000000700000006090000ea0000000200000001000000200000000400000009000000010000000600000002000000020000004000000008000000090000000900000002000000e57f00007f000000010100000100000007000000010000000300000003000000008000003e00000007000000030e0000080000000700000004000000070000001f0000000400000001040000860c0000ffff000004000000ff000000ff03000007000000001000007f0000003f000000070000000600000008000000ff01000001800000ff0f0000faffffff00800000030000000200000007000000401a00000000000003000000084d1a63030000000200000001000080010000800400000006000000ffff00000200000009000000c30000000000000001040000e38c0000cd000000ffffff7f01800000000000000600000007000000010000000800000001000000000000000100000000040000ae90000003000000110000000500000004000000260000000004000006000000070000007108000007000000001000000400000006000000000000007f00000007000000010000000900000002000000060000000180000000000100ffffff7f060000000800000001000000faea000006000000010000000100000001000000000200000600000006000000000001000900000004000000ff0f00007a01000004000000b2cd00002000000009000000572d000003000000000000809600000009000000040000000004000006000000050000005700000003000000800000000100000003000000690f00005f03000002000000fffffffffa04000000000000feffffff010001000100000009000000fbffffff9c0000000010000007000000db28000009000000000400000100000005000000070000000800000002000000000000000600000004000000fbffffffef0a0000080000000300000005000000d6000000bc0000000bfc6c6e0200000009000000070000000010000001040000695d000005000000aa0a000006000000060000006500000005000000040000002867000081000000010000000700000005000000000000000200000097da000008000000010000005dda000007000000ff0f000003000000030000000600000005000000fdffffff0200000000000100096f000001000000040000000900000002000000fcffffff7f00000050280000040000002000000004000000000000000104000008000000040000001f000000080000000700000001000000c1ffffff01000000d00f0000ac0b0000ffffffffffffffff01000000020000000080ffff01010000018000000900000009000000000000f0040000000900000005000000000000009509000009000000040000000400000000000080090800000100000009000000fc0000001f000000f10900000700000091510000000000000200000007000000ffffffff05000000ff00000003000000018000000200000000020000df000000020000000700000005000000d424173804000000010001000000000001040000ff0f000008000000fbffffff00000000060000000200000000080000400000000700000007000000010000006ed90000001000000400000081000000040000000700000040000000090000000101000001000000ffffffff04000000f2a200000100000008000000ffffffff000000004a000000030000000400000002000000800000000400000001feffff13000000c7000000ff0f0000400000000100010000000100fbffffff5af20000ff0f000000040000000000000500000000100000fffffffff7ffffff0100010001000000000200001f0000000700000000040000080000000600000005000000f9000000040000001f0000000200000001000000c900000008000000050000000500000000f0ff070000008000020000ffff000005000000ffffff7fff000000040000003f000000080000001f0000000100000009000000ffffffff0900000002000000ffffff7f050000000600000006000000070000000c0b0000030000000000000005000000dcad0000080000000100010003000000d60000000200000000000000080000000100000000000100ff01000009000000060000000004000001000000090000000100000006000000ff7f0000050000007f000000020000007603000009000000030000000600000001000000ff0100000300000001000000399b7304020000007f000000c90f0000cd20f777ffffffff010001000200000008000000b2da000047ce0000010000003ce2ffffffffff7f0000000000010000ff01000008000000147400000700000008000000ffffff7f01800000010400008a0c00000300000005000000050000000900000006000000040000000300000001f8ffff43fffffffdffffff000000c0d4000000ff01000002000000d8000000018000000900000009000000040000000900000009000000020000000500000020000000000000000900000009000000e707000001000000fffffffffeffffff08000000feffffff0600000005000000ff0700000900000004000000010000800600000006000000830c00000ff0ffff8000000005000000ff07000009000000e2000000ff0f0000030000000700000009000000234d000001000080000000000000000002000000cd0d0000180000000100008000000080050000000700000003000000fffeffff090000000a0a000004000000e2150000ab27000009000000000000007f000000ff0f00000700000008000000810000005877000007000000070000000600000009000000ff7f000009000000060000007b2e161f040000004b410000010001001ac2e425000000000008000008000000010000000000000002000000030000000900000000010000080000000000000008000000010001000800000000080000030000000902000000000000ffffffff07000000574e000005000000ff01000005000000040000000700000071000000780a0000a40d000000000000ee0000004000000004000000cdcd000003000000800000000800000006000000f989000009000000c46d0000060000000004000003000000c6090000040000000300000000080000020000000700000000000000ffffff7f06000000010100000700000000000000783500000900000020000000fb00000007000000b7050000030e00000004000080000000020000000500000000020000020000000200000027c100000200000009000000000000000001000000000000140000000200000000080000bdb40000010000000500000007000000da0000002000000004000000ff00000000010000020000000104000002000000ffff000000020000030000000100000000feffffe0ffffff0000000001000000853000000200000001000000ff0f000001000000090000003d06000003000000ff010000020000000800000085fb0000040000000900000002000000070000000600000001800000ff010000040000000200000029ffffff00000000dd00000000000200a7000000470000000400000005000000f60b000002000000fb0000000004000039890000ff01000004000000ff0f0000ff0300000300000004000000090000000800000009000000ffff00000604000005000000010001000100000000000000ffffffff080000000500000009000000070000002100000008000000001000000100000005000000fcffffff050000003a0000000080000014c000000300000000080000ccc1000005000000018000000180000009000000810000000300000004000000060000007f0200000300000005000000ff01000007000000030000000400000000800000770300000000000000000000fdffffff0200000000000000080000000600000006000000ff03000001000000680000000200000001000000020000000000000081000000faffffff05000000010400001308000002000000134f0000ff7f0000ff0300003cc50000030000007e00000009000000040000000800000002000000ff7f00000300000002000000000000003f0000002900000000020000020000000900000000100000fbffffffff7f000001000000e9b00000030000000800000004000000dc00000004000000fbffffff00000000050000000300000001000100010000000300010004000000010000000400000000000100050000000200010000000000020001000400000002000000010000000000010003000100030000000400010001000000010001000200010000000100000001000500000002000100010000000000000001000100020001000500000004000000030001000400000005000100010001000100010005000100040000000500000002000000010001000000010001000100020001000200010001000100040001000200010002000000020001000100000005000000050001000200010005000000781d010003000000020000000000000005000000030001000300010004000100030000000000010000000100030001000300010004000100030001000300010001000100020001000700000004000100040001000400000001000000020000000300010003000000030000000300000005000100010000000100010000000100040001000500000004000100040000000400000005000100050000000100000003000100020000000200000002000100010000000200010005000000000000000000010003000000000001000000000002000100010001000400010001000100040001000300000000000000020000000400010001000000000000000100000005000000040000000100000004000000000001000400000001000000800e02000500000009000000000000000100000083e700000206000008000000070000000101000032af0000f9ffffff0100008009000000ff010000080000000700000000000000040000002f000000000000000500000007000000ff00000000080000b40f0000080000000c00000000020000040000000b000000008000000800000000000000ff7f0000f8ffffff090000000500000007000000001000000700000006000000090000000010000009000000d30e0000b06000000600000005000000df30000005000000690000003e3d3b36ff070000000000000700000009000000000800000900000043df00002c39000000800000d9b10000bd0100000008000001000000040000007728ffffef0000008100000002000000e66f000009000000fbffffff000410002000000020000000060000000900000000000080750d00000300000000000000080000009acb0000faffffff0000000000000050200000000900000007000000090000002000000007000000ff0300000008000001000000070000000700000001000000070000000700000002000000feffffff050000000800000002000000c3540000900b0000537c1e2f0002000008000000ffffff7f0800000005000000ff0f0000050000006d24000006000000ff070000090000000900000041cf00000104000006000000f9ffffffffff000004000000ff0f000001000000080000000300000038000000820000002e0000000600000002000000fe070000000000000700000004000000cf0700000800000000100000010000000500000057ffffff06000000030000000002000001ffffff9b000000010400000400000005000000060c000000800000f00c0000240a000002000000090000009000000008000000800000007f00000001010000cfcb0000f201000004000000050000000100000003000000090000000000008004000000faffffff0300000006000000000400000100000002000000018000000300000007000000ff7f00000700000000feffffea00000004000000ffffff7f3f000000f00c00005500000001000000030000000200000006000000cf02000002000000cc0400008000000007000000ff7f0000bd08000008000000e30c0000080000000300000000000000010000000200000080000000050000000fe0000000100000ce0d000001000000ff0f0000010000001f000000010000000500000001000000ffffffff01000000ff00000004000000060000000800000007000000440000000900000000000000cc590000000000007fffffff00000100000000000300000008000000860c0000f9ffffff030000000000000000000100ffffff7f0200000040000000000800000100000008000000ff0300004000000000000080fbffffff7c01000000000000ff070000eb040000fbffffffff07000005000000000100007f000000030000003f0000000600000009000000ff7f00000000000029d3fb77a1010000ffffffff0101000009000000ff030000010000804000000008000000ff0100000200000075e8fffffcffffff090000000100000002000000e5000000040000000400000000000000000000000100008000010000090000000000ffff81000000000000007e000000040000000600000009000000800000000800000009000000020100000500000009000000070000000000000006000000b90000000900000005000000090000006398000008000000ffff0000000000000300000001000000080000000600000005000000ff01000001010000000000000000000001000000c8000000010000000f00000001000000760900000200000020000000ffffff7fa10b0000e900000000040000018000000500000020000000090000000004000081000000ff7f00000200000008000000810000000000000002000000070000001400000000000000400000000000000004000000993af71b98000000fbffffff040000000600000000000000000000000101000069ffffff0200000040000000000000003009000046ef000001000000070000007f070000ffffffff0000000002000000400000002000000076b600009508000088000000ff0f000009000000090000000300000000080000018000000400000003000000b71900000700000000100000020000000900000008000000ff0100000200000000000000000000008000000000000000000000000008000000000000ffff0000be0800000600000003000000040000006e0b0000ff030000010000000600000071450000ff00000002000000040000009300000002000000030000000500000005000000ab000000ff030000050000000080000002000000f8ffffffbc08000009000000ff0700000200000000000000030000000300000002000000050000000010000000080000060000000700000000020000060000000700000000040000005000000700000002000000000020005f0c000000f8ff070300000076940000070000000001000000100000090000000002000000000000e101000000000080050000000000000001000000001000000000000001000080ffffff7f080000000900000001000000ff00000000100000ff00000008000000060000008b0e0000090000001f00000000010000fcffffff43ad291b08000000ffffffff070000000800000008000000c386000007000000ff0300000800000001000000010000000100000001000000080000000100000000000000f7ffffff09000000060000000900000000080000060000000800000000020000ff000000ff7fffff00000000a3040000d50e000004000000920f0000ff03000003000000030000000500000081000000ac74000006000000ffffffff050000000004000007000000ffff000068000000080000004000000000000000040000000500000008000000050000000300000003000000730b0000ff030000040000000200000040000000040000000101000004000000ff7f000001000000030000000900000003000000ff03000000000000030000000700000076090000a34f00000080000001feffffd9090000faffffff0300000008000000000001001c00000007000000ffff0000070000001f00000000feffff0000000027000000057c0000ff0000000100000000000000000000001f00000001040000ff7f00009305000000000080090000000900000007000000a000000008000000060000000500000000000080060000000080000000010000bf51000008000000ab2500000200000000000000f9ffffffb13b000000000000ffffff7fc2fa00008617565800010000ff0f00007f000000090000000500000005000000020000000000000006000000ffff00000100008000000000ff0100000300000093970000450e0000e9010000f20000000700000004000000fbffffff220e0000c8000000ff0f000050000000f8ffffff01000100ffffff7f01040000010000000900000000000000010400000641000017aaa509b600000002000000810000003c0000008e70603a000400000700000006000000000200000500000020000000010001000800000004000000060000000100000001000000faffffff070000000100000009000000020000000300000032080000ddc8bd3900800000050000003f000000090000000000000038030000dbe700000100000007000000030000000180ffff07000000ff07000002000000040000000600000005000000090000000000000001000000bd780000ffffffff00000100050000000500000008000000fd5c0000000000000100000000020000c8a3000062e4ffff0000000007000000050000000a3e000003000000b600000009000000ffffff7fa1000000010100000700000001000000030000002109000001800000050000000100000001800000010000002900000003000000ff01000006000000060000003f0000000008000005000000000000000100008005000000050000000000000000000000010000007f0000000800000000ffffff04000000030000000900000008000000090000000100ffff03000000d90600000300000000800000bdc4ffff01000000010000000101000021fdffff010000000700000004000000ffff00000000000007000000010000007fffffff00000000070000003600000008000000090000000040160301000000070000000100000000010000010000000700000005000000ff0100000000000000800000050000000200000007000000030000000400000001000000030000000300000001000080050000000800000005000000080000000000000004000000f8ffffff81000000060000000180000000000000fbffffffff7f00000000000067b4d5730200000001000100ffffffffff030000ffffffff05000100030001000300010002000100000001000600010004000000010001000100010004000000000001000400010005000000040000000500010000000000010001000400010003000100000001000500010000000000d99601000000010059cf010004000100010001000000000003000000000000000200010003000000050000000000000002000100030001000200010003000100000001000400010001000100000000000200010003000100050001000100000004000100020001000500000003000100000001000100010005000100050001003fd4010000000000010001000100010004000000010001000500000002000100020001000400000003000100020000000100000003000000000001000000000001000000050000000300010000000000020001000100010004000100030001000200000003000000040001000400010005000100020000000100010005000000000000000000010003000000000001000100000000000000040001000200020000000000070001000000010001000000050000000500010002000000020000000400000002000100040000000200000003000000030000000500000005000100040000000000000002000100010000000100000000000100000001000300000002000000030001000200010003000000010000000100010004000100020001000300010003000000010000002a000600f5b1a16efb9b87dc3b4cfe94b296e29e59dbbcd07755a272df05788be507fc16254647efb9ff00000c00070001000000000000000c000800020000000200000008000100ffff0700080001000d0006000800030004000000"], 0x2bfc}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000080)) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5422) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000340)={{0x1, 0x5, 0x0, 0x7, 'syz0\x00', 0x3}, 0x6, 0x20000000, 0x5, 0x0, 0x4, 0x8, 'syz0\x00', &(0x7f0000000300)=['/dev/ubi_ctrl\x00', '/dev/ubi_ctrl\x00', '/dev/snd/timer\x00', '+\x00'], 0x2d, '\x00', [0x6f, 0x431c, 0x0, 0x9]}) 00:20:59 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x32dc42) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x32dc42) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:20:59 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x6, 0x5b, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x1f, 0xa0, 0x4f, [{{0x9, 0x4, 0x0, 0x3f, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0xfffc, 0xf9}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1f}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x0, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x40, 0x1}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xa8, 0x1, 0x9, 0x20, 0x1}, 0x56, &(0x7f0000000140)={0x5, 0xf, 0x56, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1f, "9c12e39a610cfdfd8b5850e3804b0eee"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d274fb319e77072f5285d59d65a3442b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x20, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x56, "7f69533e9854fc428c21368a9b559eaa"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xdc, 0x40, 0x9, 0x3}]}, 0x3, [{0x4e, &(0x7f00000001c0)=@string={0x4e, 0x3, "5a7f9285510e8bdc3b10cbb8c3aab241cf1ab572ca49739da8e0d3e4ed8ee2bdfe492a50a98f00ba7eba2b2c84033f3b167f2691c9b90e2be836380de5809bf4464297b6ea579f0f90ce2876"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_ep_write(r0, 0x95, 0x1a, &(0x7f0000000340)="e9536e4e3df84a6f1ff7a6ce9e9fb3cd42f43ec2fb83ee411763") r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000380), 0x2200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x541b, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r2}) socket$nl_route(0x10, 0x3, 0x0) 00:20:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r1, 0x706, 0xffffffff, 0x25dfdbff}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:20:59 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000007, 0x810, r1, 0x8000000) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000006800100025bd7000fcd0df25020001000500000004050400"], 0x1c}}, 0x10) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x28800, 0x0) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000140)=0x7fff) 00:20:59 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x2, 0x3, 0x2, 0xffffffff}, 0x7, 0xe6, 'id1\x00', 'timer0\x00', 0x0, 0x65a3, 0x9, 0x9, 0x2}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:59 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x6, 0x0, 0x402}}) r1 = fsmount(0xffffffffffffffff, 0x1, 0xfb) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x649}) 00:20:59 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x32dc42) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:59 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000007, 0x810, r1, 0x8000000) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000006800100025bd7000fcd0df25020001000500000004050400"], 0x1c}}, 0x10) (async) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x28800, 0x0) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000140)=0x7fff) 00:20:59 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4200) write$smackfs_labels_list(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x11) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='/dev/snd/timer\x00', &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:20:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r1, 0x706, 0xffffffff, 0x25dfdbff}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r1, 0x706, 0xffffffff, 0x25dfdbff}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) 00:20:59 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x2, 0x3, 0x2, 0xffffffff}, 0x7, 0xe6, 'id1\x00', 'timer0\x00', 0x0, 0x65a3, 0x9, 0x9, 0x2}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:20:59 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x6, 0x0, 0x402}}) r1 = fsmount(0xffffffffffffffff, 0x1, 0xfb) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x649}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x6, 0x0, 0x402}}) (async) fsmount(0xffffffffffffffff, 0x1, 0xfb) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x649}) (async) 00:20:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x2000) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) socketpair(0x22, 0xa, 0x8080, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, ',\\'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa7e46a378dc1c7c}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x8c0) 00:21:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000200)='@\\\x88\x00', &(0x7f0000000240)='./file0\x00', r1) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) connect$bt_rfcomm(r2, &(0x7f00000002c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xa) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) r4 = fsmount(r3, 0x0, 0x2) fsmount(r4, 0x1, 0x1) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000140)={0x2, &(0x7f0000000080)="0aa458ebab37ba7827a10ec5be8a91f8de87435781aa546a59a66561bdea34b77a557ce45439d5dae9f20d6e0e659f470e6b50438f9dd5b723dcb6fcd77d3824dad58b5ec6decd5fa406fb376ab515acb16bbd752dd603f18b018059b7c4cd3db2cf68f997a78a6d52a6c11a5502a2041484ec2b34622b96dfc48f287ef0ede8bcf87f787c4f83"}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000000)={0x7, 0xc64, 0x6, 0x0, 0x11}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:00 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x2, 0x3, 0x2, 0xffffffff}, 0x7, 0xe6, 'id1\x00', 'timer0\x00', 0x0, 0x65a3, 0x9, 0x9, 0x2}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:21:00 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4200) write$smackfs_labels_list(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x11) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='/dev/snd/timer\x00', &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:21:00 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000007, 0x810, r1, 0x8000000) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000006800100025bd7000fcd0df25020001000500000004050400"], 0x1c}}, 0x10) (async) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x28800, 0x0) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000140)=0x7fff) 00:21:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x6, 0x0, 0x402}}) (async) r1 = fsmount(0xffffffffffffffff, 0x1, 0xfb) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x649}) 00:21:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x2000) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) socketpair(0x22, 0xa, 0x8080, &(0x7f0000000180)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, ',\\'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa7e46a378dc1c7c}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x8c0) 00:21:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x2000) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) socketpair(0x22, 0xa, 0x8080, &(0x7f0000000180)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, ',\\'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa7e46a378dc1c7c}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x8c0) 00:21:00 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4200) write$smackfs_labels_list(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x11) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='/dev/snd/timer\x00', &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4200) (async) write$smackfs_labels_list(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x11) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='/dev/snd/timer\x00', &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:21:00 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r0 = syz_clone3(&(0x7f0000001300)={0x40004000, 0x0, 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) sched_rr_get_interval(r0, &(0x7f0000001380)) clock_gettime(0x2, &(0x7f0000000040)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') 00:21:00 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000340)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) r2 = syz_usb_connect$cdc_ecm(0x4, 0x62, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x4d, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x29, 0x3, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00'}, {0x5, 0x24, 0x0, 0x3b4}, {0xd, 0x24, 0xf, 0x1, 0xe39, 0x1, 0x80, 0x1f}, [@ncm={0x6, 0x24, 0x1a, 0x7fff, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xa2, 0x20, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x6, 0x50}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x1f, 0x5, 0x80, 0x70, 0x5e}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x4, 0x6}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1409}}]}) syz_usb_ep_write(r2, 0xda, 0xc4, &(0x7f0000000240)="968438e294cca0051b4dcb9042a7000aebf456d7d222f19593bf021be85dfb332aeff55fa177cc3f00518115a18818a0d17ff41a777421d0a6398c7bc632bae0d5339d81e42efb66705faf526efecd4169984c1e1685ba5614c34f82213aa964fcd48d50855a13a563bc2d2820610c126c739775923e0a01d419eed79a390e44258bb6a310d68a7c41679d66b57416d33967082797936829b431afd4fa85d280e538a67590ff20e9df2375dc5e72d68a5429157b1febb2697fb4e0d9e6dd7cf27383cdc4") fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0x80000001, 0x2, 0xfffff3d2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:21:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) (async) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000200)='@\\\x88\x00', &(0x7f0000000240)='./file0\x00', r1) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) connect$bt_rfcomm(r2, &(0x7f00000002c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xa) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) r4 = fsmount(r3, 0x0, 0x2) fsmount(r4, 0x1, 0x1) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000140)={0x2, &(0x7f0000000080)="0aa458ebab37ba7827a10ec5be8a91f8de87435781aa546a59a66561bdea34b77a557ce45439d5dae9f20d6e0e659f470e6b50438f9dd5b723dcb6fcd77d3824dad58b5ec6decd5fa406fb376ab515acb16bbd752dd603f18b018059b7c4cd3db2cf68f997a78a6d52a6c11a5502a2041484ec2b34622b96dfc48f287ef0ede8bcf87f787c4f83"}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000000)={0x7, 0xc64, 0x6, 0x0, 0x11}) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:00 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async) r0 = syz_clone3(&(0x7f0000001300)={0x40004000, 0x0, 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) sched_rr_get_interval(r0, &(0x7f0000001380)) (async) clock_gettime(0x2, &(0x7f0000000040)) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') 00:21:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 00:21:00 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x12340) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x4}) 00:21:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) 00:21:00 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r0 = syz_clone3(&(0x7f0000001300)={0x40004000, 0x0, 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) sched_rr_get_interval(r0, &(0x7f0000001380)) (async) clock_gettime(0x2, &(0x7f0000000040)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') 00:21:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x88c0}, 0x20040880) 00:21:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r1, 0x0, 0x2) (async) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000200)='@\\\x88\x00', &(0x7f0000000240)='./file0\x00', r1) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) connect$bt_rfcomm(r2, &(0x7f00000002c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xa) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) r4 = fsmount(r3, 0x0, 0x2) fsmount(r4, 0x1, 0x1) (async) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000140)={0x2, &(0x7f0000000080)="0aa458ebab37ba7827a10ec5be8a91f8de87435781aa546a59a66561bdea34b77a557ce45439d5dae9f20d6e0e659f470e6b50438f9dd5b723dcb6fcd77d3824dad58b5ec6decd5fa406fb376ab515acb16bbd752dd603f18b018059b7c4cd3db2cf68f997a78a6d52a6c11a5502a2041484ec2b34622b96dfc48f287ef0ede8bcf87f787c4f83"}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000000)={0x7, 0xc64, 0x6, 0x0, 0x11}) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:00 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x12340) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x4}) 00:21:00 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xae5, 0xec7d, 0x8, 0x241, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000005, 0x3, 0x4}, 0x48) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x8, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80000001}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @alu={0x7, 0x0, 0xd, 0x3, 0x3, 0x80, 0xfffffffffffffffc}, @ldst={0x3, 0x0, 0x0, 0x8, 0x2, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x6, 0x2, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r0, r2, r0, r3, r4, r5]}, 0x80) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:21:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 00:21:00 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x12340) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x4}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x12340) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x4}) (async) 00:21:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x46ac02, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:00 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xae5, 0xec7d, 0x8, 0x241, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000005, 0x3, 0x4}, 0x48) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x8, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80000001}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @alu={0x7, 0x0, 0xd, 0x3, 0x3, 0x80, 0xfffffffffffffffc}, @ldst={0x3, 0x0, 0x0, 0x8, 0x2, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x6, 0x2, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r0, r2, r0, r3, r4, r5]}, 0x80) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xae5, 0xec7d, 0x8, 0x241, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000005, 0x3, 0x4}, 0x48) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r5, 0x0, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x8, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80000001}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @alu={0x7, 0x0, 0xd, 0x3, 0x3, 0x80, 0xfffffffffffffffc}, @ldst={0x3, 0x0, 0x0, 0x8, 0x2, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x6, 0x2, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r0, r2, r0, r3, r4, r5]}, 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) 00:21:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x88c0}, 0x20040880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x88c0}, 0x20040880) (async) 00:21:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000080)="ffdc9ed2667c07287c47a2ad2d3f0202166f17bf72d3272cb9c5fef8765b6dcf9ea7c1ff31298e2be4d40b5eed886b61f7d1247f5453aa06a4e6c24d7c22ed2856978a54d6b36db74b4262beed7c3626e26ae8888f6663bb8e53ba7c7ec4951b7d95f9a31ae3f3825b0381709cd177e221053cea15c8e06f82f4c38a7084fa6b7d359cd576d77876c417b8537748d130b8f01091695dbf846780512fa1d4bf473cb47876be6a9e3f46f9619a66a70c4deadab2e0a54965db9246584864ca26cc795f955bce0b863d56390f3b", 0xcc}) openat$cgroup_int(r0, &(0x7f0000000200)='io.latency\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0xff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x185000) 00:21:00 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000340)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) r2 = syz_usb_connect$cdc_ecm(0x4, 0x62, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x4d, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x29, 0x3, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00'}, {0x5, 0x24, 0x0, 0x3b4}, {0xd, 0x24, 0xf, 0x1, 0xe39, 0x1, 0x80, 0x1f}, [@ncm={0x6, 0x24, 0x1a, 0x7fff, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xa2, 0x20, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x6, 0x50}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x1f, 0x5, 0x80, 0x70, 0x5e}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x4, 0x6}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1409}}]}) syz_usb_ep_write(r2, 0xda, 0xc4, &(0x7f0000000240)="968438e294cca0051b4dcb9042a7000aebf456d7d222f19593bf021be85dfb332aeff55fa177cc3f00518115a18818a0d17ff41a777421d0a6398c7bc632bae0d5339d81e42efb66705faf526efecd4169984c1e1685ba5614c34f82213aa964fcd48d50855a13a563bc2d2820610c126c739775923e0a01d419eed79a390e44258bb6a310d68a7c41679d66b57416d33967082797936829b431afd4fa85d280e538a67590ff20e9df2375dc5e72d68a5429157b1febb2697fb4e0d9e6dd7cf27383cdc4") fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0x80000001, 0x2, 0xfffff3d2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000340)) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) syz_usb_connect$cdc_ecm(0x4, 0x62, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x4d, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x29, 0x3, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00'}, {0x5, 0x24, 0x0, 0x3b4}, {0xd, 0x24, 0xf, 0x1, 0xe39, 0x1, 0x80, 0x1f}, [@ncm={0x6, 0x24, 0x1a, 0x7fff, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xa2, 0x20, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x6, 0x50}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x1f, 0x5, 0x80, 0x70, 0x5e}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x4, 0x6}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1409}}]}) (async) syz_usb_ep_write(r2, 0xda, 0xc4, &(0x7f0000000240)="968438e294cca0051b4dcb9042a7000aebf456d7d222f19593bf021be85dfb332aeff55fa177cc3f00518115a18818a0d17ff41a777421d0a6398c7bc632bae0d5339d81e42efb66705faf526efecd4169984c1e1685ba5614c34f82213aa964fcd48d50855a13a563bc2d2820610c126c739775923e0a01d419eed79a390e44258bb6a310d68a7c41679d66b57416d33967082797936829b431afd4fa85d280e538a67590ff20e9df2375dc5e72d68a5429157b1febb2697fb4e0d9e6dd7cf27383cdc4") (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0x80000001, 0x2, 0xfffff3d2}}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) 00:21:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x46ac02, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000080)="ffdc9ed2667c07287c47a2ad2d3f0202166f17bf72d3272cb9c5fef8765b6dcf9ea7c1ff31298e2be4d40b5eed886b61f7d1247f5453aa06a4e6c24d7c22ed2856978a54d6b36db74b4262beed7c3626e26ae8888f6663bb8e53ba7c7ec4951b7d95f9a31ae3f3825b0381709cd177e221053cea15c8e06f82f4c38a7084fa6b7d359cd576d77876c417b8537748d130b8f01091695dbf846780512fa1d4bf473cb47876be6a9e3f46f9619a66a70c4deadab2e0a54965db9246584864ca26cc795f955bce0b863d56390f3b", 0xcc}) openat$cgroup_int(r0, &(0x7f0000000200)='io.latency\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0xff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x185000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000080)="ffdc9ed2667c07287c47a2ad2d3f0202166f17bf72d3272cb9c5fef8765b6dcf9ea7c1ff31298e2be4d40b5eed886b61f7d1247f5453aa06a4e6c24d7c22ed2856978a54d6b36db74b4262beed7c3626e26ae8888f6663bb8e53ba7c7ec4951b7d95f9a31ae3f3825b0381709cd177e221053cea15c8e06f82f4c38a7084fa6b7d359cd576d77876c417b8537748d130b8f01091695dbf846780512fa1d4bf473cb47876be6a9e3f46f9619a66a70c4deadab2e0a54965db9246584864ca26cc795f955bce0b863d56390f3b", 0xcc}) (async) openat$cgroup_int(r0, &(0x7f0000000200)='io.latency\x00', 0x2, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0xff) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x185000) (async) 00:21:00 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2a201) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101540, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000080)) 00:21:00 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000340)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) r2 = syz_usb_connect$cdc_ecm(0x4, 0x62, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x4d, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x29, 0x3, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00'}, {0x5, 0x24, 0x0, 0x3b4}, {0xd, 0x24, 0xf, 0x1, 0xe39, 0x1, 0x80, 0x1f}, [@ncm={0x6, 0x24, 0x1a, 0x7fff, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xa2, 0x20, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x6, 0x50}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x1f, 0x5, 0x80, 0x70, 0x5e}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x4, 0x6}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1409}}]}) syz_usb_ep_write(r2, 0xda, 0xc4, &(0x7f0000000240)="968438e294cca0051b4dcb9042a7000aebf456d7d222f19593bf021be85dfb332aeff55fa177cc3f00518115a18818a0d17ff41a777421d0a6398c7bc632bae0d5339d81e42efb66705faf526efecd4169984c1e1685ba5614c34f82213aa964fcd48d50855a13a563bc2d2820610c126c739775923e0a01d419eed79a390e44258bb6a310d68a7c41679d66b57416d33967082797936829b431afd4fa85d280e538a67590ff20e9df2375dc5e72d68a5429157b1febb2697fb4e0d9e6dd7cf27383cdc4") fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0x80000001, 0x2, 0xfffff3d2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000340)) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) syz_usb_connect$cdc_ecm(0x4, 0x62, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x4d, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x29, 0x3, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00'}, {0x5, 0x24, 0x0, 0x3b4}, {0xd, 0x24, 0xf, 0x1, 0xe39, 0x1, 0x80, 0x1f}, [@ncm={0x6, 0x24, 0x1a, 0x7fff, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xa2, 0x20, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x6, 0x50}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x1f, 0x5, 0x80, 0x70, 0x5e}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x4, 0x6}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1409}}]}) (async) syz_usb_ep_write(r2, 0xda, 0xc4, &(0x7f0000000240)="968438e294cca0051b4dcb9042a7000aebf456d7d222f19593bf021be85dfb332aeff55fa177cc3f00518115a18818a0d17ff41a777421d0a6398c7bc632bae0d5339d81e42efb66705faf526efecd4169984c1e1685ba5614c34f82213aa964fcd48d50855a13a563bc2d2820610c126c739775923e0a01d419eed79a390e44258bb6a310d68a7c41679d66b57416d33967082797936829b431afd4fa85d280e538a67590ff20e9df2375dc5e72d68a5429157b1febb2697fb4e0d9e6dd7cf27383cdc4") (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0x80000001, 0x2, 0xfffff3d2}}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) 00:21:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) (async) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 32) fsmount(r4, 0x0, 0x2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x88c0}, 0x20040880) 00:21:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x46ac02, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:00 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xae5, 0xec7d, 0x8, 0x241, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000005, 0x3, 0x4}, 0x48) (async) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x8, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80000001}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @alu={0x7, 0x0, 0xd, 0x3, 0x3, 0x80, 0xfffffffffffffffc}, @ldst={0x3, 0x0, 0x0, 0x8, 0x2, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x6, 0x2, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0, r1, r0, r2, r0, r3, r4, r5]}, 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:21:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000080)="ffdc9ed2667c07287c47a2ad2d3f0202166f17bf72d3272cb9c5fef8765b6dcf9ea7c1ff31298e2be4d40b5eed886b61f7d1247f5453aa06a4e6c24d7c22ed2856978a54d6b36db74b4262beed7c3626e26ae8888f6663bb8e53ba7c7ec4951b7d95f9a31ae3f3825b0381709cd177e221053cea15c8e06f82f4c38a7084fa6b7d359cd576d77876c417b8537748d130b8f01091695dbf846780512fa1d4bf473cb47876be6a9e3f46f9619a66a70c4deadab2e0a54965db9246584864ca26cc795f955bce0b863d56390f3b", 0xcc}) openat$cgroup_int(r0, &(0x7f0000000200)='io.latency\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0xff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x185000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000080)="ffdc9ed2667c07287c47a2ad2d3f0202166f17bf72d3272cb9c5fef8765b6dcf9ea7c1ff31298e2be4d40b5eed886b61f7d1247f5453aa06a4e6c24d7c22ed2856978a54d6b36db74b4262beed7c3626e26ae8888f6663bb8e53ba7c7ec4951b7d95f9a31ae3f3825b0381709cd177e221053cea15c8e06f82f4c38a7084fa6b7d359cd576d77876c417b8537748d130b8f01091695dbf846780512fa1d4bf473cb47876be6a9e3f46f9619a66a70c4deadab2e0a54965db9246584864ca26cc795f955bce0b863d56390f3b", 0xcc}) (async) openat$cgroup_int(r0, &(0x7f0000000200)='io.latency\x00', 0x2, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0xff) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x185000) (async) 00:21:00 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2a201) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101540, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000080)) 00:21:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x200, 0x4, 0xfffffffc, 0x82, r1, 0x0, '\x00', 0x0, r0, 0x4, 0x0, 0x3}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x7f, 0x4, 0x23, @mcast1, @empty, 0x8000, 0x1, 0x200, 0x1000}}) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) r4 = fsmount(r3, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x400, 0x7, 0x4, 0x110, r4, 0x6, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0xf}, 0x48) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x3, 0x2, 0x80000000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000340)) 00:21:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x2, 0x2, 0x1, 0x200}, 0x20, 0x80, 'id0\x00', 'timer0\x00', 0x0, 0x80000000, 0x3ff, 0x10001, 0xffffffff}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:21:01 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x4040, 0x0) r1 = syz_clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_rr_get_interval(r1, &(0x7f0000001380)) pidfd_open(r1, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='$/-\x00', &(0x7f00000000c0)='./file0\x00', r0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x5421, 0x0) syz_clone3(&(0x7f0000000bc0)={0x20044000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0x3f}, &(0x7f00000009c0)=""/132, 0x84, &(0x7f0000000a80)=""/197, &(0x7f0000000b80)=[r1], 0x1, {r0}}, 0x58) r3 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x80002000, &(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0), {0x5}, &(0x7f0000000500)=""/63, 0x3f, &(0x7f0000000540)=""/78, &(0x7f00000005c0)=[0x0, r1, r1, r1, r1], 0x5}, 0x58) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000008c0)={r6, &(0x7f0000000780)="b1732e45214dccdb0c6ff14cbdecd2730bd0e64e3c285c0a8b48fa57d933b6f6861f9407de05202166c5b94091040c31b8fff5f9ee02e905ecd07bc3bbb71ad66705a5c973765b883c2df81544d0ceee8422d11d76c7353b4e21c7791c07c94087b9ec23d67396c86842134dd60fd68d0b070497fb4917cce920410edc58fa1f24e3d511ddac202c08b1d0021dd4ab491c9df56ae0008cc594347b1cbced83d7fc9da58d4f0dd5250322300620e4cfc94fe5a5c6a4e9c9aafba6a44bab93abbaf2f935dd553c451eec3da7982c1e93ab8ea94042a431f2", &(0x7f0000000880)=""/2}, 0x20) syz_clone3(&(0x7f00000006c0)={0x102204000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0xe}, &(0x7f0000000340)=""/154, 0x9a, &(0x7f0000000400)=""/12, &(0x7f0000000680)=[r4, r1], 0x2, {r5}}, 0x58) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="740000c2180010002dbd7000fedbdf251d01000015000200030000e008020000fdc662d1d8f5bdc8050000001500030001000060030300003ff397d2164da9a30100000015000400010000c0050000009bdaa970e923b3940200000015000400040000a002030000d3d0197d2a9ced0204000000"], 0x74}}, 0x4000080) write$6lowpan_enable(r2, &(0x7f0000000040)='1', 0x1) 00:21:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:01 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2a201) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101540, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000080)) 00:21:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) 00:21:01 executing program 0: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000010c0)={0x2, 0x0, {&(0x7f0000000040)=""/4096, 0x1000, &(0x7f0000001040)=""/97, 0x1, 0x1}}, 0x48) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001140), 0x9, 0x2000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000001180)=0x80000000) 00:21:01 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x200, 0x4, 0xfffffffc, 0x82, r1, 0x0, '\x00', 0x0, r0, 0x4, 0x0, 0x3}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x7f, 0x4, 0x23, @mcast1, @empty, 0x8000, 0x1, 0x200, 0x1000}}) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) r4 = fsmount(r3, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x400, 0x7, 0x4, 0x110, r4, 0x6, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0xf}, 0x48) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x3, 0x2, 0x80000000}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) (async) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000000380)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000340)) 00:21:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x2, 0x2, 0x1, 0x200}, 0x20, 0x80, 'id0\x00', 'timer0\x00', 0x0, 0x80000000, 0x3ff, 0x10001, 0xffffffff}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x1, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x2, 0x2, 0x1, 0x200}, 0x20, 0x80, 'id0\x00', 'timer0\x00', 0x0, 0x80000000, 0x3ff, 0x10001, 0xffffffff}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) 00:21:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x1, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x2, 0x2, 0x1, 0x200}, 0x20, 0x80, 'id0\x00', 'timer0\x00', 0x0, 0x80000000, 0x3ff, 0x10001, 0xffffffff}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:21:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:01 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x200, 0x4, 0xfffffffc, 0x82, r1, 0x0, '\x00', 0x0, r0, 0x4, 0x0, 0x3}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x7f, 0x4, 0x23, @mcast1, @empty, 0x8000, 0x1, 0x200, 0x1000}}) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) r4 = fsmount(r3, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x400, 0x7, 0x4, 0x110, r4, 0x6, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0xf}, 0x48) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x3, 0x2, 0x80000000}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000340)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x200, 0x4, 0xfffffffc, 0x82, r1, 0x0, '\x00', 0x0, r0, 0x4, 0x0, 0x3}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x7f, 0x4, 0x23, @mcast1, @empty, 0x8000, 0x1, 0x200, 0x1000}}) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x400, 0x7, 0x4, 0x110, r4, 0x6, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0xf}, 0x48) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x3, 0x2, 0x80000000}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000000380)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000340)) (async) 00:21:01 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x4040, 0x0) (async) r1 = syz_clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_rr_get_interval(r1, &(0x7f0000001380)) pidfd_open(r1, 0x0) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='$/-\x00', &(0x7f00000000c0)='./file0\x00', r0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x5421, 0x0) syz_clone3(&(0x7f0000000bc0)={0x20044000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0x3f}, &(0x7f00000009c0)=""/132, 0x84, &(0x7f0000000a80)=""/197, &(0x7f0000000b80)=[r1], 0x1, {r0}}, 0x58) (async) r3 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x80002000, &(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0), {0x5}, &(0x7f0000000500)=""/63, 0x3f, &(0x7f0000000540)=""/78, &(0x7f00000005c0)=[0x0, r1, r1, r1, r1], 0x5}, 0x58) (async) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r5, 0x0, 0x2) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000008c0)={r6, &(0x7f0000000780)="b1732e45214dccdb0c6ff14cbdecd2730bd0e64e3c285c0a8b48fa57d933b6f6861f9407de05202166c5b94091040c31b8fff5f9ee02e905ecd07bc3bbb71ad66705a5c973765b883c2df81544d0ceee8422d11d76c7353b4e21c7791c07c94087b9ec23d67396c86842134dd60fd68d0b070497fb4917cce920410edc58fa1f24e3d511ddac202c08b1d0021dd4ab491c9df56ae0008cc594347b1cbced83d7fc9da58d4f0dd5250322300620e4cfc94fe5a5c6a4e9c9aafba6a44bab93abbaf2f935dd553c451eec3da7982c1e93ab8ea94042a431f2", &(0x7f0000000880)=""/2}, 0x20) (async) syz_clone3(&(0x7f00000006c0)={0x102204000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0xe}, &(0x7f0000000340)=""/154, 0x9a, &(0x7f0000000400)=""/12, &(0x7f0000000680)=[r4, r1], 0x2, {r5}}, 0x58) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="740000c2180010002dbd7000fedbdf251d01000015000200030000e008020000fdc662d1d8f5bdc8050000001500030001000060030300003ff397d2164da9a30100000015000400010000c0050000009bdaa970e923b3940200000015000400040000a002030000d3d0197d2a9ced0204000000"], 0x74}}, 0x4000080) write$6lowpan_enable(r2, &(0x7f0000000040)='1', 0x1) 00:21:01 executing program 0: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000010c0)={0x2, 0x0, {&(0x7f0000000040)=""/4096, 0x1000, &(0x7f0000001040)=""/97, 0x1, 0x1}}, 0x48) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001140), 0x9, 0x2000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000001180)=0x80000000) 00:21:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x531a00) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x111a42, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2880, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) 00:21:01 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getroute={0x114, 0x1a, 0x200, 0x70bd2b, 0x25dfdbfc, {0xa, 0x80, 0x24, 0x7f, 0xff, 0x3, 0x0, 0x6, 0x1e00}, [@RTA_METRICS={0xee, 0x8, 0x0, 0x1, "d0b5bbe47365f3d346f431c96629b1f0564516e0d2136d47b5cf59a7b056a8e31f50233ffb91791cda46b45daf094a6943d7c1e8c0121ab84121d7fe92f73e5183d0292e753db2a6a555a6056636291a5a8c1bed83e5d16b99a7e3042f595be8edf8fdcc8ba74a01e47bc20381013058f8a45a93c31b22304f81e15b2e8afd2d0c6f15327086b54a082fc370ef36bcdf84d137d43c13fc54a0202066645a42d469e334f9eb9b487510e171adb397e9a297ec1e628ce8ae3afc91832166c7dc51291cfe2c08a2600a917c274c6b0e1fd930299c97680f1cf386467294f597703cf8fe3fe88e0d8f12a918"}, @RTA_PREF={0x5, 0x14, 0x7}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000}, 0x20040045) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x5420) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20403, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 00:21:01 executing program 0: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000010c0)={0x2, 0x0, {&(0x7f0000000040)=""/4096, 0x1000, &(0x7f0000001040)=""/97, 0x1, 0x1}}, 0x48) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000001140), 0x9, 0x2000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000001180)=0x80000000) 00:21:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) 00:21:01 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0x1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:01 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x4040, 0x0) r1 = syz_clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_rr_get_interval(r1, &(0x7f0000001380)) (async) pidfd_open(r1, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='$/-\x00', &(0x7f00000000c0)='./file0\x00', r0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x5421, 0x0) syz_clone3(&(0x7f0000000bc0)={0x20044000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0x3f}, &(0x7f00000009c0)=""/132, 0x84, &(0x7f0000000a80)=""/197, &(0x7f0000000b80)=[r1], 0x1, {r0}}, 0x58) (async) r3 = fsmount(r0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000600)={0x80002000, &(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0), {0x5}, &(0x7f0000000500)=""/63, 0x3f, &(0x7f0000000540)=""/78, &(0x7f00000005c0)=[0x0, r1, r1, r1, r1], 0x5}, 0x58) (async, rerun: 32) r5 = fsmount(0xffffffffffffffff, 0x0, 0x7b) (rerun: 32) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r5}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000001c0)) fsmount(r5, 0x0, 0x2) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000008c0)={r6, &(0x7f0000000780)="b1732e45214dccdb0c6ff14cbdecd2730bd0e64e3c285c0a8b48fa57d933b6f6861f9407de05202166c5b94091040c31b8fff5f9ee02e905ecd07bc3bbb71ad66705a5c973765b883c2df81544d0ceee8422d11d76c7353b4e21c7791c07c94087b9ec23d67396c86842134dd60fd68d0b070497fb4917cce920410edc58fa1f24e3d511ddac202c08b1d0021dd4ab491c9df56ae0008cc594347b1cbced83d7fc9da58d4f0dd5250322300620e4cfc94fe5a5c6a4e9c9aafba6a44bab93abbaf2f935dd553c451eec3da7982c1e93ab8ea94042a431f2", &(0x7f0000000880)=""/2}, 0x20) syz_clone3(&(0x7f00000006c0)={0x102204000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0xe}, &(0x7f0000000340)=""/154, 0x9a, &(0x7f0000000400)=""/12, &(0x7f0000000680)=[r4, r1], 0x2, {r5}}, 0x58) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="740000c2180010002dbd7000fedbdf251d01000015000200030000e008020000fdc662d1d8f5bdc8050000001500030001000060030300003ff397d2164da9a30100000015000400010000c0050000009bdaa970e923b3940200000015000400040000a002030000d3d0197d2a9ced0204000000"], 0x74}}, 0x4000080) (async) write$6lowpan_enable(r2, &(0x7f0000000040)='1', 0x1) 00:21:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x531a00) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x111a42, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2880, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) 00:21:01 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:21:01 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getroute={0x114, 0x1a, 0x200, 0x70bd2b, 0x25dfdbfc, {0xa, 0x80, 0x24, 0x7f, 0xff, 0x3, 0x0, 0x6, 0x1e00}, [@RTA_METRICS={0xee, 0x8, 0x0, 0x1, "d0b5bbe47365f3d346f431c96629b1f0564516e0d2136d47b5cf59a7b056a8e31f50233ffb91791cda46b45daf094a6943d7c1e8c0121ab84121d7fe92f73e5183d0292e753db2a6a555a6056636291a5a8c1bed83e5d16b99a7e3042f595be8edf8fdcc8ba74a01e47bc20381013058f8a45a93c31b22304f81e15b2e8afd2d0c6f15327086b54a082fc370ef36bcdf84d137d43c13fc54a0202066645a42d469e334f9eb9b487510e171adb397e9a297ec1e628ce8ae3afc91832166c7dc51291cfe2c08a2600a917c274c6b0e1fd930299c97680f1cf386467294f597703cf8fe3fe88e0d8f12a918"}, @RTA_PREF={0x5, 0x14, 0x7}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000}, 0x20040045) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x5420) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20403, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getroute={0x114, 0x1a, 0x200, 0x70bd2b, 0x25dfdbfc, {0xa, 0x80, 0x24, 0x7f, 0xff, 0x3, 0x0, 0x6, 0x1e00}, [@RTA_METRICS={0xee, 0x8, 0x0, 0x1, "d0b5bbe47365f3d346f431c96629b1f0564516e0d2136d47b5cf59a7b056a8e31f50233ffb91791cda46b45daf094a6943d7c1e8c0121ab84121d7fe92f73e5183d0292e753db2a6a555a6056636291a5a8c1bed83e5d16b99a7e3042f595be8edf8fdcc8ba74a01e47bc20381013058f8a45a93c31b22304f81e15b2e8afd2d0c6f15327086b54a082fc370ef36bcdf84d137d43c13fc54a0202066645a42d469e334f9eb9b487510e171adb397e9a297ec1e628ce8ae3afc91832166c7dc51291cfe2c08a2600a917c274c6b0e1fd930299c97680f1cf386467294f597703cf8fe3fe88e0d8f12a918"}, @RTA_PREF={0x5, 0x14, 0x7}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000}, 0x20040045) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20403, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) 00:21:01 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:01 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getroute={0x114, 0x1a, 0x200, 0x70bd2b, 0x25dfdbfc, {0xa, 0x80, 0x24, 0x7f, 0xff, 0x3, 0x0, 0x6, 0x1e00}, [@RTA_METRICS={0xee, 0x8, 0x0, 0x1, "d0b5bbe47365f3d346f431c96629b1f0564516e0d2136d47b5cf59a7b056a8e31f50233ffb91791cda46b45daf094a6943d7c1e8c0121ab84121d7fe92f73e5183d0292e753db2a6a555a6056636291a5a8c1bed83e5d16b99a7e3042f595be8edf8fdcc8ba74a01e47bc20381013058f8a45a93c31b22304f81e15b2e8afd2d0c6f15327086b54a082fc370ef36bcdf84d137d43c13fc54a0202066645a42d469e334f9eb9b487510e171adb397e9a297ec1e628ce8ae3afc91832166c7dc51291cfe2c08a2600a917c274c6b0e1fd930299c97680f1cf386467294f597703cf8fe3fe88e0d8f12a918"}, @RTA_PREF={0x5, 0x14, 0x7}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000}, 0x20040045) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20403, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) 00:21:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x34, 0x26, 0x10, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0xa, 0xffe0}, {0xb, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x400d0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x24}}, 0x0) 00:21:01 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0x1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) 00:21:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x531a00) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x111a42, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2880, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x531a00) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x111a42, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2880, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) 00:21:01 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:21:01 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:21:01 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x2, 0x13, &(0x7f0000000000)=""/45) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x105480) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x34, 0x26, 0x10, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0xa, 0xffe0}, {0xb, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x400d0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x24}}, 0x0) 00:21:01 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, r0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) 00:21:01 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:21:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x6040) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:21:01 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x2, 0x13, &(0x7f0000000000)=""/45) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) semctl$SEM_INFO(0xffffffffffffffff, 0x2, 0x13, &(0x7f0000000000)=""/45) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) 00:21:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x34, 0x26, 0x10, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0xa, 0xffe0}, {0xb, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x400d0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x34, 0x26, 0x10, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0xa, 0xffe0}, {0xb, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x400d0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x24}}, 0x0) (async) 00:21:01 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, r0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (rerun: 64) 00:21:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x105480) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x6040) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:21:01 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x67a}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80}, @alu={0x4, 0x0, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffffc}, @generic={0x2, 0xb, 0x4, 0x9, 0x20}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x1, 0x8, 0x8, 0xe1c9, 0x80}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x14341d9}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xdb, &(0x7f0000000280)=""/219, 0x40f00, 0x8, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000140)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x7, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1, r1, r1, r1, r1, r1]}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) fsmount(r1, 0x0, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:21:01 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x2, 0x13, &(0x7f0000000000)=""/45) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) semctl$SEM_INFO(0xffffffffffffffff, 0x2, 0x13, &(0x7f0000000000)=""/45) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) 00:21:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x20004004) socketpair(0x1a, 0x1, 0x3ff, &(0x7f0000000140)={0xffffffffffffffff}) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x3f, &(0x7f0000000080)=""/63) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delvlan={0x68, 0x71, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x23}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x5}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xe6}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x4000001) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x6040) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:21:01 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) write$smackfs_labels_list(0xffffffffffffffff, &(0x7f0000000000)={[{'\xa8'}, {'{;-\xf5!&}]*!%$,&{/^\xdb'}, {}, {'/dev/ubi_ctrl\x00'}]}, 0x26) 00:21:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x105480) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x105480) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) 00:21:01 executing program 5: connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x1, 0xff, 0x4}}, 0x18) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:01 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x67a}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80}, @alu={0x4, 0x0, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffffc}, @generic={0x2, 0xb, 0x4, 0x9, 0x20}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x1, 0x8, 0x8, 0xe1c9, 0x80}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x14341d9}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xdb, &(0x7f0000000280)=""/219, 0x40f00, 0x8, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000140)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x7, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1, r1, r1, r1, r1, r1]}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) fsmount(r1, 0x0, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x67a}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80}, @alu={0x4, 0x0, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffffc}, @generic={0x2, 0xb, 0x4, 0x9, 0x20}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x1, 0x8, 0x8, 0xe1c9, 0x80}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x14341d9}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xdb, &(0x7f0000000280)=""/219, 0x40f00, 0x8, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000140)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x7, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1, r1, r1, r1, r1, r1]}, 0x80) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) (async) fsmount(r1, 0x0, 0x2) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0, r3) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:21:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x44c200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x1, 0xa30, 0x6, 0x0, 0x2}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) 00:21:01 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) write$smackfs_labels_list(0xffffffffffffffff, &(0x7f0000000000)={[{'\xa8'}, {'{;-\xf5!&}]*!%$,&{/^\xdb'}, {}, {'/dev/ubi_ctrl\x00'}]}, 0x26) 00:21:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:01 executing program 5: connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x1, 0xff, 0x4}}, 0x18) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:01 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x67a}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80}, @alu={0x4, 0x0, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffffc}, @generic={0x2, 0xb, 0x4, 0x9, 0x20}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x1, 0x8, 0x8, 0xe1c9, 0x80}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x14341d9}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xdb, &(0x7f0000000280)=""/219, 0x40f00, 0x8, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000140)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x7, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1, r1, r1, r1, r1, r1]}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) fsmount(r1, 0x0, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x67a}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80}, @alu={0x4, 0x0, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffffc}, @generic={0x2, 0xb, 0x4, 0x9, 0x20}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x1, 0x8, 0x8, 0xe1c9, 0x80}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x14341d9}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xdb, &(0x7f0000000280)=""/219, 0x40f00, 0x8, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000140)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x7, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1, r1, r1, r1, r1, r1]}, 0x80) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) (async) fsmount(r1, 0x0, 0x2) (async) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000600)) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0, r3) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:21:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x20004004) socketpair(0x1a, 0x1, 0x3ff, &(0x7f0000000140)={0xffffffffffffffff}) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x3f, &(0x7f0000000080)=""/63) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delvlan={0x68, 0x71, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x23}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x5}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xe6}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x4000001) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:01 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (rerun: 32) write$smackfs_labels_list(0xffffffffffffffff, &(0x7f0000000000)={[{'\xa8'}, {'{;-\xf5!&}]*!%$,&{/^\xdb'}, {}, {'/dev/ubi_ctrl\x00'}]}, 0x26) 00:21:01 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x44c200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x1, 0xa30, 0x6, 0x0, 0x2}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) 00:21:01 executing program 5: connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x1, 0xff, 0x4}}, 0x18) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:01 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0x0, 0x7ff, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x88000) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000180)=""/219) 00:21:01 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:02 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x44c200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x1, 0xa30, 0x6, 0x0, 0x2}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x44c200) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x1, 0xa30, 0x6, 0x0, 0x2}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) (async) 00:21:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000000)) 00:21:02 executing program 5: bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r0, &(0x7f0000000200)={0x4}, r0, 0x1, 0x0, 0x1}, 0x81) r1 = fsmount(r0, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000000c0)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x9f3, 0x9, 0xb, 0x10, "3f8503fd8b6535df6c5e312937a6f23aab9aba209480ea90fba2f82a7b5a9a9728d5916fafb222d0e23925c401c4c21f62f3026bf6cca250ff2afe52f8dab2ab", "3a5aea28d52352a5b5729832fd79a9a56e201ef6f87192aa89a8a416d536cca4", [0x8, 0x107]}) 00:21:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x422702) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0x0, 0x7ff, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x88000) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000180)=""/219) 00:21:02 executing program 2: ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000140)={0x3f, 0x400, 0x8, 0x4, 0x2, [0x0, 0x7ff, 0x8, 0x1], [0x3, 0x9, 0x101, 0x5], [0xcf, 0x3, 0x100, 0x2], [0x1, 0xffff, 0xaab, 0xf9b]}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x1, 0x9d, 0x3, 0xfffffffd}, 0x5, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x2, 0x9, 0x0, 0x3}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x1f, 0x1000, 0x10001, 0xd7, 0x3, [0x4, 0x7fffffff, 0x1], [0x1, 0x0, 0x7, 0x400], [0x0, 0xfffffff7, 0x0, 0x101], [0x8, 0xe9, 0x9, 0x8000]}) 00:21:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x422702) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x422702) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) 00:21:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000000)) 00:21:02 executing program 5: bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r0, &(0x7f0000000200)={0x4}, r0, 0x1, 0x0, 0x1}, 0x81) r1 = fsmount(r0, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000000c0)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x9f3, 0x9, 0xb, 0x10, "3f8503fd8b6535df6c5e312937a6f23aab9aba209480ea90fba2f82a7b5a9a9728d5916fafb222d0e23925c401c4c21f62f3026bf6cca250ff2afe52f8dab2ab", "3a5aea28d52352a5b5729832fd79a9a56e201ef6f87192aa89a8a416d536cca4", [0x8, 0x107]}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r0, &(0x7f0000000200)={0x4}, r0, 0x1, 0x0, 0x1}, 0x81) (async) fsmount(r0, 0x1, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000000c0)) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x9f3, 0x9, 0xb, 0x10, "3f8503fd8b6535df6c5e312937a6f23aab9aba209480ea90fba2f82a7b5a9a9728d5916fafb222d0e23925c401c4c21f62f3026bf6cca250ff2afe52f8dab2ab", "3a5aea28d52352a5b5729832fd79a9a56e201ef6f87192aa89a8a416d536cca4", [0x8, 0x107]}) (async) 00:21:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x20004004) (async) socketpair(0x1a, 0x1, 0x3ff, &(0x7f0000000140)={0xffffffffffffffff}) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x3f, &(0x7f0000000080)=""/63) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delvlan={0x68, 0x71, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x23}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x5}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xe6}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x4000001) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0x0, 0x7ff, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x88000) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000180)=""/219) 00:21:02 executing program 2: ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000140)={0x3f, 0x400, 0x8, 0x4, 0x2, [0x0, 0x7ff, 0x8, 0x1], [0x3, 0x9, 0x101, 0x5], [0xcf, 0x3, 0x100, 0x2], [0x1, 0xffff, 0xaab, 0xf9b]}) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x1, 0x9d, 0x3, 0xfffffffd}, 0x5, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x2, 0x9, 0x0, 0x3}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (rerun: 64) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x1f, 0x1000, 0x10001, 0xd7, 0x3, [0x4, 0x7fffffff, 0x1], [0x1, 0x0, 0x7, 0x400], [0x0, 0xfffffff7, 0x0, 0x101], [0x8, 0xe9, 0x9, 0x8000]}) 00:21:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000000)) (async) 00:21:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x422702) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:02 executing program 5: bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r0, &(0x7f0000000200)={0x4}, r0, 0x1, 0x0, 0x1}, 0x81) r1 = fsmount(r0, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000000c0)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x9f3, 0x9, 0xb, 0x10, "3f8503fd8b6535df6c5e312937a6f23aab9aba209480ea90fba2f82a7b5a9a9728d5916fafb222d0e23925c401c4c21f62f3026bf6cca250ff2afe52f8dab2ab", "3a5aea28d52352a5b5729832fd79a9a56e201ef6f87192aa89a8a416d536cca4", [0x8, 0x107]}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r0, &(0x7f0000000200)={0x4}, r0, 0x1, 0x0, 0x1}, 0x81) (async) fsmount(r0, 0x1, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000000c0)) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x9f3, 0x9, 0xb, 0x10, "3f8503fd8b6535df6c5e312937a6f23aab9aba209480ea90fba2f82a7b5a9a9728d5916fafb222d0e23925c401c4c21f62f3026bf6cca250ff2afe52f8dab2ab", "3a5aea28d52352a5b5729832fd79a9a56e201ef6f87192aa89a8a416d536cca4", [0x8, 0x107]}) (async) 00:21:02 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x4}}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x100080, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) 00:21:02 executing program 2: ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000140)={0x3f, 0x400, 0x8, 0x4, 0x2, [0x0, 0x7ff, 0x8, 0x1], [0x3, 0x9, 0x101, 0x5], [0xcf, 0x3, 0x100, 0x2], [0x1, 0xffff, 0xaab, 0xf9b]}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x1, 0x9d, 0x3, 0xfffffffd}, 0x5, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x2, 0x9, 0x0, 0x3}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x1f, 0x1000, 0x10001, 0xd7, 0x3, [0x4, 0x7fffffff, 0x1], [0x1, 0x0, 0x7, 0x400], [0x0, 0xfffffff7, 0x0, 0x101], [0x8, 0xe9, 0x9, 0x8000]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000140)={0x3f, 0x400, 0x8, 0x4, 0x2, [0x0, 0x7ff, 0x8, 0x1], [0x3, 0x9, 0x101, 0x5], [0xcf, 0x3, 0x100, 0x2], [0x1, 0xffff, 0xaab, 0xf9b]}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x1, 0x9d, 0x3, 0xfffffffd}, 0x5, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x2, 0x9, 0x0, 0x3}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x1f, 0x1000, 0x10001, 0xd7, 0x3, [0x4, 0x7fffffff, 0x1], [0x1, 0x0, 0x7, 0x400], [0x0, 0xfffffff7, 0x0, 0x101], [0x8, 0xe9, 0x9, 0x8000]}) (async) 00:21:02 executing program 3: sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 00:21:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:02 executing program 4: write$vhost_msg(0xffffffffffffffff, &(0x7f00000002c0)={0x1, {&(0x7f0000000200), 0x0, &(0x7f0000000240)=""/71, 0x2, 0x2}}, 0x48) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x630940, 0x0) fsmount(r0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000000, 0x100000001, 0x0, 0x0, 0x6, 0x8, "deaa79b557a73e386721a5ff6473904e7458df70d95954d76de735511127b024729960e43290854f7acd885f4e8f6b5d6fe9e810d8aa7744686a2e3021374be6", "78fffa2b96c8cfe89fccdde8cb49c8f1fd55ce2dc4620423b95a953d14e97ccbf028cfda6ca99819e3608f79cffb5293a1a26acf9f7c6678b176a4969eae353f", "8e7ad00a503aefb144049b52bc60dd2ba4962bb058547696a418848abd50ebda", [0x2, 0x40000000]}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x5421, 0x0) 00:21:02 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x4}}, 0x18) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x100080, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) 00:21:02 executing program 3: sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 00:21:02 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x6, 0x4, 0x8}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:21:02 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x4}}, 0x18) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x100080, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='/dev/snd/timer\x00', 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x2, 0x0) 00:21:02 executing program 4: write$vhost_msg(0xffffffffffffffff, &(0x7f00000002c0)={0x1, {&(0x7f0000000200), 0x0, &(0x7f0000000240)=""/71, 0x2, 0x2}}, 0x48) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x630940, 0x0) fsmount(r0, 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async, rerun: 64) fsmount(r1, 0x0, 0x2) (rerun: 64) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000000, 0x100000001, 0x0, 0x0, 0x6, 0x8, "deaa79b557a73e386721a5ff6473904e7458df70d95954d76de735511127b024729960e43290854f7acd885f4e8f6b5d6fe9e810d8aa7744686a2e3021374be6", "78fffa2b96c8cfe89fccdde8cb49c8f1fd55ce2dc4620423b95a953d14e97ccbf028cfda6ca99819e3608f79cffb5293a1a26acf9f7c6678b176a4969eae353f", "8e7ad00a503aefb144049b52bc60dd2ba4962bb058547696a418848abd50ebda", [0x2, 0x40000000]}) (async, rerun: 64) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x5421, 0x0) 00:21:02 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r0, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0x7fff, 0x7f, 0x9}) fsmount(r1, 0x0, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x50, 0x8, 0x5, 0xffe1, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x80000001, 0xf7, &(0x7f0000000080)=""/247, 0x41100, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x1, 0x9, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:02 executing program 3: sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 00:21:02 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) r2 = fsmount(r0, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0x7fff, 0x7f, 0x9}) (async) fsmount(r1, 0x0, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x50, 0x8, 0x5, 0xffe1, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x80000001, 0xf7, &(0x7f0000000080)=""/247, 0x41100, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x1, 0x9, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:02 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x6, 0x4, 0x8}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x6, 0x4, 0x8}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) 00:21:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x422f83) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:21:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000080)=0x4) fsmount(r1, 0x0, 0x88) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:21:02 executing program 4: write$vhost_msg(0xffffffffffffffff, &(0x7f00000002c0)={0x1, {&(0x7f0000000200), 0x0, &(0x7f0000000240)=""/71, 0x2, 0x2}}, 0x48) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x630940, 0x0) fsmount(r0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) (async) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000000, 0x100000001, 0x0, 0x0, 0x6, 0x8, "deaa79b557a73e386721a5ff6473904e7458df70d95954d76de735511127b024729960e43290854f7acd885f4e8f6b5d6fe9e810d8aa7744686a2e3021374be6", "78fffa2b96c8cfe89fccdde8cb49c8f1fd55ce2dc4620423b95a953d14e97ccbf028cfda6ca99819e3608f79cffb5293a1a26acf9f7c6678b176a4969eae353f", "8e7ad00a503aefb144049b52bc60dd2ba4962bb058547696a418848abd50ebda", [0x2, 0x40000000]}) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x5421, 0x0) 00:21:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x2) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x79) fsmount(0xffffffffffffffff, 0x1, 0x87) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) socketpair(0x28, 0x5, 0x6, &(0x7f00000000c0)) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x304, 0x70bd2d, 0x25dfd3fd}, 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x811) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x422f83) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x422f83) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:21:02 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x6, 0x4, 0x8}) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 00:21:02 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(r0, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0x7fff, 0x7f, 0x9}) fsmount(r1, 0x0, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x50, 0x8, 0x5, 0xffe1, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x80000001, 0xf7, &(0x7f0000000080)=""/247, 0x41100, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x1, 0x9, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r0, 0x0, 0x1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0x7fff, 0x7f, 0x9}) (async) fsmount(r1, 0x0, 0x2) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x50, 0x8, 0x5, 0xffe1, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x80000001, 0xf7, &(0x7f0000000080)=""/247, 0x41100, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x1, 0x9, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0]}, 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) 00:21:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x422f83) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:21:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) fsmount(0xffffffffffffffff, 0x0, 0x2) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x79) (async) fsmount(0xffffffffffffffff, 0x1, 0x87) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) socketpair(0x28, 0x5, 0x6, &(0x7f00000000c0)) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x304, 0x70bd2d, 0x25dfd3fd}, 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x811) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000080)=0x4) (async) fsmount(r1, 0x0, 0x88) (async) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:21:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x92101, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:21:02 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80402) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:21:02 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x64e280) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) syz_open_dev$sndmidi(&(0x7f0000000040), 0x4, 0x161c83) 00:21:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x2) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) (async) fsmount(0xffffffffffffffff, 0x0, 0x79) fsmount(0xffffffffffffffff, 0x1, 0x87) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) socketpair(0x28, 0x5, 0x6, &(0x7f00000000c0)) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x304, 0x70bd2d, 0x25dfd3fd}, 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x811) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x92101, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:21:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000080)=0x4) fsmount(r1, 0x0, 0x88) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000040)=0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r2, 0x0, 0x2) (async) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000080)=0x4) (async) fsmount(r1, 0x0, 0x88) (async) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000040)=0x2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) 00:21:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80402) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:21:02 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x92101, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:21:02 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x64e280) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x4, 0x161c83) 00:21:02 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0x1, &(0x7f0000000000)="e6f212d347a64a1318366f6c0659f1375978b54387c7a1de29f03784f3cd34da4429cb7cce5d7b88f4d5c263c2a883c3bb798ee500fb53699f53eeb1a9e96cd6553c90b80aba03fb2fa3a1fb75c205ba1c7b40537834558a2b0b38248295f1dc9d9b31806962642b4f5fed723443d76e360b1e1a6dde181c27f795e3c0138da7d3c98fdc62c42572041175760c94420c25838ffd1eacec27c1e8064f43af149e4c9e93497a7724bad2008a60f081e942ddd25126c52e9635da702c00", &(0x7f00000000c0)=""/143, 0x4}, 0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80402) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80402) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:21:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:21:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x208080) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000000)={0xfffffffc, 0xc, [0x3, 0x9, 0x3]}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:02 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) 00:21:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x729000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:21:02 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0x1, &(0x7f0000000000)="e6f212d347a64a1318366f6c0659f1375978b54387c7a1de29f03784f3cd34da4429cb7cce5d7b88f4d5c263c2a883c3bb798ee500fb53699f53eeb1a9e96cd6553c90b80aba03fb2fa3a1fb75c205ba1c7b40537834558a2b0b38248295f1dc9d9b31806962642b4f5fed723443d76e360b1e1a6dde181c27f795e3c0138da7d3c98fdc62c42572041175760c94420c25838ffd1eacec27c1e8064f43af149e4c9e93497a7724bad2008a60f081e942ddd25126c52e9635da702c00", &(0x7f00000000c0)=""/143, 0x4}, 0x20) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:03 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x64e280) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x4, 0x161c83) 00:21:03 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x729000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) 00:21:03 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x208080) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000000)={0xfffffffc, 0xc, [0x3, 0x9, 0x3]}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) 00:21:03 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:21:03 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={0x1, &(0x7f0000000000)="e6f212d347a64a1318366f6c0659f1375978b54387c7a1de29f03784f3cd34da4429cb7cce5d7b88f4d5c263c2a883c3bb798ee500fb53699f53eeb1a9e96cd6553c90b80aba03fb2fa3a1fb75c205ba1c7b40537834558a2b0b38248295f1dc9d9b31806962642b4f5fed723443d76e360b1e1a6dde181c27f795e3c0138da7d3c98fdc62c42572041175760c94420c25838ffd1eacec27c1e8064f43af149e4c9e93497a7724bad2008a60f081e942ddd25126c52e9635da702c00", &(0x7f00000000c0)=""/143, 0x4}, 0x20) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:03 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x208080) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000000)={0xfffffffc, 0xc, [0x3, 0x9, 0x3]}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x208080) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000000)={0xfffffffc, 0xc, [0x3, 0x9, 0x3]}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) 00:21:03 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x500) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x103440, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) 00:21:03 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 00:21:03 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x729000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x729000, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) 00:21:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000000)) 00:21:03 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x500) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x103440, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x500) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x103440, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) (async) 00:21:03 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:21:03 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) r2 = fsmount(r1, 0x0, 0x71) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) fsmount(r4, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r4, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 00:21:03 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) 00:21:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000000)) (async) 00:21:03 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0}) fsmount(r1, 0x0, 0x2) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r3 = io_uring_setup(0x668b, &(0x7f0000000000)={0x0, 0x9697, 0x1, 0x1, 0xa5, 0x0, r0}) io_uring_setup(0x165d, &(0x7f0000000200)={0x0, 0xb0eb, 0x1, 0x0, 0x34, 0x0, r3}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r3, 0x10000000) 00:21:03 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x242640) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) 00:21:03 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) r2 = fsmount(r1, 0x0, 0x71) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r4, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 00:21:03 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x500) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x103440, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x500) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x103440, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) (async) 00:21:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) (async) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000000)) (async) 00:21:03 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) 00:21:03 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x242640) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x242640) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:21:03 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0}) fsmount(r1, 0x0, 0x2) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async, rerun: 32) r3 = io_uring_setup(0x668b, &(0x7f0000000000)={0x0, 0x9697, 0x1, 0x1, 0xa5, 0x0, r0}) io_uring_setup(0x165d, &(0x7f0000000200)={0x0, 0xb0eb, 0x1, 0x0, 0x34, 0x0, r3}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r3, 0x10000000) 00:21:03 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5420) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) r2 = fsmount(r1, 0x0, 0x71) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) (async) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r4}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r4, 0x0, 0x2) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r4, r2}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r1, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 00:21:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x47d9, &(0x7f0000000000)={0x0, 0x6d47, 0x20, 0x0, 0xbe}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r1, 0x8000000) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:03 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)) fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000140)=""/45) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2, r1}, 0xc) fsmount(r1, 0x0, 0x2) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsopen(&(0x7f0000000100)='ntfs3\x00', 0x0) fsmount(r3, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000040)={0x7, 0xb38f, 0xc0000000, 0x0, 0x5}) 00:21:03 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)={0x0}) fsmount(r1, 0x0, 0x2) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) r3 = io_uring_setup(0x668b, &(0x7f0000000000)={0x0, 0x9697, 0x1, 0x1, 0xa5, 0x0, r0}) io_uring_setup(0x165d, &(0x7f0000000200)={0x0, 0xb0eb, 0x1, 0x0, 0x34, 0x0, r3}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r3, 0x10000000) 00:21:03 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x242640) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x242640) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async) 00:21:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x47d9, &(0x7f0000000000)={0x0, 0x6d47, 0x20, 0x0, 0xbe}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r1, 0x8000000) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:03 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x308, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x13, 0x1, '/dev/snd/timer\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20048000) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r2}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r2, 0x0, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0x5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '/'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc5}, 0x4050) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x5420) [ 1263.309066][T13607] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018 [ 1263.311353][T13607] Mem abort info: [ 1263.312206][T13607] ESR = 0x0000000096000006 [ 1263.313257][T13607] EC = 0x25: DABT (current EL), IL = 32 bits [ 1263.314652][T13607] SET = 0, FnV = 0 [ 1263.315513][T13607] EA = 0, S1PTW = 0 [ 1263.316406][T13607] FSC = 0x06: level 2 translation fault [ 1263.323815][T13607] Data abort info: [ 1263.324834][T13607] ISV = 0, ISS = 0x00000006 [ 1263.326082][T13607] CM = 0, WnR = 0 [ 1263.327473][T13607] user pgtable: 4k pages, 48-bit VAs, pgdp=000000012074b000 00:21:03 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x698880, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 00:21:03 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x329800) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x241, r2}) 00:21:03 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x30200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x2, 0x1, 0x1, 0x5}, 0x9, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x40, 0x2, 0x2, 0x9}) fsmount(r1, 0x0, 0x2) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'rwm\x00'}, 0xa) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) [ 1263.333485][T13607] [0000000000000018] pgd=0800000121699003, p4d=0800000121699003, pud=08000001205c1003, pmd=0000000000000000 [ 1263.337117][T13607] Internal error: Oops: 96000006 [#1] PREEMPT SMP [ 1263.338714][T13607] Modules linked in: [ 1263.339655][T13607] CPU: 0 PID: 13607 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-01618-g680fb5b009e8 #0 [ 1263.342205][T13607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/20/2022 [ 1263.344648][T13607] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1263.346573][T13607] pc : ntfs_update_mftmirr+0x3c/0x328 [ 1263.347928][T13607] lr : ntfs_update_mftmirr+0x30/0x328 [ 1263.349229][T13607] sp : ffff80001bf93c50 [ 1263.350260][T13607] x29: ffff80001bf93c60 x28: 00000000000a0003 x27: 0000000000000000 [ 1263.352200][T13607] x26: 0000000000000000 x25: 0000000000000000 x24: ffff0000c053f770 [ 1263.354145][T13607] x23: 0000000000000000 x22: ffff0000c053f770 x21: ffff0000e0e643a8 [ 1263.356115][T13607] x20: 0000000000000000 x19: ffff0000c87b4000 x18: 0000000000000000 [ 1263.358038][T13607] x17: ffff80000dcfd698 x16: ffff80000db3b658 x15: ffff0000e1aecec0 [ 1263.359986][T13607] x14: 0000000000020016 x13: 00000000f0000000 x12: 00000000f0000000 [ 1263.361953][T13607] x11: ff80800008bfd55c x10: 0000000000000000 x9 : ffff800008bfd55c [ 1263.363915][T13607] x8 : ffff0000e1aecec0 x7 : ffff8000084b2594 x6 : 0000000000000000 [ 1263.365880][T13607] x5 : 0000000000240000 x4 : 0000000000100000 x3 : 0000000000000000 [ 1263.367816][T13607] x2 : ffff0000e1aecec0 x1 : 0000000000000000 x0 : 0000000000000000 [ 1263.369757][T13607] Call trace: 00:21:03 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x30200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x2, 0x1, 0x1, 0x5}, 0x9, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x40, 0x2, 0x2, 0x9}) fsmount(r1, 0x0, 0x2) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'rwm\x00'}, 0xa) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) fsmount(r3, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x30200, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x2, 0x1, 0x1, 0x5}, 0x9, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x40, 0x2, 0x2, 0x9}) (async) fsmount(r1, 0x0, 0x2) (async) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'rwm\x00'}, 0xa) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x541b, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x7b) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r3}, 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000001c0)) (async) fsmount(r3, 0x0, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) (async) 00:21:03 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x329800) (async) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x241, r2}) 00:21:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = io_uring_setup(0x47d9, &(0x7f0000000000)={0x0, 0x6d47, 0x20, 0x0, 0xbe}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r1, 0x8000000) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:21:03 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x698880, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5421, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r1}, 0xc) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)) fsmount(r1, 0x0, 0x2) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) [ 1263.370526][T13607] ntfs_update_mftmirr+0x3c/0x328 [ 1263.371789][T13607] put_ntfs+0xec/0x13c [ 1263.372793][T13607] ntfs_fs_free+0x30/0x70 [ 1263.373924][T13607] put_fs_context+0x80/0x278 [ 1263.375093][T13607] fscontext_release+0x30/0x4c [ 1263.376291][T13607] __fput+0x198/0x3bc [ 1263.377332][T13607] ____fput+0x20/0x30 [ 1263.378333][T13607] task_work_run+0xc4/0x208 [ 1263.379474][T13607] do_notify_resume+0x174/0x1d0 [ 1263.380704][T13607] el0_svc+0x9c/0x14c [ 1263.381705][T13607] el0t_64_sync_handler+0x84/0xf0 [ 1263.382966][T13607] el0t_64_sync+0x18c/0x190 [ 1263.384148][T13607] Code: 97da7930 f940027a b9405277 2a1f03e0 (f9400f55) [ 1263.385951][T13607] ---[ end trace 0000000000000000 ]--- [ 1263.954671][T13607] Kernel panic - not syncing: Oops: Fatal exception [ 1263.956408][T13607] SMP: stopping secondary CPUs [ 1263.957649][T13607] Kernel Offset: disabled [ 1263.958728][T13607] CPU features: 0x0000,0081c021,09805c80 [ 1263.960159][T13607] Memory Limit: none [ 1264.494942][T13607] Rebooting in 86400 seconds..