) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) [ 981.622185] serio: Serial port pts0 [ 981.652267] serio: Serial port pts2 21:02:34 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x478, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:34 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:02:34 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)={0x62, 0x5}) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x401, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) getgid() setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x1, 0x9, 0xa5c, 0x5, 0x0, 0x100, 0x10, 0x4, 0x2, 0xe1, 0x7, 0x3, 0x8000, 0xffffffffffff27c9, 0x6f, 0x400, 0x3f, 0x1, 0xf25, 0x9, 0x9, 0x3ff, 0x0, 0x1000, 0x4, 0x3, 0x1, 0x9, 0xeaa, 0x5, 0x41ab7fa6, 0x0, 0x9322, 0x7, 0x80, 0x16e1a0, 0x0, 0x5, 0x1, @perf_bp, 0x985, 0xcfb1, 0x200, 0x3, 0x8}, 0xffffffffffffffff, 0x9, r0, 0x8) 21:02:34 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xca, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:34 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xd4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:34 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x362, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, &(0x7f0000040000)) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:02:37 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x596, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:37 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x10080, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101000, 0x0) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) 21:02:37 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2c5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:37 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:02:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 21:02:37 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x55d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:37 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x83f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 984.738779] serio: Serial port pts2 [ 984.888455] serio: Serial port pts0 21:02:38 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x45b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:38 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3b9, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:38 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8fb, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:38 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3a2, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, &(0x7f0000040000)) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:02:40 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x293, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:40 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x342, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:40 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000440)={r4, @in6={{0xa, 0x4e23, 0x9f4, @loopback, 0x4}}, 0x3, 0x800}, &(0x7f0000000100)=0x90) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:02:40 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(r0, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) [ 987.773986] serio: Serial port pts2 21:02:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 21:02:40 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x34d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:40 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:40 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7da, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 988.002019] serio: Serial port pts0 21:02:41 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x977, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:41 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5e8, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:41 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6ac, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:02:43 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8f0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:43 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xf3, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000002c0)=""/75, 0x4b}, {&(0x7f0000000000)=""/9, 0x9}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000440)=""/73, 0x49}], 0x5, 0xe6) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:02:43 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 990.832244] serio: Serial port pts2 21:02:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 21:02:44 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4ef, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:44 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7b9, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:02:44 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6e2, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 991.180221] serio: Serial port pts0 21:02:44 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x217, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 991.278787] serio: Serial port pts2 21:02:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:02:44 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa7, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:44 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x462, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 991.507810] serio: Serial port pts0 21:02:44 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x898, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:44 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(r0, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x150) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) bind$packet(r0, &(0x7f0000000000)={0x11, 0x1f, r1, 0x1, 0x4, 0x6, @local}, 0x14) 21:02:44 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x792, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:47 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:02:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 21:02:47 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa7c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:47 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x1e7afa8, 0x88caffff00034000) 21:02:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) [ 994.312331] serio: Serial port pts0 21:02:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1f4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 994.352371] serio: Serial port pts2 21:02:47 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4ac, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:47 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x8000, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f00000003c0)=[{}], 0x1, 0xac0, &(0x7f0000000840)={0x8}, 0x8) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x7, 0x4) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000440)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x50, r0, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000380)=0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000240)={'nat\x00', 0x0, 0x3, 0x8, [], 0x1, &(0x7f0000000100)=[{}], &(0x7f00000001c0)=""/8}, &(0x7f00000002c0)=0x78) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:02:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x62a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:47 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7c3, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa8, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:48 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa3c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 21:02:50 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x91b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) 21:02:50 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xc, 0xb, 0x10000000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:02:50 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa3a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:50 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000240)="af0edffdc6a888a6b4144d7594d46b071c65a6c773f3101d24cbb3646ae899e245a015ca3f313fef336b31d73b2485cbf0be9ecfaba89b7a8b72f5df78733af1695c0b4101cea4ae167c0a3a4ab06f79a8d4ea7c89e24ca2acc30f8cffe274b964497502d708359d53c45d16ee31d2339a006e", 0x73, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000009c0), 0x4) rt_sigsuspend(&(0x7f00000002c0)={0x1000}, 0x8) r4 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000800)={'syz', 0x0}, &(0x7f0000000840)="f98e1775be4b7c1e3630d5973ddd93b77e95e83644c6863318bd1a6248a485765c73008106c97f2e4d6d013d4b40dd3d2329b219ada5a9ff03b7a8ab669077e0bfaf08e59e01543d888eef6ffe58fce8a0a5b3dfdd1ca3267822130354dcdd0994782ef369a88deb1850abd273aabbabfe3d4db8ab8138fa874c131e2775b40e7b7b", 0x82, 0x0) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000380)=[{&(0x7f0000000440)="50d2e58340f0bb60295e7d4f2ca9281b76efde6cc454d5372da6ee3893006eaf1d49c79fb4ea7feecdf5d79fe2dc564c5d60445c363b6f55b133f7aa6c9979bd8311b497bf54a0bd3b5b4b11c1bcf8c5eb2f33a103010e9f30be284bb9e3b84bd657c6d2a80c0facb9db398de9a8dfba4d9c5385b74d875e54678628937eb2d1cf70e6d538913e4268802c5ff692aeb3d629d38cdb1fd48000f11a7f0df0dd57bbaf5db30cc2de25d9eebea14fc303d5a732992995ba2b69053236138bf0d187f8d7fd1d03b96d879f88dece1bf2decabd01c3dcfbddeb406109da83592b563bef289d7c193763349cd08df8c857af1424698d", 0xf3}, {&(0x7f0000000540)="2ea2e6b5a73f7cf9325a3799a2495374c3ed1e7440778b97070e90e140d144a127b90b346828eabb4ef053854e51c3dc2fafe66b52e0a85f200a226db477418d23d944ca879236d3300cc033b601882585e0327f0a365bebb108cad7aff7632179ba53542f7ea6dc80e006003413b8bffbbeaeb3f615cbf4fa35d9dbd754ef71edf9f29e4974a3bcee170787a57cfbb8adfff5", 0x93}, {&(0x7f0000000600)="2b1d4e3e57bbc7dd0b7ee754f4f76aa8c53568d940342b72310a1834618e0501eff7f1f75d60f9084b3d85e4e547875b73e6b8a947cf3bd8ec5642e9aae99cebba58acc3c46b5ca5933e5423a6568595f38fa1eca9bbc76b64a192ff8ed69eafee6048bce1b69c908c375b2fe7003b7591ab9c5029eea9bf6c7cc799d3bef1cbc548eaf1f906454be4ceff35e3feecb3b27c016419d1e30e75f2b7a4c3457e1897636322dacf0f309e6689f2be726b345462c36a802445bdacdee1e7375bb8b865696e317bb79a295e59352d5894", 0xce}, {&(0x7f00000001c0)="63de02daaf5befe71f82a319d1a45c27", 0x10}, {&(0x7f0000000700)="d0e46df8688ef728659dec89153aa3187ea07b8c3f6e5fbbefc93d2c51fa094c774ce4dcb76a0e5e33edcec767a5dbd14f0c538731ab3c22b040092c64bdfb530874d62f7440a948f28ad9bee4a743c84f2332a1155bea3ebf1fd4710452a105469b55f22573b596503012306a6c297c33aa409537d280bca3d2b57b27a14278167d48a28b392192f0a855ac9fccb8036b3e69a8536b5d341da5a28a3995804483c3173f7997e6cccb0ad27cbb96cfe3c8f724480452559fbec1cd07a69047be65dcaedfec613319ae9ec9d844ee9e524a774c2868019a25c34b6b338b0476e7d40d51d251db81c89dde9b34b298c4a6ca1d01ed9e2147", 0xf7}, {&(0x7f00000002c0)}], 0x6, r4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000a00)={{0x2, 0x4e24, @remote}, {0x307, @local}, 0x6e, {0x2, 0x4e22, @multicast1}, 'syzkaller0\x00'}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) setxattr$trusted_overlay_nlink(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='trusted.overlay.nlink\x00', &(0x7f0000000980)={'L+', 0x81}, 0x28, 0x1) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) [ 997.455006] serio: Serial port pts0 21:02:50 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x73, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:50 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x47b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 997.532394] serio: Serial port pts2 21:02:50 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x54, "dafaa17864628b67a21fd9df2f63e8f9649a714127145d5365b0a30f02ef1075c3839e32329f4f718ea4ceeb8c3118197b2fa77447054acec2c2db2f60e48a4bb349c616488c5d26c332d981a29141611bdc70e3"}, &(0x7f00000001c0)=0x5c) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000002c0)=r3, 0x4) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x0, 0x88caffff00000000) 21:02:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) 21:02:50 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x29a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:50 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4c5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 997.695177] serio: Serial port pts0 21:02:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 21:02:53 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000440)={0x8, 0x120, 0xfa00, {0x0, {0x5, 0x7, "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", 0x29, 0x100, 0xb26e, 0x8, 0xffff, 0x3, 0x9}, r1}}, 0x128) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000300)=0x10, 0x4) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x5) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r2, &(0x7f0000000380), 0x342, 0x88caffff00000000) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000100)={0xfff, {0x100000001, 0x8}}) 21:02:53 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3e5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) 21:02:53 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x41c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:53 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) [ 1000.526422] serio: Serial port pts0 21:02:53 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x71f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:53 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x625, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1000.577845] serio: Serial port pts2 21:02:53 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(r1, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', ']system\x00'}, 0xe) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) listen(r0, 0x6) r3 = syz_genetlink_get_family_id$ipvs(0xfffffffffffffffd) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x880) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:02:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)) 21:02:53 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x77d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:53 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x16a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1000.786829] serio: Serial port pts0 21:02:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)) 21:02:56 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x15d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:56 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x274, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 21:02:56 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x523ff, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000000)='./file0\x00') accept$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000280)=0x1c) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000380)="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") r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r3 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) fcntl$setstatus(r3, 0x4, 0x400) 21:02:56 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r3 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) io_setup(0xfffffffffffffffc, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8, r3, &(0x7f0000000240)="dd6eb381811958abc7376ba3d506ee348d911b885504efebd62a4e7f611c3ce77e00dd6ee5c135f01ce79863f6e972b5df57f85bbd1fb3b79172be44a61b35e572373fe1f571c7d0bbb930a697897366e3298afb8d8b82b8f84f41d7b5bd3ae039ace483f7837164b956ec5f0efbb48eede659123996075d10d0170e635117066712f7846369b1c1774b52d1c1c89860f9ffe48d3d8fbad489071619cfabbe7e61d9c0926ec2cfd34ca211516945f9ed84f19015be73905c43bef84e27c888fa91", 0xc1, 0x9, 0x0, 0x0, r0}]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) [ 1003.575389] serio: Serial port pts0 21:02:56 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x762, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:56 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xf7, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1003.661591] serio: Serial port pts0 21:02:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)) 21:02:56 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x407, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:56 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8f3, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:57 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285717070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00000001c0)=0x1, 0x4) listen(r3, 0x0) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x20000003, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r2, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='f'], 0x1) 21:02:57 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1a9, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:57 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x342, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:57 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f00000001c0)=0x1, 0x4) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) [ 1004.543846] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:02:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:02:59 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x986, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:59 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa01, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:02:59 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50a, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, @perf_bp={&(0x7f0000000200)}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x34, 0x7) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000440)={'trans=unix,', {[{@aname={'aname', 0x3d, 'sit0\x00'}}, {@access_user='access=user'}, {@fscache='fscache'}, {@fscache='fscache'}, {@nodevmap='nodevmap'}], [{@euid_lt={'euid<', r2}}, {@smackfshat={'smackfshat', 0x3d, 'sit0\x00'}}, {@obj_role={'obj_role', 0x3d, 'sit0\x00'}}, {@subj_user={'subj_user', 0x3d, '.'}}]}}) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000580)={0x8, 0x40, &(0x7f0000000500)="266f0edc5c6dd45d3c7b76b9263247138b9c7f4807f57b06287635920175f429ddf9ecd027809700f15302d6c69ca955e6dfcd51dece775288e0c7ae0d325842e02d3bca69820daf0127", {0x6, 0x3, 0xbd715261, 0x7, 0x8, 0x42f, 0xf, 0xadde}}) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) getpeername$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) bind$packet(r3, &(0x7f0000000000)={0x11, 0x15, r4, 0x1, 0x8000, 0x6, @dev={[], 0x1f}}, 0x14) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:02:59 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0xfffffd52) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:02:59 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 21:02:59 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x675, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1006.764872] audit: type=1804 audit(1544130179.810:76): pid=23571 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir257451444/syzkaller.g1poNt/1869/bus" dev="sda1" ino=17068 res=1 [ 1006.798830] serio: Serial port pts0 21:02:59 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8c5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1006.867479] audit: type=1804 audit(1544130179.910:77): pid=23571 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir257451444/syzkaller.g1poNt/1869/bus" dev="sda1" ino=17068 res=1 21:03:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) [ 1006.976153] audit: type=1804 audit(1544130179.960:78): pid=23579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir257451444/syzkaller.g1poNt/1869/bus" dev="sda1" ino=17068 res=1 21:03:00 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x232, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:00 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x268, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1007.099419] serio: Serial port pts0 21:03:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:00 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') ioctl$VT_RELDISP(r1, 0xb701) 21:03:00 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6a0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1007.470246] serio: Serial port pts0 21:03:00 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) ioctl$TIOCSBRK(r0, 0x5427) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0xd5ae0d9c717669bd, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d66642c7266646ed26f", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000000080,version=9p2000.u,cachetag=/dev/zero\x00,cache=fscache,posixacl,euid>', @ANYRESDEC=r2, @ANYBLOB=',dont_hash,\x00']) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:00 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xb, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xb, 0x0, 0x321d, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:00 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1e4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:00 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x111, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:00 executing program 3: unshare(0x8000400) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="0a4cf57c3d093d2b46") 21:03:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 21:03:00 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x39f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:00 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x21c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)) [ 1007.774214] serio: Serial port pts0 21:03:00 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)={0x5}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) sendmsg$alg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="d3bf03cfc6dacbaeb046aec051cb966a174c5cc42660830a4b2c7fdf402e3f7c0f865f19823372244d8bd3d4de72b08567e9e560fd5e6196eb34647ca281ba0678c1cdc1af623edd4028fc1d2195baf9072d5bf168e5e90a542ec013df648f928b13c4ce5e5e7c882626", 0x6a}], 0x1, &(0x7f0000000440)=[@iv={0xe8, 0x117, 0x2, 0xcd, "8c4027f6ada3036150cc3fcdfb20dafd1baf480390fd86806475c6e341ee74f0e8925fb2f6983e357c2e346075b807975061fe60f0dd33c3428a744028c4eea7ee5fe8b752ff2bccbc0d5b9de9dc6252477e7d9fe583f0343297998b627ff2736ae49e519e485ab7161c8d650e02210818b4c298147105a241f943ba61eadf45b523f8c070c86fc94a0a5e095e5ed6a9daf7b5aa7e0190d5a6900e7762e0ff2b965d808a14ad8fadef9a1cc3ec7c97d21573cb155f78b4c650b1e9171406acf4f3f7ced416de72ce12630ca99c"}, @iv={0x110, 0x117, 0x2, 0xf9, "f5e596f018c7c328406165b5c9bccc57956ef1c47c87fb95a4d73e470653c5b2270026a813271803227b4180a5bb45d3783fbb69f601061676746a2d276bbbcc72cc0ce2bc8fdcc664fbdf7871b449626ac1d0850da344a39a2c1fe455c680cfc74cc467ba201da1195f219e2783abc2e718dc2859f09a1ec0cbbc5a87af95854fe81e23c546456fd51847784a47aa50ba02f7b2e91306fb7cb7c41da44d11ee63a6a80c81dd225e121cdbab97303aa2c75e697064637f91e0b991d74e1f1e8676053fb5514559ec026ea0ac312d4983012ef4b82e3ec41857863d94eae613ad6d5cb9ef40a320d6ab059f63aa5a901ef6c8f666afc68389cc"}], 0x1f8, 0x1}, 0x20040000) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:00 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4d2, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:00 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa24, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1007.887907] serio: Serial port pts2 21:03:01 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = getpgid(0x0) ptrace$peek(0x2, r2, &(0x7f0000000000)) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:01 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x614, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)) 21:03:01 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x90b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:01 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1008.318510] serio: Serial port pts2 21:03:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x0) 21:03:01 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x78d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)) 21:03:01 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x17c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1008.731122] serio: Serial port pts0 [ 1008.834524] serio: Serial port pts2 21:03:02 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0x4e, "46f5a97c21c677dfccc7c9a8953b15e542992445c500020587b070936a70439b060b183ef981c2589ea5bf129e8d477c50649ec78a04c5bf594e9726c21c55faba9c3dc70ce65fbd92b47d1116f9"}, &(0x7f00000001c0)=0x56) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000440)={r4, @in={{0x2, 0x4e20, @broadcast}}}, 0x84) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r6) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x5, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r7) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:02 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8c8, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:02 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa8e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:02 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) getpeername$packet(r0, &(0x7f0000001d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001dc0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'sie0\x00', r3}) r5 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) fcntl$getownex(r5, 0x10, &(0x7f00000001c0)) getpgid(0x0) r6 = getpid() ptrace$getregs(0x8, r6, 0x2ccf, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:02 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x14c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:02 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5ed, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:02 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8ad, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1009.411727] serio: Serial port pts0 21:03:02 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x29e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 21:03:02 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:02 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) [ 1009.720661] serio: Serial port pts0 21:03:02 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x81, 0x9, 0x8, 0x20}, 0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0xffffffffffffffff, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) 21:03:02 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x55a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:02 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x48f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:03 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2c2, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1009.956511] serio: Serial port pts2 21:03:03 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x21d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) 21:03:03 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x81c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:03 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2c0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1010.304542] serio: Serial port pts2 21:03:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) tkill(r2, 0x1000000000016) 21:03:03 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x241, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1010.652768] serio: Serial port pts0 21:03:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) 21:03:03 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x27e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:03 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0xb, 0x7, 0x200}) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x94) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:03 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) 21:03:03 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x763, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1010.826707] serio: Serial port pts2 21:03:03 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7d5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:03 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x857, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:04 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa59, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:04 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x241, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1011.138592] serio: Serial port pts2 21:03:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) tkill(r2, 0x1000000000016) 21:03:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 21:03:06 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa8c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:06 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8b1, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:06 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0x4, &(0x7f0000000100)=[{0x3, 0x5, 0x2, 0x200}, {0x0, 0xb6e, 0x82, 0x5006}, {0x80000000, 0x7ff, 0x7f, 0x1}, {0xd924, 0x4, 0x3}]}, 0x10) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:06 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fda000/0x2000)=nil}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000003c0)={0x0, 0x4, 0xfff, 'queue1\x00', 0x7}) write(r5, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000240)={0x3, 0x1, @raw_data=[0x101, 0x7fffffff, 0x2, 0x1, 0x7, 0x10000, 0x8, 0x7, 0x0, 0x3, 0x0, 0x27, 0x9, 0x200, 0x5, 0x8]}) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000100)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={r7, @loopback, @broadcast}, 0xc) 21:03:06 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x63e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1013.659408] serio: Serial port pts0 [ 1013.677998] serio: Serial port pts2 21:03:06 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x72c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:06 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9fb, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:07 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9de, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:07 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8d3, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:07 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) io_setup(0x80000000, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000000240)="c0abe24a026f7b27a26ca3f2dfed6a227152ba8807c9f86389c61234251398557b891d17ae00f5e2b1a0766b0ade23c33e60c81edb8ce42e362f7183e77fbae34d1c0c285fb0fed029e07c00d226e2e748398dcd4294010f861b058b941040c23503e2e8947e5c25164530ef02c9261d1c474d22776946f3815c8f2ae24849530839cdcd62c87760fe511abc19e322fc146f563874266d78735e0e1f4d4c9631525365a3c17fb85a78f7772b5b2024074da79bc8ce7ba27e3d3aac19f9b839b1", 0xc0, 0x0, 0x0, 0x0, r0}, &(0x7f00000001c0)) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0xb, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=0x3f) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) tkill(r2, 0x1000000000016) 21:03:09 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9aa, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:09 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x70a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:09 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0xc, 0x5, 0x2, {0xb, @raw_data="c8ab7848b6a6fbeb1a6d5b5969e5c892e0f8a73b12e08a8a2928ebd22c59369ef416227f90dacba2bed0a668ec19b90ee7f2f816ba633d8a5d20ed6f537a7b1df67b7ee772d97e967e41dac2fd25b7e130c26b655f956b0c6b7403ac88834898205e3ea03852727de38b550b5dbfc7348928fabdffb4dc32482ab34bb2ff7dbcb0d4a1a3d4f75865175b48286934d3515efdc24109e0d91ac913b5d38d0e90eed3c59e4f22d32f47949892f25305e193588f7ace0f73c0741b9d357a3645a3e659a0052905a22315"}}) 21:03:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) tkill(r2, 0x1000000000016) 21:03:09 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(r0, 0x0, 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) ptrace$peekuser(0x3, r3, 0x4) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000000)=0x7) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000100)={0x4, 0x8001, 0xa0, 0x1}, 0x10) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000240)=0x6, 0x2) 21:03:09 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5e7, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1016.803274] serio: Serial port pts0 [ 1016.821207] serio: Serial port pts2 21:03:09 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1db, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:10 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x49e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:10 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x24c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:10 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x54, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:10 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x86f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:12 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xd0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:12 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1c1, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:12 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40200003, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000440)={0x8, 0x5, 0x0, [{0x1, 0x5, 0x1, 0xb4, 0x2, 0x1, 0xfff}, {0x10000, 0xb65, 0x4, 0x8, 0x6, 0x8, 0x1}, {0x8000, 0x218, 0x3cfc, 0x3f, 0x7ff, 0x1}, {0xfe8, 0x8, 0x7905, 0x3, 0x1, 0x3121, 0x4}, {0x6, 0x3, 0x3f, 0x1, 0x608c28b6, 0x7, 0x9}]}) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = geteuid() fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f00000002c0)={0x78, 0x0, 0x7, {0x8, 0x2, 0x0, {0x4, 0x8, 0x6, 0x80, 0xd72f, 0x7, 0x20, 0x9, 0x23, 0xfffffffffffffffa, 0x2f, r3, r4, 0x1f, 0x1000}}}, 0x78) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:12 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) 21:03:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) tkill(r2, 0x1000000000016) [ 1019.816682] serio: Serial port pts0 21:03:12 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x760, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:12 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xf4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:13 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KDENABIO(r0, 0x4b36) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:13 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1f0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:13 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x82d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:13 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x22b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:15 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4b4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:15 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x801, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 21:03:15 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) bind$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) fsetxattr$security_smack_transmute(r1, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x80, 0x0) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:15 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)={0xe2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r3 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x3, 0x6, @random="1c0a1973eaf7"}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, [], [{0x800, 0x6, 0xbb48, 0x9, 0x400, 0x10000}, {0x6, 0xfffffffffffffff9, 0x3, 0x8001, 0x100, 0x56db}], [[], [], [], [], []]}) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x20000000014, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) tkill(r2, 0x1000000000016) 21:03:16 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x77f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1022.991052] serio: Serial port pts2 [ 1023.005117] serio: Serial port pts0 21:03:16 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa28, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:16 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x80) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000000)={0x4, 0xef462840, 0x1}) connect$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x91d6, 0xfff, 0x1000000000000000, 0xd0, @dev={[], 0xd}}, 0x10) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:16 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x64a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:16 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8dd, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:16 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1f9, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:16 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4ba, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:16 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x955, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:16 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x26c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:16 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x15, r2, 0x1, 0x1ff}, 0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x7, &(0x7f0000000000)=[{0x3f, 0x7, 0x7, 0x3}, {0x81, 0x1, 0xfffffffffffffffa, 0x9}, {0xff, 0x7, 0x8}, {0x861, 0x5, 0xfffffffffffffffd}, {0x2, 0x2, 0x1, 0xff}, {0x40, 0x1587, 0x7, 0x4}, {0x100000001, 0x7, 0x400000000000000, 0x2}]}, 0x10) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000240)={0xf000, 0x1a000}) [ 1023.894297] serio: Serial port pts0 21:03:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:18 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x12a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:18 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3cc, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:18 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x7fffffffff, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r2 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:18 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x101400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x5ae, 0x7, {"ec5ca54a9f722bcd1b5b388229ae5a67"}, 0x1ad2, 0x1, 0x1c2}, @ib={0x1b, 0x106, 0x91, {"cfdf9f3bb0597154cca20b0f2f835bf3"}, 0x9, 0xc3, 0x2}}}, 0x118) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) fchdir(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:19 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x652, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:19 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x157, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1026.065631] serio: Serial port pts2 21:03:19 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x340, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:19 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa60, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:19 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3be, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:19 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5d0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:22 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x46, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x296, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 21:03:22 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:22 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000440)=@dstopts={0xff, 0x24, [], [@calipso={0x7, 0x10, {0x6, 0x2, 0xffffffffffffffff, 0x8, [0x10000000]}}, @ra={0x5, 0x2, 0x80000000}, @generic={0x4, 0x8d, "993c5d4e3bb683bb28c40745b2d18733a289c364e168bd26983ccfca214203dc87067e2d8e28263259050ab716e461efee5c9be5c7cdf70b08fa5b8494f76dad01bd4fea4df473e0a112e947cf3f81a23d3ddbb4793a34f2b1748b4890f71ca8158b422cd33ce15a4c6d6df11d37850d150592fa6da1068cecf7bbf5bba2f8dda66d967491b94f13d0a787e8dc"}, @enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x85f9}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x2, 0x6e, "370b6fa32dd7493124a65e4b4dbc550a44cf5c414466cd85a740d35f02e982d90892e392576d75e38f5b19208bbe9223a9b560257037faf4f730e023b6568fb5cb8aa08bd98250e56193eec711fb4a1f5b17f2d2bc9768300bf2400929d45230a757c2ba0bf1465c93a9514e4fae"}]}, 0x130) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3ba, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:22 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa6b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1029.212342] serio: Serial port pts0 21:03:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa1a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:22 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 21:03:22 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5b9, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:25 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x629, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:25 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5d4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:25 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r2 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback, r1}, 0xc) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) ioctl$VT_RELDISP(r2, 0x5605) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:25 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$void(r0, 0xc0045878) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'irlan0\x00', {0x2, 0x4e21, @remote}}) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x1ff, 0x1, 'client1\x00', 0x4, "755deb9e49208a69", "7eefb8ba095056b26214fca301d6f223616b18641ad3f804bf468df7bab3d646", 0xffffffffffffff16, 0x6}) 21:03:25 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x356, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:25 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x198, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1032.244668] serio: Serial port pts0 21:03:25 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5ee, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:25 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5c4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 21:03:28 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x28f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:28 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x255, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:28 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1f, 0x100) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000100)=0x20, 0xfffffffffffffece) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:28 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r3 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0xfffffdb5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r4 = fcntl$getown(r3, 0x9) ptrace$getregs(0xc, r4, 0x6, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) setsockopt$packet_int(r1, 0x107, 0x214, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:28 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x52f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:28 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8d7, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1035.315946] serio: Serial port pts2 21:03:28 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syz_tun\x00', 0xb10}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:28 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x346, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:28 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6f0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:29 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa56, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:29 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xb6, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:29 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:29 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1b2, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:29 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x27, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1036.222876] serio: Serial port pts2 21:03:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:29 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x605, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:29 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(r0, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)={0x2004}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x7, 0x4) 21:03:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:29 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x66e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:29 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8dd, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:29 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x333, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:29 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x381, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:30 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:30 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x50e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:30 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x59, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:30 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x528, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:30 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x406, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:30 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = gettid() sync_file_range(r1, 0x100000001, 0xf730, 0x2) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r2, &(0x7f0000000100)={r0, r0, 0x200000000000}) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x10000000000002a3, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:30 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3d5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 21:03:30 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x89b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:30 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x694, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:31 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r2 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x3000, 0xd000, 0xb, 0x5, 0x1, 0x7, 0x2, 0x3e8, 0x7, 0xb74, 0x17c, 0x2}, {0xd000, 0x5, 0x9, 0xf11, 0x1ff, 0x9, 0x6, 0x1, 0x4, 0x20, 0x6, 0x1ff}, {0x100000, 0x0, 0xa, 0x1, 0x7fff, 0x8, 0x400, 0x14, 0x8, 0x200, 0x7, 0x400}, {0x103001, 0xd000, 0xf, 0x3ff, 0xff, 0x8, 0x20, 0x84, 0x3, 0xffffffffffffffe1, 0x8, 0x3}, {0x7000, 0x3000, 0xb, 0x3, 0xbb10, 0x7, 0x0, 0x200, 0x6, 0x0, 0x8, 0x7}, {0x0, 0x1, 0xe, 0x20, 0x800, 0x3ff, 0x2, 0x5, 0xfffffffffffffffe, 0xfff, 0x8, 0xffffffffffffff00}, {0x10d004, 0x2000, 0xe, 0x0, 0x1, 0x8, 0x4, 0x7, 0x2, 0x101, 0x9}, {0x2004, 0xf000, 0xe, 0x950d, 0xc10, 0x2, 0x78, 0x0, 0x7ff, 0x2, 0x39, 0x3}, {0x4, 0x3000}, {0x104000, 0xf000}, 0x2, 0x0, 0x1000, 0x8, 0x6, 0x1000, 0x1, [0x40, 0x0, 0xe305]}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:31 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x689, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:31 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7fe, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:31 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x8000000a, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r2, r3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$inet_mreq(r1, 0x0, 0x0, &(0x7f0000000280)={@empty, @broadcast}, 0x8) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) socketpair(0x2, 0x7, 0x9bb, &(0x7f00000001c0)) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:31 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 21:03:31 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x61c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:31 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x970, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:31 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x815, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:31 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4fb, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:32 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r2 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="ff3c0000000000000a004e200300000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000a004e22000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20810000000000000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2304000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000a004e2215dc000000000000000000000000000000000000ff0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2102000000fe8000000000000000000000000000aa02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2001000000ff010000000000000000000000000001070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23060000000000000000000000000000000000000104c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x410) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0x0, 0x0, 0x0, 0x0, 0x120, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, &(0x7f00000001c0), {[{{@ip={@remote, @remote, 0xffffff00, 0x0, 'bcsh0\x00', '\x00', {}, {}, 0x5f, 0x0, 0x61}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x1d}, 0x6, 0x5, [0x10, 0xb, 0x40, 0x0, 0x12, 0x1b, 0x2d, 0x14, 0x2a, 0x39, 0x27, 0x1b, 0x16, 0x23, 0x30, 0x12], 0x0, 0xab76, 0x3ff}}}, {{@ip={@multicast1, @multicast2, 0xff, 0xc64b8e686e4bdb5, 'bpq0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x10}, 0x0, 0x98, 0xb8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x7f) bind$packet(r1, &(0x7f0000000000)={0x11, 0x103, r2, 0x1, 0x0, 0x6, @broadcast}, 0xffffffffffffff20) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:32 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8d5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:32 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xd7, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:32 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6ca, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:32 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x67e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000000)={0x0, 0x5, 0x9, 0x9, 0x366a, 0x8, 0x6}) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:32 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffffffffbb27}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x6901}, &(0x7f0000000240)=0x8) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:32 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x78f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:32 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x115, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:32 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3e1, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:32 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x254, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{0x0}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:32 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x541, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:33 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000001c0)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000000)={0xfffffffffffffffc, 0xb90}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:33 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x29d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:33 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x2, 0x12) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{0x0}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:33 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5b5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:33 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xcd, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:33 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6d6, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:33 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8ea, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{0x0}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:33 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9e5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:33 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x53e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:33 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'broute\x00'}, &(0x7f0000000000)=0x78) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1040.709415] serio: Serial port pts2 21:03:34 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x101, 0x200800) accept$unix(r0, 0x0, &(0x7f00000001c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r4 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@local, @in=@multicast2, 0x4e24, 0x0, 0x4e22, 0x6, 0xa, 0x80, 0x80, 0x0, 0x0, r5}, {0x0, 0x7ff, 0x4, 0x3, 0x86, 0x8e5, 0x4, 0x7}, {0x49b, 0x1, 0x4, 0x8}, 0x3, 0x6e6bbe, 0x2, 0x1, 0x2, 0x2}, {{@in6=@remote, 0x4d3, 0x7f}, 0xa, @in6=@remote, 0x3500, 0x2, 0x3, 0x2, 0x8001, 0x6, 0x80000000}}, 0xe8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:34 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x62c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:34 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1f2, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1041.244197] serio: Serial port pts2 21:03:34 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x98c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:34 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x297, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:34 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x63d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1041.496554] serio: Serial port pts2 21:03:34 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x204, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:34 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x93a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1041.881234] serio: Serial port pts2 21:03:35 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={{r1, r2/1000+10000}, {0x0, 0x2710}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)=0x0) ptrace$getregs(0xe, r5, 0x5, &(0x7f0000000240)=""/171) 21:03:35 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5db, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:35 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2be, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:35 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x211, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:35 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x57b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:35 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2c3, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:35 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x79, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:35 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x89d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:35 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000240)={0x3ff, 0x6, 0x6, 0x3, 0x7, 0x13a7}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:35 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xbe, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:37 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4bf, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:37 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x655, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:37 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:37 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) getsockopt(r0, 0x7ff, 0x8, &(0x7f0000000280)=""/99, &(0x7f0000000300)=0x63) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {r3, r4+30000000}}, &(0x7f00000001c0)) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000240)={r0, 0x8, 0xfffffffffffffffd, r0}) 21:03:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1044.938305] serio: Serial port pts2 21:03:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:38 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9c7, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:38 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x938, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:38 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x90d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:38 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x316, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:38 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8f6, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:40 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x36c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:40 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8c5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:40 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:40 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x100000, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000012, 0x3, 0x100000000000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x12, "8db3b01e528c496a4ad9135665148c2df6db"}, &(0x7f0000000100)=0x1a) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x3, 0x370, 0x4, 0x8000, 0x7, 0xffffffff00000000, 0x3, 0x7fff, r4}, &(0x7f0000000240)=0x20) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000280)) 21:03:41 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8ac, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:41 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x323, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1048.036122] serio: Serial port pts2 21:03:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:41 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:41 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x314, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:41 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x285, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:44 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6fe, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:44 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa6d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:44 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000d, 0x3, 0xfffffffffffffffd) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000180)=0x400, 0x172e) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/dev/zero\x00', 0xa, 0x2) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:44 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000100)=@v1={0x2, '-?'}, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(r0, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:44 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x59a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:44 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5f6, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1051.110258] serio: Serial port pts0 21:03:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{0x0}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:44 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)={0x63}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) personality(0x400000e) openat$cgroup_int(r0, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:44 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa32, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:44 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x784, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{0x0}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:44 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9e2, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{0x0}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3a6, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:47 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6c4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:47 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x100000000, 0x6, 0x7, 0x9, 0x6, 0x9}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x1f, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:47 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000640)=ANY=[@ANYBLOB="c8d6e7aec3ff7f0000000000002542a8b417f21446898af2d04a5cc3ef1d5ad84313117998dbacd3e5073e8a"]) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000001c0)=0x7) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000240)=@hci, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f00000001c0)}, {&(0x7f0000000440)=""/150, 0x96}], 0x3, &(0x7f0000000500)=""/192, 0xc0, 0x7}, 0x80}], 0x1, 0x40000000, &(0x7f0000000600)={0x77359400}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r3 = getpid() ptrace$setopts(0x4200, r3, 0xc3, 0x8) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) gettid() 21:03:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1054.148501] serio: Serial port pts2 21:03:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7a2, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:47 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x87e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1054.303999] serio: Serial port pts0 21:03:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x240, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:47 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9f2, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3c0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:47 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7c4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1054.628907] serio: Serial port pts0 21:03:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:50 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4e4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:50 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x651, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:50 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0x3}, 0x28, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0xfd, 0x10800) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000240)={0xf5, 0x0, [0xd61c, 0x10001, 0x4, 0xf58]}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:50 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x6, 0x0, 0x80000000, 0xe9f, 0x1a4e, 0x1, 0x4, 0x4, 0x6, 0x3, 0x8}, 0xb) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000240)={0x3, 0x9c17}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'ip6gretap0\x00', 0x800}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) [ 1057.207562] serio: Serial port pts0 [ 1057.223278] serio: Serial port pts2 21:03:50 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x462, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:50 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6c0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:50 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x98f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1057.492904] serio: Serial port pts0 21:03:50 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xeb, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:50 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa09, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000016) 21:03:53 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x328, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:53 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x533, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:53 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) acct(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r4 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x6, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x16}, 0x3e38}, 0x1c) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000280)={0x6, 0x70, 0x7fffffff, 0x7, 0x4, 0x401, 0x0, 0x2, 0xc40, 0x2, 0x3ff, 0x3f, 0x52, 0xd038, 0xfff, 0xffffffffffffc46e, 0x1f, 0xfffffffffffffffd, 0x2, 0x7ff, 0x401, 0x7ff, 0x5, 0xa4, 0x7f, 0xffffffffffffffff, 0xffff, 0x2, 0x4, 0xd0a, 0x7, 0x4, 0x7, 0x7, 0x10001, 0xba, 0x7, 0x21, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x4, 0xb6d, 0x401, 0x8, 0xfff, 0x9, 0x7}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000100)=@generic={0x0, 0x4, 0xffffffff}) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:53 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x800, 0x103000) openat$cgroup_int(r0, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) ptrace$getregs(0xe, r3, 0x3219, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:03:53 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9b6, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:53 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x329, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1060.300767] serio: Serial port pts2 21:03:53 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x683, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:53 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3f5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:53 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x375, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1060.706331] serio: Serial port pts0 21:03:53 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x14, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000016) 21:03:56 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x19a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:56 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3f7, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:56 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 21:03:56 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f0000000240)=@sco, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000380)=""/71, 0x47}], 0x2, 0x0, 0x0, 0xffffffff}, 0x1}], 0x1, 0x40002040, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2000}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:56 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xbc, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:56 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x213, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1063.379483] serio: Serial port pts2 21:03:56 executing program 2: syz_emit_ethernet(0x66, &(0x7f00000005c0)={@broadcast, @random="dcbf39ce7e84", [], {@ipv6={0x86dd, {0x0, 0x6, "fbf5ae", 0x30, 0x29, 0x0, @ipv4={[], [], @local}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "81a8bf", 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}}, 0x0) 21:03:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:56 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x508, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:56 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1e1, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:56 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85513, &(0x7f0000001000)) [ 1063.819743] serio: Serial port pts0 21:03:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000016) 21:03:59 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x135, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:59 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 21:03:59 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1f4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:59 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:03:59 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x966, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@local, @in=@broadcast}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@dev}}, 0x0) bind$bt_hci(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) [ 1066.421312] serio: Serial port pts2 21:03:59 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x436, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x101, 0x0, 0x0, 0x1, [{}]}) 21:03:59 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7a9, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:03:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:03:59 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x311, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1066.943635] serio: Serial port pts0 21:04:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 21:04:02 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x701, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:02 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7ac, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:02 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000240)={0x3ff, 0x6, 0x6, 0x3, 0x7, 0x13a7}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:02 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:02 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x971, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1069.513633] serio: Serial port pts2 21:04:02 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x887, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:02 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7ed, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:02 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x237, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:02 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x75a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:03 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x918, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1070.176906] serio: Serial port pts0 21:04:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x0) 21:04:03 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1a7, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:03 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000240)=""/70) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x3ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x205) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:03 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000240)={0x3ff, 0x6, 0x6, 0x3, 0x7, 0x13a7}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:03 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x45d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:03 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x599, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1070.463845] serio: Serial port pts2 21:04:03 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000e, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x8000) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:03 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6b4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:03 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x444, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:03 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x8001, 0x109000) futimesat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{}, {0x77359400}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) write$P9_RREAD(r0, &(0x7f00000003c0)={0x36, 0x75, 0x2, {0x2b, "1cbdad67aa8ae2810c4279b3ee66329c63a77bff86eabb667b71237e708cc959320593c83eece39914371a"}}, 0x36) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000380)=0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x27) syz_open_procfs(r4, &(0x7f0000000300)='net/ipx\x00') r5 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) fremovexattr(r5, &(0x7f0000000000)=@random={'btrfs.', 'sit0\x00'}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) ptrace$getregs(0xa, 0x0, 0x6, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:06 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x864, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:06 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x12d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:06 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:06 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x80) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000000)={0x4, 0xef462840, 0x1}) connect$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x91d6, 0xfff, 0x1000000000000000, 0xd0, @dev={[], 0xd}}, 0x10) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) [ 1073.140005] serio: Serial port pts0 21:04:06 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x739, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:06 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa86, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:06 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7f1, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:06 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xad, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:06 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9fe, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:06 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x33f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:06 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x764, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:09 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3e3, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:09 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xe5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000016) 21:04:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:04:09 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) syz_mount_image$nfs(&(0x7f0000000240)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000440)="8e8033a112255d483515bc46c8dd7987f45b646b90e681411533c5d493c8e28276abf4b73ae326c2b4591e745a936f1f5896b7abe2aae556bf5b9fac07cdb9a4b9c9c73d56e4af8945c6328119ec828f78dee956befaed66dcacfedf8c4a60351435434b3e7b0aa4537a21cd25c38b3386d7094c800a33e6f52fceb0ada6a0d0ae4f0474ab62af78a905d6b4e4f1f3d48e244533041bffe896e5b93aa15bc56f71144301c2023651d9fe56", 0xab, 0x7}, {&(0x7f00000002c0)="ecd445dc5f1362da8150183f82299b03db91bc625cc48e8e7353dd8708906fba3834089d9c08cc9560a3e31f14ab", 0x2e, 0x3}, {&(0x7f0000000380)="3eb64b1549bd08c5d4bd0dcd3eb3ffa014c2dca38ccc5c3c8851e280497527bec109322bc3c42e3e10f26acb118a47f0cc63caa9b0db3d37cd6d7fae64fe6e2f3dbb4b4bcc9c206e0e5f9a15f9e2bba66c564b46b07e3cbdfd2a1239", 0x5c, 0x3}, {&(0x7f0000000500)="ad0f9213aa7f1cb1bd1dab2ad455230c58750d7eb96ef3d4b0699a832cc8f26e6d623472f1284601bdd044212dbb919d86fcbbf676349f32cc534fe71e7d74ff655f532f1c1983106623863f2cc3e59979cf41598df8de8099755ec96afb7e18b9549bcf804cfd2cb5e00955653552ab47ffd0f2a3f4d74dfc0c7114c3b464c1059e0ec6a62cb37e84e8d336164b2bc02bd7fa59878e7a2a20b4a62c1c0d9595ef93a877e85397e9dbade29858605e40fc424e387948e9ba1dcefce54ae1fe51674b1e1306548c555c710391fb45", 0xce, 0x4}], 0x3008, &(0x7f0000000300)='/dev/zero\x00') write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:09 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x47, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) [ 1076.185424] serio: Serial port pts0 21:04:09 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9fa, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:09 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x522, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:09 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x97c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:09 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2f4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:04:09 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x353, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:09 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x10d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000016) 21:04:12 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xd4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:12 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x74, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:12 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa39, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:12 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89ea, &(0x7f0000000240)="962e2ee15e686cc5f92275df007db2a5a6ca2f86ee1739a0eb8f4ef8fd866ee47a7241be39ff4f52d0430972096ae05320538705aec95840414f1bc541fbb742012b17f567d43bb9f8b46be3e114b012e18f2a15ceca56") bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:12 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) syz_mount_image$nfs(&(0x7f0000000240)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000440)="8e8033a112255d483515bc46c8dd7987f45b646b90e681411533c5d493c8e28276abf4b73ae326c2b4591e745a936f1f5896b7abe2aae556bf5b9fac07cdb9a4b9c9c73d56e4af8945c6328119ec828f78dee956befaed66dcacfedf8c4a60351435434b3e7b0aa4537a21cd25c38b3386d7094c800a33e6f52fceb0ada6a0d0ae4f0474ab62af78a905d6b4e4f1f3d48e244533041bffe896e5b93aa15bc56f71144301c2023651d9fe56", 0xab, 0x7}, {&(0x7f00000002c0)="ecd445dc5f1362da8150183f82299b03db91bc625cc48e8e7353dd8708906fba3834089d9c08cc9560a3e31f14ab", 0x2e, 0x3}, {&(0x7f0000000380)="3eb64b1549bd08c5d4bd0dcd3eb3ffa014c2dca38ccc5c3c8851e280497527bec109322bc3c42e3e10f26acb118a47f0cc63caa9b0db3d37cd6d7fae64fe6e2f3dbb4b4bcc9c206e0e5f9a15f9e2bba66c564b46b07e3cbdfd2a1239", 0x5c, 0x3}, {&(0x7f0000000500)="ad0f9213aa7f1cb1bd1dab2ad455230c58750d7eb96ef3d4b0699a832cc8f26e6d623472f1284601bdd044212dbb919d86fcbbf676349f32cc534fe71e7d74ff655f532f1c1983106623863f2cc3e59979cf41598df8de8099755ec96afb7e18b9549bcf804cfd2cb5e00955653552ab47ffd0f2a3f4d74dfc0c7114c3b464c1059e0ec6a62cb37e84e8d336164b2bc02bd7fa59878e7a2a20b4a62c1c0d9595ef93a877e85397e9dbade29858605e40fc424e387948e9ba1dcefce54ae1fe51674b1e1306548c555c710391fb45", 0xce, 0x4}], 0x3008, &(0x7f0000000300)='/dev/zero\x00') write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:12 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x360, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1079.233040] serio: Serial port pts0 21:04:12 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x461, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:12 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x37e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:12 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x623, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:12 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x586, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:12 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x55f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000016) 21:04:15 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7af, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:15 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x43d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:15 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) connect(r1, &(0x7f0000000240)=@xdp={0x2c, 0x5, r2, 0x8}, 0x80) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:15 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) syz_mount_image$nfs(&(0x7f0000000240)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000440)="8e8033a112255d483515bc46c8dd7987f45b646b90e681411533c5d493c8e28276abf4b73ae326c2b4591e745a936f1f5896b7abe2aae556bf5b9fac07cdb9a4b9c9c73d56e4af8945c6328119ec828f78dee956befaed66dcacfedf8c4a60351435434b3e7b0aa4537a21cd25c38b3386d7094c800a33e6f52fceb0ada6a0d0ae4f0474ab62af78a905d6b4e4f1f3d48e244533041bffe896e5b93aa15bc56f71144301c2023651d9fe56", 0xab, 0x7}, {&(0x7f00000002c0)="ecd445dc5f1362da8150183f82299b03db91bc625cc48e8e7353dd8708906fba3834089d9c08cc9560a3e31f14ab", 0x2e, 0x3}, {&(0x7f0000000380)="3eb64b1549bd08c5d4bd0dcd3eb3ffa014c2dca38ccc5c3c8851e280497527bec109322bc3c42e3e10f26acb118a47f0cc63caa9b0db3d37cd6d7fae64fe6e2f3dbb4b4bcc9c206e0e5f9a15f9e2bba66c564b46b07e3cbdfd2a1239", 0x5c, 0x3}, {&(0x7f0000000500)="ad0f9213aa7f1cb1bd1dab2ad455230c58750d7eb96ef3d4b0699a832cc8f26e6d623472f1284601bdd044212dbb919d86fcbbf676349f32cc534fe71e7d74ff655f532f1c1983106623863f2cc3e59979cf41598df8de8099755ec96afb7e18b9549bcf804cfd2cb5e00955653552ab47ffd0f2a3f4d74dfc0c7114c3b464c1059e0ec6a62cb37e84e8d336164b2bc02bd7fa59878e7a2a20b4a62c1c0d9595ef93a877e85397e9dbade29858605e40fc424e387948e9ba1dcefce54ae1fe51674b1e1306548c555c710391fb45", 0xce, 0x4}], 0x3008, &(0x7f0000000300)='/dev/zero\x00') write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{0x0}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 21:04:15 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x52b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:15 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1b0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1082.349711] serio: Serial port pts2 21:04:15 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9de, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:15 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 21:04:15 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x50f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:15 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x623, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 21:04:18 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1b3, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:18 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x701, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:18 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:18 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) syz_mount_image$nfs(&(0x7f0000000240)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x3, 0x4, &(0x7f0000000600)=[{&(0x7f0000000440)="8e8033a112255d483515bc46c8dd7987f45b646b90e681411533c5d493c8e28276abf4b73ae326c2b4591e745a936f1f5896b7abe2aae556bf5b9fac07cdb9a4b9c9c73d56e4af8945c6328119ec828f78dee956befaed66dcacfedf8c4a60351435434b3e7b0aa4537a21cd25c38b3386d7094c800a33e6f52fceb0ada6a0d0ae4f0474ab62af78a905d6b4e4f1f3d48e244533041bffe896e5b93aa15bc56f71144301c2023651d9fe56", 0xab, 0x7}, {&(0x7f00000002c0)="ecd445dc5f1362da8150183f82299b03db91bc625cc48e8e7353dd8708906fba3834089d9c08cc9560a3e31f14ab", 0x2e, 0x3}, {&(0x7f0000000380)="3eb64b1549bd08c5d4bd0dcd3eb3ffa014c2dca38ccc5c3c8851e280497527bec109322bc3c42e3e10f26acb118a47f0cc63caa9b0db3d37cd6d7fae64fe6e2f3dbb4b4bcc9c206e0e5f9a15f9e2bba66c564b46b07e3cbdfd2a1239", 0x5c, 0x3}, {&(0x7f0000000500)="ad0f9213aa7f1cb1bd1dab2ad455230c58750d7eb96ef3d4b0699a832cc8f26e6d623472f1284601bdd044212dbb919d86fcbbf676349f32cc534fe71e7d74ff655f532f1c1983106623863f2cc3e59979cf41598df8de8099755ec96afb7e18b9549bcf804cfd2cb5e00955653552ab47ffd0f2a3f4d74dfc0c7114c3b464c1059e0ec6a62cb37e84e8d336164b2bc02bd7fa59878e7a2a20b4a62c1c0d9595ef93a877e85397e9dbade29858605e40fc424e387948e9ba1dcefce54ae1fe51674b1e1306548c555c710391fb45", 0xce, 0x4}], 0x3008, &(0x7f0000000300)='/dev/zero\x00') write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:18 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0xffffffffffff2d67, 0x400, 0x6, 0x100000000, 0x5049, 0x40, 0x0, 0xfff, 0x7, 0xff, 0x1cad, 0x7, 0x2a, 0x698, 0x7, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) write$binfmt_script(r1, &(0x7f0000000580)={'#! ', "", [{}, {0x20, 'syz0\x00'}, {0x20, ']-eth0/selinux'}], 0xa, "988315134e10022fb231a9a8b152b0a4cb61dd1733d6d5d414912f5e8a54722d77bc3eaf7f58818c4784df2199255402e9359bb45ad8392c5a60901d4d2840e10392182de0307fab86223e80d78cf087a068f9e7dc8bed7ee28d28107531dcda873171dc9c1423b515df2db890244b964011bb1589ce8c56367034633990c55c9934e965342170b84992c5e361c71a65e2dc797076469458cad0b66956e70b974c35bdee39a093ccaba36c606fbbe4861dbbf3f4154f3bdca6b4e31d24c4d65d73e200786f0f5e6ec11eb04731cef020db"}, 0xeb) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="062f3100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0x1c) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) write$UHID_CREATE(r0, &(0x7f0000000440)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/175, 0xaf, 0x9, 0x0, 0x100000001, 0x4, 0x2}, 0x120) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) [ 1085.332391] serio: Serial port pts0 21:04:18 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x62, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:18 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4cf, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:18 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:18 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1e0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:18 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:18 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8ab, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x0) 21:04:19 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4a3, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:19 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x16f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:19 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 21:04:19 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) r3 = gettid() ptrace$getregs(0xc, r3, 0x800007ffffffb, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x2ba) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) pselect6(0x40, &(0x7f0000000000)={0x0, 0x9, 0x1, 0x0, 0x6, 0xf4, 0x80a, 0xffff}, &(0x7f0000000100)={0x1, 0x1fb, 0x5, 0xff, 0x2, 0x100, 0xa458, 0x81}, &(0x7f00000001c0)={0x1ff, 0x400, 0xc46a, 0x1, 0x3, 0x0, 0x1, 0x2d}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={0x81}, 0x8}) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:19 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:19 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4a3, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:19 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1bd, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1086.338788] serio: Serial port pts0 21:04:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x14, 0x0, &(0x7f0000000040)=[@increfs_done], 0x0, 0x0, 0x0}) 21:04:19 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:19 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xe4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:20 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) accept(r0, &(0x7f0000000380), &(0x7f0000000440)=0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(r0, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@ipv4={[], [], @dev}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000001c0)={0xae, 0x1, r3, 0x8000, r4, 0x0, 0x7000000000, 0xeb6}) 21:04:20 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x852, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:20 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa0e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(twofish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/19, 0x13}], 0x1}}], 0x1, 0x0, 0x0) 21:04:20 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 21:04:20 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x66f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:20 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 21:04:20 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x79f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:20 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3ee, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000006880)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 21:04:21 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$void(r0, 0x5451) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) getpeername$llc(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) 21:04:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 21:04:21 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xca, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:21 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x167, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) 21:04:21 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc05c5340, &(0x7f0000000140)) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 21:04:21 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x958, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:21 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6bd, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 21:04:21 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:21 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x422, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:21 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa4c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:21 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) 21:04:21 executing program 5: read$eventfd(0xffffffffffffffff, 0x0, 0x0) 21:04:21 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4d6, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:21 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x695, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:21 executing program 5: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 21:04:21 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5e7, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:22 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xc0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:22 executing program 5: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 21:04:22 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x26e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:22 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x336, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:22 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x800) 21:04:22 executing program 5: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/14, 0xe}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000a55000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x2000)=nil) 21:04:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2ff, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:22 executing program 2: ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000740)) pipe2(0x0, 0x0) syz_open_dev$audion(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8401, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r0, r1, 0x0, 0x2b428a52) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000200)=""/171) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000440)={0x1000, 0x105000}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) recvmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x800030d, 0x0, &(0x7f0000002840)={0x0, 0x1c9c380}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000540)=0xede4, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}) r5 = getegid() setfsgid(r5) ioctl$KVM_NMI(r4, 0xae9a) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000580)={{0x0, 0x3}, 0x0, 0x100000000, 'id1\x00', 'timer0\x00', 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0xe}) r6 = fcntl$dupfd(r4, 0x0, r1) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000100)=0x7ff) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000300)=""/159) 21:04:22 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) r1 = socket(0x200000000000011, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={r2, @loopback, @multicast2}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:22 executing program 3: r0 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r0, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x800) 21:04:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4fb, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:22 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x86d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:22 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:22 executing program 2: clone(0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 21:04:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa0d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:22 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x302, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x210, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:23 executing program 5: syz_open_dev$video(0x0, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 21:04:23 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:23 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9fc, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:23 executing program 2: socket$inet6(0xa, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0)=0x1, 0x4) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) 21:04:23 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x34, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:23 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x11, 0x80a, 0x0, 0x0) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 21:04:23 executing program 1: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r0, 0x8, 0x0, 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) 21:04:23 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7bc, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:23 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x93b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1090.079639] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:04:23 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) [ 1090.204347] audit: type=1804 audit(1544130263.250:79): pid=25418 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir962208670/syzkaller.tfca1D/1718/bus" dev="sda1" ino=17089 res=1 21:04:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0x1, {0x0, 0x0, 0xfdfdffff}}) 21:04:23 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9a9, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:23 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x62e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:23 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:23 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x89f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:23 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x243, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:23 executing program 2: [ 1090.660309] audit: type=1804 audit(1544130263.710:80): pid=25425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir962208670/syzkaller.tfca1D/1718/bus" dev="sda1" ino=17089 res=1 21:04:23 executing program 1: 21:04:23 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:23 executing program 2: 21:04:23 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:23 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x55a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1090.718863] audit: type=1804 audit(1544130263.730:81): pid=25418 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir962208670/syzkaller.tfca1D/1718/bus" dev="sda1" ino=17089 res=1 21:04:23 executing program 2: 21:04:24 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x0) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:24 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x30, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:24 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5ba, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:24 executing program 1: 21:04:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:24 executing program 2: 21:04:24 executing program 2: 21:04:24 executing program 1: 21:04:24 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x82c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:24 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:24 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x934, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:24 executing program 2: 21:04:24 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056"], 0x3) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:24 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6cb, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:24 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x267, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:24 executing program 1: 21:04:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:25 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x979, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:25 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa49, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:25 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0400560900"], 0x5) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:25 executing program 2: 21:04:25 executing program 1: 21:04:25 executing program 1: 21:04:25 executing program 2: 21:04:25 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:25 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x700, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:25 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x868, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:25 executing program 2: 21:04:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:25 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x980, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:25 executing program 1: 21:04:25 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:25 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa31, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:25 executing program 2: 21:04:25 executing program 2: 21:04:25 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:25 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x34d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:25 executing program 1: 21:04:25 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x25, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:25 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) 21:04:26 executing program 1: 21:04:26 executing program 2: 21:04:26 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4bb, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:26 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x523, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:26 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:26 executing program 2: 21:04:26 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa1, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:26 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:26 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3b5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:26 executing program 1: 21:04:26 executing program 2: 21:04:27 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:27 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9ce, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:27 executing program 1: 21:04:27 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4f7, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) 21:04:27 executing program 2: 21:04:27 executing program 1: 21:04:27 executing program 2: 21:04:27 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x993, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:27 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:27 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x68f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:27 executing program 1: 21:04:27 executing program 2: 21:04:27 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:27 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1a7, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:27 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x41b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) 21:04:27 executing program 1: 21:04:27 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x85, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:27 executing program 2: 21:04:27 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:27 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5d7, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:27 executing program 2: 21:04:27 executing program 1: 21:04:27 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x569, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:27 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x11f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:27 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:28 executing program 1: 21:04:28 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2a8, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:28 executing program 2: 21:04:28 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x987, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:28 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r0 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r0, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x800) 21:04:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:28 executing program 1: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280)={0x7}, 0xff7f) 21:04:28 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 21:04:28 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x554, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:28 executing program 1: r0 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r0, &(0x7f0000000140)="582f000000de00000000000004000003", 0x10, 0x0, 0x0, 0x0) 21:04:28 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x800) 21:04:28 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa2, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x7ff, 0x4, [0x0]}) 21:04:28 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000001100)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x8}, {r1}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='/exe\x00\x00\x00\x00\x00\x00') io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x0, r2, &(0x7f0000000200), 0xfffffdcc}]) tkill(r0, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) flistxattr(r2, 0x0, 0x7b) 21:04:28 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x853, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:28 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x800) 21:04:28 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x83d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:29 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x62e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:29 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x939, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:29 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x800) 21:04:29 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3f9, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 21:04:29 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1cf, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:29 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x800) 21:04:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 21:04:29 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x56a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1096.309621] serio: Serial port pts0 21:04:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 21:04:29 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x895, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:29 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x0) 21:04:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 21:04:29 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5cb, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:29 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x968, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:30 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1ec, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:30 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x0) 21:04:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 21:04:30 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x751, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:30 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xb0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:30 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) ioctl$TIOCCONS(r0, 0x541d) 21:04:30 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x0) 21:04:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) shmctl$IPC_SET(0x0, 0xf, &(0x7f0000000380)) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x5f, 0x2}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:30 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1cc, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:30 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6c2, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:30 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0xe2eb, 0x8180) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:04:30 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3aa, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:30 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9c6, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:31 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x10, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:31 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x567, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:04:31 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x432, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:31 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xcf, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) shmctl$IPC_SET(0x0, 0xf, &(0x7f0000000380)) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x5f, 0x2}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:32 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x607, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:32 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xf9, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:04:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:04:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) shmctl$IPC_SET(0x0, 0xf, &(0x7f0000000380)) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x5f, 0x2}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:32 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6d9, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:32 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x975, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1099.372672] serio: Serial port pts0 21:04:32 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 21:04:32 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x824, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:32 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1099.640456] serio: Serial port pts0 21:04:32 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4e0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:33 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3fc, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:04:33 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:33 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:04:33 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:04:33 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x64e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1100.367316] serio: Serial port pts0 [ 1100.370553] serio: Serial port pts2 21:04:33 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0xa00004, 0x4, 0x80000001, [], &(0x7f0000000000)={0xbb0bdb, 0x6, [], @value64=0x6}}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00034000) 21:04:33 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x471, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:33 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:04:33 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) 21:04:33 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xc3, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1100.635547] serio: Serial port pts0 [ 1100.661905] serio: Serial port pts2 21:04:34 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:34 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x82f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:34 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9a5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:34 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) 21:04:34 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x8, 0xb4}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x101}, &(0x7f0000000240)=0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$getregs(0xe, 0x0, 0x3219, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) 21:04:34 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@multicast1, @dev, @multicast1}, 0xc) [ 1101.411426] serio: Serial port pts2 21:04:34 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x744, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:34 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4fd, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:34 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)={0x62}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000100)={0x1, 0xfffffffffffffff7, 0x147d4e83fd51f1ed, 0x1, {0x7, 0x5, 0x0, 0x4}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r3 = fcntl$getown(r1, 0x9) ptrace$getregs(0xe, r3, 0x5753, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x88caffff00000000) [ 1101.624348] serio: Serial port pts0 21:04:34 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x57a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:34 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa1b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:34 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@multicast1, @dev, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x29) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x8) [ 1102.020380] serio: Serial port pts0 21:04:36 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:36 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4be, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:36 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x173, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:36 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@multicast1, @dev, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x29) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x8, 0x400000) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000000c0)) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f00000000c0)=0x8) 21:04:36 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@multicast1, @dev, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x29) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x8, 0x400000) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000000c0)) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f00000000c0)=0x8) 21:04:36 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@multicast1, @dev, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x29) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x8, 0x400000) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f00000000c0)) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x17, 0x1a00000000000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x20, 0x301}, 0x14}}, 0x0) 21:04:36 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2e8, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:36 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x49, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1103.872014] serio: Serial port pts2 [ 1103.872914] serio: Serial port pts0 21:04:37 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@multicast1, @dev, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x29) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x8, 0x400000) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000000c0)) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f00000000c0)=0x8) 21:04:37 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x65d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:37 executing program 3 (fault-call:6 fault-nth:0): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:37 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4e8, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1104.229037] FAULT_INJECTION: forcing a failure. [ 1104.229037] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.268560] CPU: 1 PID: 26015 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #364 [ 1104.268575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.285306] Call Trace: [ 1104.287915] dump_stack+0x244/0x39d [ 1104.291567] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1104.296790] ? debug_smp_processor_id+0x1c/0x20 [ 1104.301497] ? perf_trace_lock+0x14d/0x7a0 [ 1104.305768] should_fail.cold.4+0xa/0x17 [ 1104.309849] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1104.314972] ? lock_is_held_type+0x210/0x210 [ 1104.319414] ? find_held_lock+0x36/0x1c0 [ 1104.323504] ? aa_file_perm+0x469/0x1060 [ 1104.327603] ? find_held_lock+0x36/0x1c0 [ 1104.331713] ? perf_trace_sched_process_exec+0x860/0x860 [ 1104.337194] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 1104.342667] __should_failslab+0x124/0x180 [ 1104.346942] should_failslab+0x9/0x14 [ 1104.350781] kmem_cache_alloc_trace+0x2d7/0x750 [ 1104.355470] ? aa_file_perm+0x490/0x1060 [ 1104.359545] ? rcu_softirq_qs+0x20/0x20 [ 1104.363554] alloc_pipe_info+0x164/0x5d0 [ 1104.367647] ? aa_path_link+0x5e0/0x5e0 [ 1104.371650] ? pipe_read+0x940/0x940 [ 1104.375399] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1104.380337] ? common_file_perm+0x236/0x7f0 [ 1104.384924] ? perf_trace_lock+0x14d/0x7a0 [ 1104.389169] ? find_held_lock+0x36/0x1c0 [ 1104.393316] splice_direct_to_actor+0x6fc/0x8f0 [ 1104.398010] ? pipe_to_sendpage+0x400/0x400 [ 1104.402352] ? apparmor_file_permission+0x24/0x30 [ 1104.407205] ? do_splice_to+0x190/0x190 [ 1104.411704] ? security_file_permission+0x1c2/0x220 [ 1104.416743] ? rw_verify_area+0x118/0x360 [ 1104.420937] do_splice_direct+0x2d4/0x420 [ 1104.425109] ? splice_direct_to_actor+0x8f0/0x8f0 [ 1104.429962] ? apparmor_file_permission+0x24/0x30 [ 1104.434823] ? rw_verify_area+0x118/0x360 [ 1104.439005] do_sendfile+0x62a/0xe20 [ 1104.442747] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1104.447368] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1104.452916] ? _copy_from_user+0xdf/0x150 [ 1104.457078] __x64_sys_sendfile64+0x15d/0x250 [ 1104.461587] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1104.466197] do_syscall_64+0x1b9/0x820 [ 1104.470093] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1104.475471] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1104.480465] ? trace_hardirqs_on_caller+0x310/0x310 [ 1104.485498] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1104.490525] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 1104.497198] ? __switch_to_asm+0x40/0x70 [ 1104.501283] ? __switch_to_asm+0x34/0x70 [ 1104.505363] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1104.510240] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1104.515444] RIP: 0033:0x457569 [ 1104.518642] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1104.537573] RSP: 002b:00007f70aa469c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1104.545461] RAX: ffffffffffffffda RBX: 00007f70aa469c90 RCX: 0000000000457569 [ 1104.552774] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1104.560080] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1104.567365] R10: 0000000000000800 R11: 0000000000000246 R12: 00007f70aa46a6d4 [ 1104.574643] R13: 00000000004c3c2a R14: 00000000004d6230 R15: 0000000000000006 21:04:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:38 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@multicast1, @dev, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x29) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x8, 0x400000) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f00000000c0)) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x17, 0x1a00000000000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x20, 0x301}, 0x14}}, 0x0) 21:04:38 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x80b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:38 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x791, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:38 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@multicast1, @dev, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x29) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x8, 0x400000) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000000c0)) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f00000000c0)=0x8) 21:04:38 executing program 3 (fault-call:6 fault-nth:1): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:38 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7b0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1105.900995] FAULT_INJECTION: forcing a failure. [ 1105.900995] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.958948] CPU: 0 PID: 26024 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #364 [ 1105.966350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.975830] Call Trace: [ 1105.978443] dump_stack+0x244/0x39d [ 1105.982093] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1105.982136] ? debug_smp_processor_id+0x1c/0x20 [ 1105.982156] ? perf_trace_lock+0x14d/0x7a0 [ 1105.982187] should_fail.cold.4+0xa/0x17 [ 1105.982213] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1105.992271] ? save_stack+0x43/0xd0 [ 1105.992287] ? kasan_kmalloc+0xc7/0xe0 [ 1105.992303] ? kmem_cache_alloc_trace+0x152/0x750 [ 1105.992320] ? alloc_pipe_info+0x164/0x5d0 [ 1105.992335] ? splice_direct_to_actor+0x6fc/0x8f0 [ 1105.992354] ? do_sendfile+0x62a/0xe20 [ 1106.001215] serio: Serial port pts0 [ 1106.005748] ? __x64_sys_sendfile64+0x15d/0x250 [ 1106.005795] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1106.005834] ? find_held_lock+0x36/0x1c0 [ 1106.005892] ? perf_trace_sched_process_exec+0x860/0x860 [ 1106.022465] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1106.022494] __should_failslab+0x124/0x180 [ 1106.022515] should_failslab+0x9/0x14 [ 1106.022533] __kmalloc+0x2e0/0x760 [ 1106.059915] ? kmem_cache_alloc_trace+0x353/0x750 [ 1106.059936] ? aa_file_perm+0x490/0x1060 [ 1106.059965] ? rcu_softirq_qs+0x20/0x20 [ 1106.059983] ? alloc_pipe_info+0x2ce/0x5d0 [ 1106.060020] alloc_pipe_info+0x2ce/0x5d0 [ 1106.060038] ? pipe_read+0x940/0x940 [ 1106.060070] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1106.060084] ? common_file_perm+0x236/0x7f0 [ 1106.060099] ? perf_trace_lock+0x14d/0x7a0 [ 1106.060115] ? find_held_lock+0x36/0x1c0 [ 1106.060137] splice_direct_to_actor+0x6fc/0x8f0 [ 1106.060159] ? pipe_to_sendpage+0x400/0x400 [ 1106.060179] ? apparmor_file_permission+0x24/0x30 [ 1106.101644] ? do_splice_to+0x190/0x190 [ 1106.101661] ? security_file_permission+0x1c2/0x220 [ 1106.101680] ? rw_verify_area+0x118/0x360 [ 1106.101700] do_splice_direct+0x2d4/0x420 [ 1106.101720] ? splice_direct_to_actor+0x8f0/0x8f0 [ 1106.101734] ? apparmor_file_permission+0x24/0x30 [ 1106.101768] ? rw_verify_area+0x118/0x360 21:04:39 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x836, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1106.101811] do_sendfile+0x62a/0xe20 [ 1106.101856] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1106.101887] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1106.101905] ? _copy_from_user+0xdf/0x150 [ 1106.101929] __x64_sys_sendfile64+0x15d/0x250 [ 1106.101949] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1106.101981] do_syscall_64+0x1b9/0x820 [ 1106.102001] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1106.123614] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1106.123636] ? trace_hardirqs_on_caller+0x310/0x310 [ 1106.123655] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1106.123675] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 1106.123690] ? __switch_to_asm+0x40/0x70 [ 1106.123707] ? __switch_to_asm+0x34/0x70 [ 1106.141684] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1106.141710] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1106.141723] RIP: 0033:0x457569 21:04:39 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x78f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:39 executing program 3 (fault-call:6 fault-nth:2): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) [ 1106.141740] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1106.141759] RSP: 002b:00007f70aa469c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1106.141782] RAX: ffffffffffffffda RBX: 00007f70aa469c90 RCX: 0000000000457569 [ 1106.141792] RDX: 0000000020000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1106.141802] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1106.141811] R10: 0000000000000800 R11: 0000000000000246 R12: 00007f70aa46a6d4 [ 1106.141820] R13: 00000000004c3c2a R14: 00000000004d6230 R15: 0000000000000006 21:04:39 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 21:04:39 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x969, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:40 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 21:04:40 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x879, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:40 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:40 executing program 1 (fault-call:4 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:40 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:40 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1800000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:41 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1300000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:41 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x656, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1107.967896] FAULT_INJECTION: forcing a failure. [ 1107.967896] name failslab, interval 1, probability 0, space 0, times 0 21:04:41 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x223) 21:04:41 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x10, 0x800) [ 1108.049984] CPU: 0 PID: 26066 Comm: syz-executor1 Not tainted 4.20.0-rc5+ #364 [ 1108.057378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.066737] Call Trace: [ 1108.069394] dump_stack+0x244/0x39d [ 1108.073041] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1108.078258] ? debug_smp_processor_id+0x1c/0x20 [ 1108.082932] ? perf_trace_lock+0x14d/0x7a0 [ 1108.087203] should_fail.cold.4+0xa/0x17 [ 1108.091272] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1108.096380] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1108.101314] ? kasan_check_read+0x11/0x20 [ 1108.105460] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1108.110735] ? rcu_softirq_qs+0x20/0x20 [ 1108.114723] ? zap_class+0x640/0x640 [ 1108.118453] ? lock_acquire+0x1ed/0x520 [ 1108.122437] ? find_held_lock+0x36/0x1c0 [ 1108.126508] ? __lock_is_held+0xb5/0x140 [ 1108.130638] ? crypto_register_shashes+0x68/0xd0 [ 1108.135420] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1108.140965] ? perf_trace_sched_process_exec+0x860/0x860 [ 1108.146434] __should_failslab+0x124/0x180 [ 1108.150678] should_failslab+0x9/0x14 [ 1108.154483] kmem_cache_alloc_trace+0x2d7/0x750 [ 1108.159245] serport_ldisc_read+0xf6/0x680 [ 1108.163496] ? fsnotify+0xef0/0xef0 [ 1108.167133] ? serport_ldisc_open+0x170/0x170 [ 1108.171657] ? ldsem_down_read+0x32/0x40 [ 1108.175736] ? ldsem_down_read+0x32/0x40 [ 1108.179844] tty_read+0x194/0x2a0 [ 1108.183302] ? serport_ldisc_open+0x170/0x170 [ 1108.187810] do_iter_read+0x4a3/0x650 [ 1108.191646] vfs_readv+0x175/0x1c0 [ 1108.195197] ? compat_rw_copy_check_uvector+0x440/0x440 [ 1108.200568] ? wait_for_completion+0x8a0/0x8a0 [ 1108.205185] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1108.210739] ? __fdget_pos+0xde/0x200 [ 1108.214578] ? __fdget_raw+0x20/0x20 [ 1108.218294] ? __sb_end_write+0xd9/0x110 [ 1108.222371] do_readv+0x11a/0x310 [ 1108.225830] ? vfs_readv+0x1c0/0x1c0 [ 1108.229550] ? trace_hardirqs_off_caller+0x310/0x310 [ 1108.234669] __x64_sys_readv+0x75/0xb0 [ 1108.238568] do_syscall_64+0x1b9/0x820 [ 1108.242473] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1108.247851] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1108.252794] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1108.257658] ? trace_hardirqs_on_caller+0x310/0x310 [ 1108.262682] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1108.267705] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1108.272746] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1108.277642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1108.282830] RIP: 0033:0x457569 [ 1108.286041] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1108.304941] RSP: 002b:00007f29e5a1ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1108.312651] RAX: ffffffffffffffda RBX: 00007f29e5a1ec90 RCX: 0000000000457569 [ 1108.319920] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000004 [ 1108.327187] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1108.334469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29e5a1f6d4 [ 1108.341782] R13: 00000000004c37f6 R14: 00000000004d5ca8 R15: 0000000000000005 21:04:41 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x2000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:41 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x2302000000000000) 21:04:41 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x2, 0x800) 21:04:41 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x495, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:41 executing program 1 (fault-call:4 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:41 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x500, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:41 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x23020000) 21:04:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x800000001) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:41 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0xffffffffffff0700, 0x800) 21:04:41 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x85, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:41 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x6, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:41 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:41 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x1000000000000, 0x800) 21:04:41 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x2302) 21:04:41 executing program 5: write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1108.862562] FAULT_INJECTION: forcing a failure. [ 1108.862562] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.923654] CPU: 0 PID: 26120 Comm: syz-executor1 Not tainted 4.20.0-rc5+ #364 [ 1108.931076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.940438] Call Trace: [ 1108.943042] dump_stack+0x244/0x39d [ 1108.946706] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1108.951922] ? debug_smp_processor_id+0x1c/0x20 [ 1108.956609] ? perf_trace_lock+0x14d/0x7a0 [ 1108.960864] should_fail.cold.4+0xa/0x17 [ 1108.964951] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1108.970073] ? debug_object_free+0x690/0x690 [ 1108.974499] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1108.980053] ? check_preemption_disabled+0x48/0x280 [ 1108.985092] ? zap_class+0x640/0x640 [ 1108.988822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1108.994373] ? put_dec_trunc8+0x273/0x300 [ 1108.998546] ? find_held_lock+0x36/0x1c0 [ 1109.002624] ? __lock_is_held+0xb5/0x140 [ 1109.002658] ? enable_ptr_key_workfn+0x30/0x30 [ 1109.011291] ? perf_trace_sched_process_exec+0x860/0x860 [ 1109.011322] __should_failslab+0x124/0x180 [ 1109.011344] should_failslab+0x9/0x14 [ 1109.011361] __kmalloc_track_caller+0x2d1/0x760 [ 1109.011375] ? pointer+0x900/0x900 [ 1109.011457] ? async_suspend_noirq+0x110/0x110 [ 1109.011478] ? kvasprintf_const+0x67/0x190 [ 1109.041963] kvasprintf+0xb5/0x150 [ 1109.045520] ? bust_spinlocks+0xe0/0xe0 [ 1109.049513] ? lockdep_init_map+0x9/0x10 [ 1109.053587] ? debug_mutex_init+0x2d/0x60 [ 1109.057780] kvasprintf_const+0x67/0x190 [ 1109.061867] kobject_set_name_vargs+0x5b/0x150 [ 1109.066469] dev_set_name+0xad/0xe0 21:04:42 executing program 5: write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1109.066487] ? device_initialize+0x5f0/0x5f0 [ 1109.066516] ? __serio_register_port+0x24f/0x570 [ 1109.066538] __serio_register_port+0x271/0x570 [ 1109.066555] ? serio_resume+0x140/0x140 [ 1109.066577] ? snprintf+0xae/0xe0 [ 1109.074636] ? vsprintf+0x40/0x40 [ 1109.074658] ? kmem_cache_alloc_trace+0x353/0x750 [ 1109.074690] serport_ldisc_read+0x3be/0x680 [ 1109.074705] ? fsnotify+0xef0/0xef0 [ 1109.074725] ? serport_ldisc_open+0x170/0x170 [ 1109.112270] ? ldsem_down_read+0x32/0x40 [ 1109.116345] ? ldsem_down_read+0x32/0x40 [ 1109.120422] tty_read+0x194/0x2a0 [ 1109.123896] ? serport_ldisc_open+0x170/0x170 [ 1109.128408] do_iter_read+0x4a3/0x650 [ 1109.132234] vfs_readv+0x175/0x1c0 [ 1109.135837] ? compat_rw_copy_check_uvector+0x440/0x440 [ 1109.141217] ? wait_for_completion+0x8a0/0x8a0 [ 1109.145881] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1109.151439] ? __fdget_pos+0xde/0x200 [ 1109.155258] ? __fdget_raw+0x20/0x20 [ 1109.158992] ? __sb_end_write+0xd9/0x110 [ 1109.163080] do_readv+0x11a/0x310 [ 1109.166554] ? vfs_readv+0x1c0/0x1c0 [ 1109.170288] ? trace_hardirqs_off_caller+0x310/0x310 [ 1109.175417] __x64_sys_readv+0x75/0xb0 [ 1109.179325] do_syscall_64+0x1b9/0x820 [ 1109.183222] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1109.188615] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1109.193555] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1109.198407] ? trace_hardirqs_on_caller+0x310/0x310 [ 1109.198425] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1109.198445] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1109.213545] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1109.218515] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1109.223717] RIP: 0033:0x457569 [ 1109.226931] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1109.245836] RSP: 002b:00007f29e5a1ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1109.253534] RAX: ffffffffffffffda RBX: 00007f29e5a1ec90 RCX: 0000000000457569 [ 1109.260791] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000004 [ 1109.268045] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 21:04:42 executing program 1 (fault-call:4 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:42 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xb000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:42 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000080)=""/99) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0xa901, 0x4}) read$eventfd(r0, 0x0, 0x0) 21:04:42 executing program 5: write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:42 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x8000000, 0x800) 21:04:42 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x39d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1109.275314] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29e5a1f6d4 [ 1109.282584] R13: 00000000004c37f6 R14: 00000000004d5ca8 R15: 0000000000000005 [ 1109.292439] serio (null): device_add() failed for pts0/serio0 (Serial port), error: -22 [ 1109.304140] serio: Serial port pts0 [ 1109.427312] FAULT_INJECTION: forcing a failure. [ 1109.427312] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.438800] CPU: 1 PID: 26158 Comm: syz-executor1 Not tainted 4.20.0-rc5+ #364 [ 1109.446167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.455524] Call Trace: [ 1109.458127] dump_stack+0x244/0x39d [ 1109.461801] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1109.467010] ? save_stack+0x43/0xd0 [ 1109.470668] ? kasan_kmalloc+0xc7/0xe0 [ 1109.474567] ? __kmalloc_track_caller+0x157/0x760 [ 1109.479435] ? kvasprintf_const+0x67/0x190 [ 1109.483693] should_fail.cold.4+0xa/0x17 [ 1109.487775] ? put_dec_trunc8+0x273/0x300 [ 1109.491954] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1109.497109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1109.502689] ? number+0x972/0xca0 [ 1109.506164] ? put_dec+0xf0/0xf0 [ 1109.509544] ? format_decode+0x1b2/0xaf0 [ 1109.513636] ? enable_ptr_key_workfn+0x30/0x30 [ 1109.518279] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1109.523842] ? zap_class+0x640/0x640 [ 1109.527586] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1109.533156] ? lock_acquire+0x1ed/0x520 [ 1109.537149] ? serio_queue_event+0x82/0x470 [ 1109.541500] __should_failslab+0x124/0x180 [ 1109.545761] should_failslab+0x9/0x14 [ 1109.549575] kmem_cache_alloc_trace+0x4b/0x750 [ 1109.554170] ? kfree+0x1f8/0x230 [ 1109.557566] serio_queue_event+0x16d/0x470 [ 1109.561846] ? serio_uevent+0x3a0/0x3a0 [ 1109.565837] ? __lockdep_init_map+0x105/0x590 [ 1109.570352] __serio_register_port+0x40e/0x570 [ 1109.574947] ? serio_resume+0x140/0x140 [ 1109.578975] ? snprintf+0xae/0xe0 [ 1109.582456] ? vsprintf+0x40/0x40 [ 1109.585926] ? kmem_cache_alloc_trace+0x353/0x750 [ 1109.590803] serport_ldisc_read+0x3be/0x680 [ 1109.595132] ? fsnotify+0xef0/0xef0 [ 1109.598790] ? serport_ldisc_open+0x170/0x170 [ 1109.603331] ? ldsem_down_read+0x32/0x40 [ 1109.607410] ? ldsem_down_read+0x32/0x40 [ 1109.611482] tty_read+0x194/0x2a0 [ 1109.614954] ? serport_ldisc_open+0x170/0x170 [ 1109.619468] do_iter_read+0x4a3/0x650 [ 1109.623309] vfs_readv+0x175/0x1c0 [ 1109.626885] ? compat_rw_copy_check_uvector+0x440/0x440 [ 1109.632317] ? wait_for_completion+0x8a0/0x8a0 [ 1109.636934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1109.642497] ? __fdget_pos+0xde/0x200 [ 1109.646359] ? __fdget_raw+0x20/0x20 [ 1109.650080] ? __sb_end_write+0xd9/0x110 [ 1109.650110] do_readv+0x11a/0x310 [ 1109.650127] ? vfs_readv+0x1c0/0x1c0 [ 1109.657631] ? trace_hardirqs_off_caller+0x310/0x310 [ 1109.666439] __x64_sys_readv+0x75/0xb0 [ 1109.670344] do_syscall_64+0x1b9/0x820 [ 1109.674242] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1109.679621] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1109.684560] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1109.689418] ? trace_hardirqs_on_caller+0x310/0x310 [ 1109.694455] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1109.699485] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1109.704519] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1109.709413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1109.714605] RIP: 0033:0x457569 [ 1109.717826] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1109.736775] RSP: 002b:00007f29e5a1ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1109.744528] RAX: ffffffffffffffda RBX: 00007f29e5a1ec90 RCX: 0000000000457569 [ 1109.751800] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000004 [ 1109.759074] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1109.766345] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29e5a1f6d4 21:04:42 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=0x0) fchownat(r1, &(0x7f0000000040)='./file0\x00', r2, r3, 0x1000) read$eventfd(r0, 0x0, 0x0) 21:04:42 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4fa, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:42 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200103, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000040)={0xe3, ""/227}) 21:04:42 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200000, 0x0) read$eventfd(r0, 0x0, 0x391) 21:04:42 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:42 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) read$eventfd(r0, 0x0, 0x0) [ 1109.773625] R13: 00000000004c37f6 R14: 00000000004d5ca8 R15: 0000000000000005 [ 1109.780927] serio: Not enough memory to queue event 3 [ 1109.791944] serio: Serial port pts0 21:04:42 executing program 1 (fault-call:4 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:42 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x2000, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) read$eventfd(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000440)={0x4, &(0x7f00000000c0)=""/170, &(0x7f00000003c0)=[{0x7fffffff, 0x1a, 0x58f, &(0x7f0000000180)=""/26}, {0x0, 0xbe, 0xff, &(0x7f0000000240)=""/190}, {0x401, 0x0, 0x3, &(0x7f00000001c0)}, {0x10001, 0xab, 0x1, &(0x7f0000000300)=""/171}]}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xb6e8}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0)={r2, 0x92, "607ce9f982bbccb45b79822d33d32900d549a20bb6d6e50126767fd34a654a8aac3de33412faa9ef86ee150ad6ef336e27dbff46a366f918f546beb6e2a3d606f1b42264de3407552aba2809b70d7f6329327047d0bc811327181113b717af6e9d796963a57211ab3454671302e2adc6151f52727df9c4d2ee111e5b2f361db335cd32b852fe9a135ddb72903ee27f2f06ef"}, &(0x7f0000000580)=0x9a) 21:04:42 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:42 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x10000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:42 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x7ffffffffffff, 0x800) 21:04:42 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1d4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:43 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x335, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:43 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x3f00, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:43 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0xfffffffd) r1 = fcntl$getown(r0, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0xe, &(0x7f0000000000)='cgroupvmnet0+\x00'}, 0x30) kcmp(r1, r2, 0x7, r0, r0) 21:04:43 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x10000000, 0x800) [ 1110.005524] serio: Serial port pts0 21:04:43 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x800000001) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1110.053087] FAULT_INJECTION: forcing a failure. [ 1110.053087] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.120636] CPU: 0 PID: 26199 Comm: syz-executor1 Not tainted 4.20.0-rc5+ #364 [ 1110.128044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.137413] Call Trace: [ 1110.140030] dump_stack+0x244/0x39d [ 1110.143724] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1110.143785] ? debug_smp_processor_id+0x1c/0x20 [ 1110.143810] ? perf_trace_lock+0x14d/0x7a0 [ 1110.153660] should_fail.cold.4+0xa/0x17 [ 1110.153684] ? fault_create_debugfs_attr+0x1f0/0x1f0 21:04:43 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xd, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1110.153701] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1110.153717] ? wake_up_klogd+0x11a/0x180 [ 1110.153735] ? console_device+0xc0/0xc0 [ 1110.180731] ? __down_trylock_console_sem+0x151/0x1f0 [ 1110.185955] ? zap_class+0x640/0x640 [ 1110.189683] ? vprintk_emit+0x293/0x990 [ 1110.193682] ? find_held_lock+0x36/0x1c0 [ 1110.197797] ? __lock_is_held+0xb5/0x140 [ 1110.201920] ? dbg_check_filesystem+0x8b8/0xec0 [ 1110.206650] ? perf_trace_sched_process_exec+0x860/0x860 [ 1110.212117] ? vprintk_default+0x28/0x30 [ 1110.212142] __should_failslab+0x124/0x180 [ 1110.212165] should_failslab+0x9/0x14 [ 1110.212183] kmem_cache_alloc_trace+0x2d7/0x750 [ 1110.212211] kobject_uevent_env+0x2f3/0x101e [ 1110.220617] ? srcu_init_notifier_head+0xa0/0xa0 [ 1110.220642] kobject_uevent+0x1f/0x24 [ 1110.220663] device_del+0x6c9/0xb70 [ 1110.220688] ? __device_links_no_driver+0x320/0x320 [ 1110.220704] ? _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 1110.220734] serio_destroy_port+0x62c/0x7f0 [ 1110.220764] ? device_release_driver_internal+0x162/0x740 [ 1110.265786] ? serio_remove_pending_events+0x430/0x430 [ 1110.271081] ? device_release_driver+0x19/0x20 [ 1110.275676] ? serio_disconnect_port+0x228/0x310 [ 1110.280447] ? serio_destroy_port+0x7f0/0x7f0 [ 1110.284957] ? perf_trace_sched_process_exec+0x860/0x860 [ 1110.290419] ? printk+0xa7/0xcf [ 1110.293729] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1110.298521] ? replenish_dl_entity.cold.55+0x36/0x36 [ 1110.303652] serio_unregister_port+0x2b/0x40 [ 1110.308092] serport_ldisc_read+0x44e/0x680 [ 1110.312433] ? serport_ldisc_open+0x170/0x170 [ 1110.316946] ? finish_wait+0x430/0x430 [ 1110.320855] ? ldsem_down_read+0x32/0x40 [ 1110.324928] ? ldsem_down_read+0x32/0x40 [ 1110.329009] tty_read+0x194/0x2a0 [ 1110.332488] ? serport_ldisc_open+0x170/0x170 [ 1110.337004] do_iter_read+0x4a3/0x650 [ 1110.340834] vfs_readv+0x175/0x1c0 [ 1110.344407] ? compat_rw_copy_check_uvector+0x440/0x440 [ 1110.349807] ? wait_for_completion+0x8a0/0x8a0 [ 1110.354432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1110.359984] ? __fdget_pos+0xde/0x200 [ 1110.363806] ? __fdget_raw+0x20/0x20 [ 1110.367538] ? __sb_end_write+0xd9/0x110 [ 1110.371642] do_readv+0x11a/0x310 [ 1110.375112] ? vfs_readv+0x1c0/0x1c0 [ 1110.375135] ? trace_hardirqs_off_caller+0x310/0x310 [ 1110.375160] __x64_sys_readv+0x75/0xb0 [ 1110.375184] do_syscall_64+0x1b9/0x820 [ 1110.384701] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1110.384722] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1110.384739] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1110.384791] ? trace_hardirqs_on_caller+0x310/0x310 [ 1110.384826] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1110.417885] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1110.422918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1110.422943] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1110.422956] RIP: 0033:0x457569 [ 1110.422989] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1110.422998] RSP: 002b:00007f29e5a1ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1110.423013] RAX: ffffffffffffffda RBX: 00007f29e5a1ec90 RCX: 0000000000457569 21:04:43 executing program 1 (fault-call:4 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:43 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x11000000, 0x800) 21:04:43 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x500000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:43 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1000, 0x1018, 0x101, {"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"}}, {0x0, "889fb5a8b5a406d4ce38bc9f041a7b823189a0d688efe4a31ee507f716682b2b630052caedd4ad26f3db4e03bfd1d599ca87dc4b729ade8d445dbd768c1b"}}, &(0x7f00000012c0)=""/199, 0x1058, 0xc7}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001400)={0x0, r3, 0x6, 0x8, 0x1, 0x8}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x81, @mcast1, 0x9a8}}, 0xd634, 0x1f}, &(0x7f0000000100)=0x3d2) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r4, 0x100}, &(0x7f0000000180)=0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x1, 0x0, 0x1, 0x4, 0x10, 0x4, 0x5}, 0x20) read$eventfd(r0, 0x0, 0x0) 21:04:43 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7d1, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1110.423027] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000004 [ 1110.436239] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1110.484680] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29e5a1f6d4 [ 1110.491963] R13: 00000000004c37f6 R14: 00000000004d5ca8 R15: 0000000000000005 21:04:43 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x400001) [ 1110.651179] serio: Serial port pts0 21:04:43 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xc000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:43 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x2000000, 0x800) 21:04:43 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xfb, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1110.677006] FAULT_INJECTION: forcing a failure. [ 1110.677006] name failslab, interval 1, probability 0, space 0, times 0 21:04:43 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000040)=0x6) read$eventfd(r0, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000080)={0x8, 0x10001, 0x7000000000000000}) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0xfc, 0x8}) 21:04:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1110.769811] CPU: 0 PID: 26237 Comm: syz-executor1 Not tainted 4.20.0-rc5+ #364 [ 1110.777212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.786567] Call Trace: [ 1110.789170] dump_stack+0x244/0x39d [ 1110.792839] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1110.798051] ? debug_smp_processor_id+0x1c/0x20 [ 1110.802780] ? perf_trace_lock+0x14d/0x7a0 [ 1110.807067] should_fail.cold.4+0xa/0x17 [ 1110.811143] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1110.816274] ? zap_class+0x640/0x640 [ 1110.820007] ? kasan_kmalloc+0xc7/0xe0 [ 1110.823906] ? kmem_cache_alloc_trace+0x152/0x750 [ 1110.823936] ? kobject_uevent_env+0x2f3/0x101e [ 1110.823950] ? kobject_uevent+0x1f/0x24 [ 1110.823966] ? device_del+0x6c9/0xb70 [ 1110.823987] ? find_held_lock+0x36/0x1c0 [ 1110.833404] ? __lock_is_held+0xb5/0x140 [ 1110.833439] ? perf_trace_sched_process_exec+0x860/0x860 [ 1110.833468] __should_failslab+0x124/0x180 [ 1110.833489] should_failslab+0x9/0x14 [ 1110.833507] __kmalloc+0x2e0/0x760 [ 1110.866395] ? kobject_uevent_env+0x2f3/0x101e [ 1110.870995] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1110.876033] ? kobject_get_path+0xc2/0x1b0 [ 1110.880284] ? kmem_cache_alloc_trace+0x353/0x750 [ 1110.885145] kobject_get_path+0xc2/0x1b0 [ 1110.889231] kobject_uevent_env+0x314/0x101e [ 1110.893661] ? srcu_init_notifier_head+0xa0/0xa0 [ 1110.898443] kobject_uevent+0x1f/0x24 [ 1110.902298] device_del+0x6c9/0xb70 [ 1110.905976] ? __device_links_no_driver+0x320/0x320 [ 1110.911051] ? _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 1110.916209] serio_destroy_port+0x62c/0x7f0 [ 1110.920562] ? device_release_driver_internal+0x162/0x740 [ 1110.926118] ? serio_remove_pending_events+0x430/0x430 [ 1110.931429] ? device_release_driver+0x19/0x20 [ 1110.936042] ? serio_disconnect_port+0x228/0x310 [ 1110.940824] ? serio_destroy_port+0x7f0/0x7f0 [ 1110.945339] ? perf_trace_sched_process_exec+0x860/0x860 [ 1110.950808] ? printk+0xa7/0xcf [ 1110.954101] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1110.958876] ? replenish_dl_entity.cold.55+0x36/0x36 [ 1110.964008] serio_unregister_port+0x2b/0x40 [ 1110.968433] serport_ldisc_read+0x44e/0x680 [ 1110.972790] ? serport_ldisc_open+0x170/0x170 [ 1110.977302] ? finish_wait+0x430/0x430 [ 1110.981210] ? ldsem_down_read+0x32/0x40 [ 1110.985291] ? ldsem_down_read+0x32/0x40 [ 1110.989373] tty_read+0x194/0x2a0 [ 1110.992840] ? serport_ldisc_open+0x170/0x170 [ 1110.997356] do_iter_read+0x4a3/0x650 [ 1110.997390] vfs_readv+0x175/0x1c0 [ 1110.997413] ? compat_rw_copy_check_uvector+0x440/0x440 [ 1110.997434] ? wait_for_completion+0x8a0/0x8a0 [ 1111.004809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1111.004832] ? __fdget_pos+0xde/0x200 [ 1111.024109] ? __fdget_raw+0x20/0x20 [ 1111.027836] ? __sb_end_write+0xd9/0x110 [ 1111.031931] do_readv+0x11a/0x310 [ 1111.031954] ? vfs_readv+0x1c0/0x1c0 [ 1111.031975] ? trace_hardirqs_off_caller+0x310/0x310 [ 1111.032015] __x64_sys_readv+0x75/0xb0 [ 1111.032037] do_syscall_64+0x1b9/0x820 [ 1111.032072] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1111.044357] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1111.062419] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1111.067279] ? trace_hardirqs_on_caller+0x310/0x310 [ 1111.072314] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1111.077351] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1111.082408] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1111.087275] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1111.092513] RIP: 0033:0x457569 [ 1111.095720] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1111.114658] RSP: 002b:00007f29e5a1ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1111.122384] RAX: ffffffffffffffda RBX: 00007f29e5a1ec90 RCX: 0000000000457569 [ 1111.129646] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000004 [ 1111.137031] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1111.144323] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29e5a1f6d4 [ 1111.151606] R13: 00000000004c37f6 R14: 00000000004d5ca8 R15: 0000000000000005 21:04:44 executing program 1 (fault-call:4 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:44 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x20c282) read$eventfd(r0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0xa0000, 0x0) openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = dup3(r0, r0, 0x80000) faccessat(r2, &(0x7f0000000040)='./file0\x00', 0x80, 0x1000) 21:04:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:44 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x4005609, 0x800) 21:04:44 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xe00, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:44 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x235, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:44 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x3, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:44 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1000, 0x200) dup2(r0, r0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40080, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) read$eventfd(r2, 0x0, 0x0) 21:04:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:44 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8be, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:44 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x1000000, 0x800) [ 1111.371259] serio: Serial port pts0 [ 1111.427671] FAULT_INJECTION: forcing a failure. [ 1111.427671] name failslab, interval 1, probability 0, space 0, times 0 21:04:44 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x3000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1111.471121] CPU: 0 PID: 26285 Comm: syz-executor1 Not tainted 4.20.0-rc5+ #364 [ 1111.478508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.487885] Call Trace: [ 1111.490490] dump_stack+0x244/0x39d [ 1111.494138] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1111.499358] ? debug_smp_processor_id+0x1c/0x20 [ 1111.504039] ? perf_trace_lock+0x14d/0x7a0 [ 1111.508302] should_fail.cold.4+0xa/0x17 [ 1111.512381] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1111.517522] ? lock_release+0xa00/0xa00 [ 1111.521507] ? zap_class+0x640/0x640 [ 1111.525233] ? put_dec+0xf0/0xf0 [ 1111.528636] ? format_decode+0x1b2/0xaf0 [ 1111.532715] ? find_held_lock+0x36/0x1c0 [ 1111.536811] ? __lock_is_held+0xb5/0x140 [ 1111.540905] ? put_dec+0x3b/0xf0 [ 1111.544323] ? perf_trace_sched_process_exec+0x860/0x860 [ 1111.549808] ? zap_class+0x640/0x640 [ 1111.553548] __should_failslab+0x124/0x180 [ 1111.557833] should_failslab+0x9/0x14 [ 1111.561645] kmem_cache_alloc_node+0x26e/0x730 [ 1111.566242] ? find_held_lock+0x36/0x1c0 [ 1111.570330] __alloc_skb+0x119/0x770 [ 1111.574051] ? netdev_alloc_frag+0x1f0/0x1f0 [ 1111.578449] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1111.583366] ? kasan_check_read+0x11/0x20 [ 1111.587502] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1111.592792] ? rcu_softirq_qs+0x20/0x20 [ 1111.596806] ? netlink_has_listeners+0x2cb/0x4a0 [ 1111.601552] ? netlink_tap_init_net+0x3d0/0x3d0 [ 1111.606235] alloc_uevent_skb+0x84/0x1da [ 1111.610292] kobject_uevent_env+0xa52/0x101e [ 1111.614693] ? srcu_init_notifier_head+0xa0/0xa0 [ 1111.619438] kobject_uevent+0x1f/0x24 [ 1111.623227] device_del+0x6c9/0xb70 [ 1111.626878] ? __device_links_no_driver+0x320/0x320 [ 1111.631883] ? _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 1111.636985] serio_destroy_port+0x62c/0x7f0 [ 1111.641294] ? device_release_driver_internal+0x162/0x740 [ 1111.646823] ? serio_remove_pending_events+0x430/0x430 [ 1111.652102] ? device_release_driver+0x19/0x20 [ 1111.656701] ? serio_disconnect_port+0x228/0x310 [ 1111.661497] ? serio_destroy_port+0x7f0/0x7f0 [ 1111.665994] ? perf_trace_sched_process_exec+0x860/0x860 [ 1111.671431] ? printk+0xa7/0xcf [ 1111.674700] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1111.679460] ? replenish_dl_entity.cold.55+0x36/0x36 [ 1111.684568] serio_unregister_port+0x2b/0x40 [ 1111.689004] serport_ldisc_read+0x44e/0x680 [ 1111.693333] ? serport_ldisc_open+0x170/0x170 [ 1111.697817] ? finish_wait+0x430/0x430 [ 1111.701693] ? ldsem_down_read+0x32/0x40 [ 1111.705771] ? ldsem_down_read+0x32/0x40 [ 1111.709827] tty_read+0x194/0x2a0 [ 1111.713268] ? serport_ldisc_open+0x170/0x170 [ 1111.717764] do_iter_read+0x4a3/0x650 [ 1111.721565] vfs_readv+0x175/0x1c0 [ 1111.725094] ? compat_rw_copy_check_uvector+0x440/0x440 [ 1111.730449] ? wait_for_completion+0x8a0/0x8a0 [ 1111.735062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1111.740593] ? __fdget_pos+0xde/0x200 [ 1111.744379] ? __fdget_raw+0x20/0x20 [ 1111.748079] ? __sb_end_write+0xd9/0x110 [ 1111.752135] do_readv+0x11a/0x310 [ 1111.755593] ? vfs_readv+0x1c0/0x1c0 [ 1111.759297] ? trace_hardirqs_off_caller+0x310/0x310 [ 1111.764391] __x64_sys_readv+0x75/0xb0 [ 1111.768270] do_syscall_64+0x1b9/0x820 [ 1111.772145] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1111.777496] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1111.782425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1111.787255] ? trace_hardirqs_on_caller+0x310/0x310 [ 1111.792291] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1111.797299] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1111.802135] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1111.807312] RIP: 0033:0x457569 [ 1111.810508] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1111.829426] RSP: 002b:00007f29e5a1ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1111.837139] RAX: ffffffffffffffda RBX: 00007f29e5a1ec90 RCX: 0000000000457569 [ 1111.844401] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000004 [ 1111.851673] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1111.858934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29e5a1f6d4 [ 1111.866204] R13: 00000000004c37f6 R14: 00000000004d5ca8 R15: 0000000000000005 21:04:44 executing program 1 (fault-call:4 fault-nth:6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:44 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xd000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:44 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x209, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:44 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)="2e2f6367726f75702e6e65742f73797a3100379fa57b9f409196d150eaa7a2d3959417229e68e2a2bf7938a3e8983d742617b7b574f935de189df0a4580f8ead418395af4700acb705300ecb591490fbf18e8d22b3aff54ad6bae0cba7596946072106133bfcd3b20bc4d5351ebaa8822fdf7b9fd435d7248ef61e4c75723acd0caa640f4bb2f844b8c25e9cd6690f1574d265adab3520b1d6111556e9d053e2f4dca84bf824252d704ab4fd", 0x200002, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x7fffffff, 0x402003) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0xbe0000, 0xb5, 0x0, [], &(0x7f0000000180)={0x0, 0xd9f0000000000, [], @string=&(0x7f0000000140)=0x375a}}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400080, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) read$eventfd(r0, 0x0, 0x0) 21:04:45 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x9560004, 0x800) 21:04:45 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) getpriority(0x0, r0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 21:04:45 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x1000000000000000, 0x800) 21:04:45 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x13000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1112.078954] serio: Serial port pts0 21:04:45 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa53, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1112.114441] FAULT_INJECTION: forcing a failure. [ 1112.114441] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.139819] CPU: 1 PID: 26325 Comm: syz-executor1 Not tainted 4.20.0-rc5+ #364 [ 1112.147214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.156581] Call Trace: [ 1112.159191] dump_stack+0x244/0x39d [ 1112.162857] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1112.168071] ? debug_smp_processor_id+0x1c/0x20 [ 1112.172772] ? perf_trace_lock+0x14d/0x7a0 [ 1112.177035] should_fail.cold.4+0xa/0x17 [ 1112.181123] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1112.186245] ? __save_stack_trace+0x8d/0xf0 [ 1112.190606] ? zap_class+0x640/0x640 [ 1112.194340] ? save_stack+0xa9/0xd0 [ 1112.197988] ? save_stack+0x43/0xd0 [ 1112.201640] ? find_held_lock+0x36/0x1c0 [ 1112.205724] ? __lock_is_held+0xb5/0x140 [ 1112.209887] ? drm_dp_mst_hpd_irq+0x1f58/0x2470 [ 1112.214592] ? zap_class+0x640/0x640 [ 1112.218323] ? perf_trace_sched_process_exec+0x860/0x860 [ 1112.223808] ? check_preemption_disabled+0x48/0x280 [ 1112.228851] __should_failslab+0x124/0x180 [ 1112.233109] should_failslab+0x9/0x14 [ 1112.236923] kmem_cache_alloc_node_trace+0x270/0x740 [ 1112.242057] __kmalloc_node_track_caller+0x3c/0x70 [ 1112.247015] __kmalloc_reserve.isra.40+0x41/0xe0 [ 1112.251802] __alloc_skb+0x155/0x770 [ 1112.255544] ? netdev_alloc_frag+0x1f0/0x1f0 [ 1112.259965] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1112.264908] ? kasan_check_read+0x11/0x20 [ 1112.269074] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1112.274396] ? rcu_softirq_qs+0x20/0x20 [ 1112.278399] ? netlink_has_listeners+0x2cb/0x4a0 [ 1112.283169] ? netlink_tap_init_net+0x3d0/0x3d0 [ 1112.287855] alloc_uevent_skb+0x84/0x1da [ 1112.291951] kobject_uevent_env+0xa52/0x101e [ 1112.296378] ? srcu_init_notifier_head+0xa0/0xa0 [ 1112.301175] kobject_uevent+0x1f/0x24 [ 1112.305023] device_del+0x6c9/0xb70 [ 1112.308688] ? __device_links_no_driver+0x320/0x320 [ 1112.313718] ? _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 1112.318876] serio_destroy_port+0x62c/0x7f0 [ 1112.323255] ? device_release_driver_internal+0x162/0x740 [ 1112.328854] ? serio_remove_pending_events+0x430/0x430 [ 1112.334189] ? device_release_driver+0x19/0x20 [ 1112.338795] ? serio_disconnect_port+0x228/0x310 [ 1112.343571] ? serio_destroy_port+0x7f0/0x7f0 [ 1112.348085] ? perf_trace_sched_process_exec+0x860/0x860 [ 1112.353583] ? printk+0xa7/0xcf [ 1112.356880] ? kmsg_dump_rewind_nolock+0xe4/0xe4 21:04:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:45 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x100000000000000, 0x800) [ 1112.361653] ? replenish_dl_entity.cold.55+0x36/0x36 [ 1112.366793] serio_unregister_port+0x2b/0x40 [ 1112.371216] serport_ldisc_read+0x44e/0x680 [ 1112.375561] ? serport_ldisc_open+0x170/0x170 [ 1112.380073] ? finish_wait+0x430/0x430 [ 1112.383991] ? ldsem_down_read+0x32/0x40 [ 1112.388069] ? ldsem_down_read+0x32/0x40 [ 1112.392147] tty_read+0x194/0x2a0 [ 1112.395614] ? serport_ldisc_open+0x170/0x170 [ 1112.400128] do_iter_read+0x4a3/0x650 [ 1112.403941] vfs_readv+0x175/0x1c0 [ 1112.407490] ? compat_rw_copy_check_uvector+0x440/0x440 [ 1112.413156] ? wait_for_completion+0x8a0/0x8a0 [ 1112.417780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1112.423324] ? __fdget_pos+0xde/0x200 [ 1112.427130] ? __fdget_raw+0x20/0x20 [ 1112.430844] ? __sb_end_write+0xd9/0x110 [ 1112.434913] do_readv+0x11a/0x310 [ 1112.438359] ? vfs_readv+0x1c0/0x1c0 [ 1112.442077] ? trace_hardirqs_off_caller+0x310/0x310 [ 1112.447206] __x64_sys_readv+0x75/0xb0 [ 1112.451110] do_syscall_64+0x1b9/0x820 [ 1112.454993] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1112.460362] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1112.465297] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1112.470158] ? trace_hardirqs_on_caller+0x310/0x310 [ 1112.475180] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1112.480189] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1112.485199] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1112.490082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1112.495313] RIP: 0033:0x457569 [ 1112.498505] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1112.517411] RSP: 002b:00007f29e5a1ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1112.525126] RAX: ffffffffffffffda RBX: 00007f29e5a1ec90 RCX: 0000000000457569 [ 1112.532396] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000004 [ 1112.539671] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1112.546929] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29e5a1f6d4 [ 1112.554192] R13: 00000000004c37f6 R14: 00000000004d5ca8 R15: 0000000000000005 21:04:45 executing program 1 (fault-call:4 fault-nth:7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, 0x0, 0x0) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:45 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0xffffffff00000000, 0x800) 21:04:45 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1000000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:45 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x20000) write$P9_RLOCK(r1, &(0x7f0000000040)={0x8, 0x35, 0x2, 0x2}, 0x8) read$eventfd(r0, 0x0, 0x0) 21:04:45 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3ea, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:45 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7b0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:45 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x7000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:45 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$assume_authority(0x10, r1) 21:04:45 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x400560900000000, 0x800) 21:04:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, 0x0, 0x0) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1112.806689] serio: Serial port pts0 [ 1112.858039] FAULT_INJECTION: forcing a failure. [ 1112.858039] name failslab, interval 1, probability 0, space 0, times 0 21:04:46 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1112.939990] CPU: 1 PID: 26366 Comm: syz-executor1 Not tainted 4.20.0-rc5+ #364 [ 1112.947407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.956767] Call Trace: [ 1112.959354] dump_stack+0x244/0x39d [ 1112.962989] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1112.968183] ? debug_smp_processor_id+0x1c/0x20 [ 1112.972853] ? perf_trace_lock+0x14d/0x7a0 [ 1112.977113] should_fail.cold.4+0xa/0x17 [ 1112.981213] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1112.986332] ? rcu_softirq_qs+0x20/0x20 [ 1112.990325] ? unwind_dump+0x190/0x190 [ 1112.994256] ? is_bpf_text_address+0xd3/0x170 [ 1112.998791] ? zap_class+0x640/0x640 [ 1113.002540] ? find_held_lock+0x36/0x1c0 [ 1113.006626] ? __lock_is_held+0xb5/0x140 [ 1113.010719] ? kobject_uevent+0x1f/0x24 [ 1113.014775] ? perf_trace_sched_process_exec+0x860/0x860 [ 1113.020303] ? serport_ldisc_read+0x44e/0x680 [ 1113.024823] ? tty_read+0x194/0x2a0 [ 1113.028466] ? vfs_readv+0x175/0x1c0 [ 1113.032196] ? do_syscall_64+0x1b9/0x820 [ 1113.036272] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1113.041680] __should_failslab+0x124/0x180 [ 1113.045925] should_failslab+0x9/0x14 [ 1113.049729] kmem_cache_alloc+0x2be/0x730 [ 1113.053922] skb_clone+0x1bb/0x500 [ 1113.057509] ? skb_split+0x11e0/0x11e0 [ 1113.061414] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1113.066446] ? netlink_trim+0x1b4/0x380 [ 1113.070438] ? netlink_skb_destructor+0x210/0x210 [ 1113.075316] netlink_broadcast_filtered+0x110f/0x1680 [ 1113.080526] ? __netlink_sendskb+0xd0/0xd0 [ 1113.084796] ? kasan_check_read+0x11/0x20 [ 1113.088961] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1113.094249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1113.099843] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 1113.105319] ? refcount_add_not_zero_checked+0x330/0x330 [ 1113.110792] ? netlink_has_listeners+0x2cb/0x4a0 [ 1113.115558] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1113.120602] netlink_broadcast+0x3a/0x50 [ 1113.124677] kobject_uevent_env+0xa83/0x101e [ 1113.129093] ? srcu_init_notifier_head+0xa0/0xa0 [ 1113.133861] kobject_uevent+0x1f/0x24 [ 1113.137672] device_del+0x6c9/0xb70 [ 1113.141324] ? __device_links_no_driver+0x320/0x320 [ 1113.146341] ? _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 1113.151460] serio_destroy_port+0x62c/0x7f0 [ 1113.155788] ? device_release_driver_internal+0x162/0x740 [ 1113.161332] ? serio_remove_pending_events+0x430/0x430 [ 1113.166632] ? device_release_driver+0x19/0x20 [ 1113.171239] ? serio_disconnect_port+0x228/0x310 [ 1113.176022] ? serio_destroy_port+0x7f0/0x7f0 [ 1113.180525] ? perf_trace_sched_process_exec+0x860/0x860 [ 1113.185983] ? printk+0xa7/0xcf [ 1113.189270] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1113.194040] ? replenish_dl_entity.cold.55+0x36/0x36 [ 1113.199162] serio_unregister_port+0x2b/0x40 [ 1113.203580] serport_ldisc_read+0x44e/0x680 [ 1113.207928] ? serport_ldisc_open+0x170/0x170 [ 1113.212438] ? finish_wait+0x430/0x430 [ 1113.216339] ? ldsem_down_read+0x32/0x40 [ 1113.220435] ? ldsem_down_read+0x32/0x40 [ 1113.224507] tty_read+0x194/0x2a0 [ 1113.227966] ? serport_ldisc_open+0x170/0x170 [ 1113.232473] do_iter_read+0x4a3/0x650 [ 1113.236300] vfs_readv+0x175/0x1c0 [ 1113.239866] ? compat_rw_copy_check_uvector+0x440/0x440 [ 1113.245238] ? wait_for_completion+0x8a0/0x8a0 [ 1113.249879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1113.255420] ? __fdget_pos+0xde/0x200 [ 1113.259224] ? __fdget_raw+0x20/0x20 [ 1113.262961] ? __sb_end_write+0xd9/0x110 [ 1113.267037] do_readv+0x11a/0x310 [ 1113.270520] ? vfs_readv+0x1c0/0x1c0 [ 1113.274243] ? trace_hardirqs_off_caller+0x310/0x310 [ 1113.279435] __x64_sys_readv+0x75/0xb0 [ 1113.283335] do_syscall_64+0x1b9/0x820 [ 1113.287228] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1113.292605] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1113.297541] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1113.302393] ? trace_hardirqs_on_caller+0x310/0x310 [ 1113.307420] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1113.312450] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1113.317480] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1113.322338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1113.327555] RIP: 0033:0x457569 [ 1113.330762] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1113.349666] RSP: 002b:00007f29e5a1ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1113.357379] RAX: ffffffffffffffda RBX: 00007f29e5a1ec90 RCX: 0000000000457569 [ 1113.364666] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000004 [ 1113.371937] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1113.379209] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29e5a1f6d4 21:04:46 executing program 1 (fault-call:4 fault-nth:8): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:46 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x1100, 0x800) 21:04:46 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x957, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:46 executing program 2: socket$pppoe(0x18, 0x1, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x101, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/12) prctl$PR_CAPBSET_READ(0x17, 0x2) read$eventfd(r0, 0x0, 0xffffffe1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) 21:04:46 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, 0x0, 0x0) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:46 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x4000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1113.386484] R13: 00000000004c37f6 R14: 00000000004d5ca8 R15: 0000000000000005 21:04:46 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xb00, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:46 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c, 0x800) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) memfd_create(&(0x7f0000000180)='/dev/snd/timer\x00', 0x4) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x2) 21:04:46 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xbc, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:46 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x8, 0x800) 21:04:46 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1113.560951] serio: Serial port pts0 21:04:46 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa42, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:46 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x20000, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee01]) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x1000000, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@appraise='appraise'}]}}) 21:04:46 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1f3, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:46 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x11, 0x800) [ 1113.739079] serio: Serial port pts0 21:04:46 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x12, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:46 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:46 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x571, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x200000d5}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:46 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1500000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:46 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @remote, 0xa34d}, {0xa, 0x4e24, 0x6b, @remote, 0x100000001}, 0x1000, [0x6, 0xb3, 0x1, 0x1, 0x7, 0x9a4a, 0xe8]}, 0x5c) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x400) read$eventfd(r0, 0x0, 0x0) 21:04:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:47 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x800000000000000, 0x800) [ 1113.942069] serio: Serial port pts0 21:04:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x6000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1114.004915] serio: Serial port pts0 21:04:47 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4e1, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:47 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x400, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f00000001c0)=0x100000001, 0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x462006, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000040)) read$eventfd(r0, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x101000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)={0x1, 0x4}) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0x9) openat$cgroup_int(r3, &(0x7f0000000200)='cpuset.memory_spread_page\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x8) 21:04:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x7ffff000}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x900, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:47 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x1100000000000000, 0x800) 21:04:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:47 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x452, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:47 executing program 2: pipe2(&(0x7f0000001500)={0xffffffffffffffff}, 0x800) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000240)) r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40000) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x4, {0x9, 0x3, 0x7, 0x4, 0x6, 0x8793}, 0xde29}, 0xe) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000000400)="53269561594f9d4bbbfc90f1dd544525a9dbe116c8d4b45d0cbf7c44b36eec2f3b0fd01a38db4976b7a7622fd7d1f09b882e1e85fa199231e504e840322e9ce0cf6539a5f3b1acc8fa469fab6cba36f95662c14ce52725ed301793f6ce45ae17703161e88df1a2bbf214da536d3dccd81fe710d11834ab90dd6f152e39410e1208097133cbaf1b064f599f410a8e5773adb18fce93771ff9185adebf298c752932d71ae422a2f5dd3830d89acef8f6a58cad4c667b22b5cd9bb658bdf4a1536ee96e3c55f2da78897ccad33e5119e24815ad36b2dc571b613b0a4eb27069da33d96fa8ac6257b179b087461dea6ac143a8d2", 0xf2}, {&(0x7f0000000140)="41967df0c7a9194928faf7c3a0f45a002d85d16dbb3ed9f3acfbd995764d80c0fddc", 0x22}, {&(0x7f0000000500)="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", 0x1000}], 0x3, 0xe) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000000c0)={{0x2, 0x3, 0x4, 0x3}, 0x3, 0xe5d}) read$eventfd(r1, 0x0, 0x0) [ 1114.211094] serio: Serial port pts0 21:04:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x13, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:47 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2ea, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1114.278623] serio: Serial port pts0 21:04:47 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x200000000000000, 0x800) 21:04:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x27}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:47 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', r1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x3a400, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0663044003000000"], 0xdb, 0x0, &(0x7f0000000340)="ec56ae8ba9a2e424c96c1d033b09e796df99ab3ddc8fd7cf785e145371f05a18a05c6d195f5573155a153c3451ecd70a2233c41b7a4ba9dccd54d341025c3e955ef3a53371b245b0f91666613c992cf6b45e1ac96b3a9129dc9a39462a7c4d44c697d2163d70daea4da7e3f74ce9c58ef831d41d90a89726e2c31c9dece83ca6df419763baaec07e0a2ff6b5d8d25448fe26e5ef6dad5c85563e82355998b39ed5c5a2710592fdc58a3f7a99376436f63e48d1fab1cb1c48a673ded5b6e459d6639d48ecaa1abdc80ed6eb4d648c41c2171ab4cc13041e664831ad"}) r3 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000480)) read$eventfd(r3, 0x0, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000004c0)={0x0, 0x100000000}) r4 = getpgrp(0x0) ptrace$setregset(0x4205, r4, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="755ce804a7a8c5205ae72e7f11d4c7ab29ca09aa07f58d34c6ce43d318fa3718bdc1297ed0a9511e288b1bf9d5a45ba54ca5d69e71c7d79a4b370f4c54924a89a4244583ef70cb8436b228a133369528b52d692459ba85278a177647d8636bc14e6c6f5f00451cbdc9f708482a707960a31acdb5af2d52196e06dce19714b11659bd814841", 0x85}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="16a2a34cc60c97a60100000b630000000867387985f090e56c009c7e923abf9546b559c1be82da4ad533ecb43241c657bc6efb445fd7685df0f4ed2e8cfe68a2212f8b1f6fd6d6fdced9"], 0x68, 0x0, &(0x7f0000000500)="9e783f410b0f8c4486f1bbd097e27e21ed9117854376bfea8911b375ded1abf2d76ba103962c7e1fb208d68aec09a37377789010bdba25a6070b309d0c6f0f115d7eff41953d863008984e946de44f8199d17e5cac04b73371aad9b208430817366ea745eda54a46"}) 21:04:47 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x11) 21:04:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xb, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:47 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x42d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:47 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x0) r1 = dup2(r0, r0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x40, &(0x7f0000ffa000/0x3000)=nil, 0x0) read$eventfd(r1, 0x0, 0xfffffffffffffedd) [ 1114.510224] serio: Serial port pts0 21:04:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x2, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1114.576897] serio: Serial port pts0 21:04:47 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x408181, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r1, 0x0, 0x0) 21:04:47 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x900) 21:04:47 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x70d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x3e0}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:47 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x20, 0x210100) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000040)={0xad, 0x1, 0x8, 0x0, 0x0, [{r1}, {r1, 0x0, 0x5}, {r1, 0x0, 0x10000}, {r1, 0x0, 0x4}, {r1, 0x0, 0xfffffffffffffffe}, {r2, 0x0, 0x1f}, {r0, 0x0, 0x101}, {r1, 0x0, 0x9}]}) read$eventfd(r1, 0x0, 0x26d) 21:04:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x3f00000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:47 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x802) [ 1114.764981] serio: Serial port pts0 21:04:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:47 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2c4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:47 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0xffffffffffffffff) read$eventfd(r0, 0x0, 0x0) [ 1114.826835] serio: Serial port pts0 21:04:47 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xf000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x811) 21:04:48 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x7, 0x4) 21:04:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:48 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x31d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:48 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x3f000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:48 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x440000) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'bcsf0\x00', {0x2, 0x4e22, @multicast1}}) 21:04:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x7ffffff9) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x808) 21:04:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:48 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x30e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:48 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1500, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x810) 21:04:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:48 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x2002) read$eventfd(r0, 0x0, 0x76) 21:04:48 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3ce, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:48 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1200, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1115.436365] serio: Serial port pts0 21:04:48 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x400) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x540, 0x350, 0x140, 0x140, 0x140, 0x0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x4, &(0x7f0000000080), {[{{@ipv6={@loopback, @mcast1, [0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], 'lo\x00', 'veth1\x00', {}, {}, 0x0, 0x0, 0x7, 0x20}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x8c, 0x8}}, @common=@hl={0x28, 'hl\x00', 0x0, {0x2, 0x2}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={[], [], @rand_addr=0x3ff}, @mcast1, [0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xff], 'vlan0\x00', 'nr0\x00', {0xff}, {0xff}, 0x16, 0x100000000, 0x7, 0x22}, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@srh1={0x90, 'srh\x00', 0x1, {0x3f, 0x3, 0x8, 0x8001, 0x37000000000, @empty, @ipv4={[], [], @loopback}, @loopback, [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], [0xff0000ff, 0xff0000ff, 0xff], [0x0, 0xff0000ff], 0x802}}, @common=@srh1={0x90, 'srh\x00', 0x1, {0x3f, 0xfffffffffffffeff, 0x81, 0x3f6b, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, @loopback, @dev={0xfe, 0x80, [], 0x14}, [0xffffffff, 0xff, 0x0, 0xffffffff], [0x0, 0xff000000, 0x0, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xffffffff], 0x1000}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d6, 0x4d2, 0x3, 0x1ff, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffb, 0x101102) read$eventfd(r1, 0x0, 0xffffffffffffff61) 21:04:48 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1a3, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x7fffffffffffffff) 21:04:48 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x9, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1115.496298] serio: Serial port pts2 21:04:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:48 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x202000) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x6) 21:04:48 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x700000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:48 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x60d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:48 executing program 2: membarrier(0x1, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) [ 1115.738673] serio: Serial port pts0 21:04:48 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xf00000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:48 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x773, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x38e) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x101) sendfile(r0, r0, &(0x7f0000000040), 0x8000) openat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000240)={0x174c, 0x1000}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)={0x2, 0x0, [0x0, 0x0]}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x7) sendto$llc(r0, &(0x7f0000000100)="e061e71cb64a7eaccc46cabe49be13ba3bd18b1d81c370f9af03095fb6ccd277f2b05142e0260c046147d0b369681945455d3e62f4307abc9fe361a6231f850bcef79701918bb70bac7f90e850c7836ab4d264a7eaf969af2a0fa0d023e923db1fe25a1ca1996f72c9270d6960bf56e54d7921a93a33584da5971281c82c2b2ff1093a414e6b27fd305a902dc64601b810eb1fd4e4e6b5537d1b78e4a8635adfa45ed3c6ec9a0e783446bab5e29aa0dab6fa2cb8379a1fe96ba29dd84b9f315049d46d70", 0xc4, 0x4, &(0x7f0000000080)={0x1a, 0x7, 0x100000000, 0x2, 0x4, 0xffff, @dev={[], 0x20}}, 0x10) 21:04:49 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x100000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:49 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x800) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7, 0x2000c3) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000000c0)={{0x3, 0x1, 0x5, 0x3, 0x2}, 0x1000, 0xc259}) r2 = memfd_create(&(0x7f0000000080)="b82b00", 0x7) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) r4 = dup(r0) read$eventfd(r4, 0x0, 0x0) 21:04:49 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x408, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:49 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x11000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:49 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x81, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000140)="c73dc90ed58f04da56bba01a92d7d7944a2be8bbc6e321c3670fb5e09e1a919ca0e406383fd9866a0597266b73af41a1663682e1c362130d033b20b6c406c180ff81898eae1d5dea6bcb324250a7c7d02dc4c99ec2ed40b8304eef2a223bc0d65a146c2537b12e821aad47b8a9", 0x6d, 0x401}, {&(0x7f0000000240)="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", 0xff}, {&(0x7f00000003c0)="1c0447415ff5ef220ea478826af739ff5bbe89581ceebba1b356e73c377e630cbf28b4dd8e52c63b7a8ec7f15617648c95cd70c8e0db46f1a3edd90e0603678a4566dea431810e8534ff18006d377e9eb9c449c523c29948ba4e28a2a6aebf9a4c835d117cbaf04bf6adc3be97c55cbcd0b38a4ff08e2ce807540f149eee438c1e2db7420aec04e61815b781166b4aeddc7b7a3d24c4f30e5a2935768a2ee90119155dcdf12935c6a64908a8ccb85b9e48ae4dff9c5f3a684a282c4998bff5a4a83d8d4d62dd4147d9cd8578bab91c549d7ee9cae6c9d42545879b51ce440be5f94f87b44cc32f0153c6e1c1be2198", 0xef, 0x1}, {&(0x7f00000004c0)="23ccfb2cad527fc9a01ad002c094b4c7b3282a91570a42c5ff059f5da5ae78e1d7b28522b17cbe8baefd061d3f88daa57d6abe1040520869c0b4b486f8e1a158f18928ba47f740464186c756a4cbdd4c007da2d16ff4bc4dbc11f2e36701cc68f6a485832255858af89c4d5ce60bc88ddbd0468be3092d67ceb6fedf3d41685d424c985daee535976f63ad43f85b6891ddf511c94188cf13f25b3d4d49a0b4ed3c289c7d164fdb59fb22e343fb4f51728a5cac95ef035b43b28b690c30bbeef7acf5", 0xc2, 0x9}], 0x800010, &(0x7f00000001c0)={[{@usebackuproot='usebackuproot'}, {@nossd_spread='nossd_spread'}, {@treelog='treelog'}, {@usebackuproot='usebackuproot'}]}) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:49 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x907, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0xffff8881b9664f18) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:49 executing program 2: syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) read$eventfd(r0, 0x0, 0xffffffd4) 21:04:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:49 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:49 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:49 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x56, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x3c7) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:49 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 21:04:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:49 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x14, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:49 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x400, 0x20) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="04005609000272bd6e3fb76e52baec826e509f6a9f7920e5d3f8b4eb9c04123c6a4ae9faf14977d0483c56482f9940b8e5d1b341d0b1aa0f549d2bbf296ecb0552e65affe68e630c2418f22c39a905693f712814c2d055632e2f8b3fd24aa770fb72132b5ab8bcfdb2aaba266646c69d0c6aa77d0d884e3dd8153a24c7f7bb8b0549fe058c4cbe89545ad6b502f9842e8e262dc81a8791748edfb2bccc942e98bcda604f05fc992304311e0cd836ae8281e2ebd8478b379e38c21cf17a21c3737027b47e84865af8b5e62d091e11de87a0cfd538"], 0x6) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:49 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x41a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:49 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x400000) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0x2c, &(0x7f0000000a40)=[@in6={0xa, 0x4e21, 0x3ff, @remote, 0x2}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000ac0)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000b00)={0x0, 0x4, 0xd7, 0x1}, &(0x7f0000000b40)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000bc0)={r1, 0x1, 0x7fff, 0x7}, &(0x7f0000000b80)=0xff0c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000a00)={r2, 0x4, 0x5}, 0x8) r3 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r3, 0x0, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000900)={[{0x2, 0x3, 0x7, 0x1, 0xe8, 0x7, 0x9, 0x80000001, 0x3, 0x0, 0x2, 0x9, 0x80}, {0x34, 0x1, 0x7fffffff, 0xff, 0x0, 0x100000000, 0x8000, 0x5, 0x8, 0x3ff, 0x7, 0x7, 0x200}, {0x4, 0x9, 0x101, 0xfffffffffffffffc, 0x3f, 0x2, 0x401, 0x800, 0xd27, 0xd7, 0x1ff, 0xe0b, 0x5}], 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b00000005000000d8050000680200005801000058010000f803000058010000080500000805000008050000080500000805000005000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff010000000000000000000000000001ff020000000000000000000000000001000000ffffffffff00000000ffffffffff000000ffffffff000000ffffffffff76657468315f746f5f6272696467650076657468315f746f5f7465616d000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000007f00bc0140000000000000000000000000000000100158010000000000000000000000000000000000000000000000004800686268000000000000000000000000000000000000000000000000000000ff00000005515e133cf40300050008001a040900efcdfb8a0100060006848100000003000002040048004d415351554552414445000000000000000000000000000000000000000010000000fe8000000000000000000000000000bb7f0000010000000000000000000000000068400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800100100000000000000000000000000000000000000000000000048004e45544d415000080000000000000000000000000000000000000000000002000000fe8000000000000000000000000000aa000000000000000000000000000000008000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000580190010000000000000000000000000000000000000000000000009000737268000000000000000000000000000000000000000000000000000001ff0305ff0100000000000000000000000000ffffe0000001fe8000000000000000000000000000bbff020000000000000000000000000001ff000000ffffffffffffffffffffffff00000000ff000000ffffffffffffffffffffffffffffffffff000000000000ff101200000000000000000000000000000000000000000000030900fffc0900000820000602000800008100000000000000fe8000000000000000000000000000aafe800000000000000000000000000011ffffff00000000ff0000000000000000000000000000000000000000ffffff00736974300000000000000000000000007465616d5f736c6176655f3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000003e00f70214000000000000000000000000000000c80010010000000000000000000000000000000000000000000000004800444e4154000000000000000000000000000000000000000000000000000119000000fe8000000000000000000000000000aae0000002000000000000000000000000006703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000"], 0x638) 21:04:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0xffff8881bc706f18) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:49 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x800000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:49 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x1) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xffffffff, 0x24c00) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x5b51, 0x1ff}]}, 0xc, 0x2) syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0xffffffffffffffff, 0xfffd) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xaa0, 0x240) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5e, 0x400) read$eventfd(r1, 0x0, 0x1578f97fcd65475c) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000180)={0x4435, 0x8000, 0x2, 0x2, 0x5}) 21:04:49 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2ca, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:49 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_elf64(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x32aeb6bb, 0x9, 0x3, 0x9, 0x2a85, 0x2, 0x3e, 0x1000, 0x223, 0x40, 0x1ca, 0x9, 0x4, 0x38, 0x1, 0x3ff, 0xfffffffffffffffc, 0x1}, [{0x60000000, 0x3ff, 0xfff, 0x87dd, 0x2, 0x0, 0x2339, 0x9}, {0x2, 0x4, 0x400, 0x8, 0x8a0a, 0x5, 0x2ca, 0x2}], "eeed9f677fd08347452815d8945d2485b8c1772158904b3e20eb5bd5eae925372c245352e095954848911b291dbee31868f8f34a09030e7ef64612cd38d2abecbb01d08ede66fd80d1dcde4c098609b82bdb00504696dbc1a68a1a9f504a835024aab972b8ab8a020deaf127bcfc06f3cf1e626d7918", [[], [], [], [], [], [], [], []]}, 0x926) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x74f48c59) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:49 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xc00000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:49 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1fe, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:49 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x0) read$eventfd(r1, 0x0, 0x24a) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="2a00000027019873e18934597668bdbb50d66e1c1cb6929b14b70aa67119e4cc869f1640f62ee95d20"], &(0x7f00000000c0)=0x32) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000200)={0x6, 0x1, 0x0, 0x0, 0x0, [], [], [], 0x2, 0x5}) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r2, 0xab, "502170e84d470ebfdee50469c49117faba507ac57c8dcb9d2fcd6932d95e846425435cf94ce090b6f7b1dab772b5fac45d5ddaded260016864ccd84575aa95244842810d861d054d4a20205ecfde0385e2fc19dd6f98ff645f7a97f63e9fbac2c300a7394c9c903456a61f5fc75c475f29f98ecfbd1c5ad1ec54f2654cbe275f0bffa14138aaf62852ddb98b6e5953148c85170ee4383564fc91562fb6da99501845207d78619eb58cc265"}, &(0x7f00000001c0)=0xb3) 21:04:49 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:49 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x5000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:49 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x409, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x3a4) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:50 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x511000, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000040)={0xba4e5ba4cd1ff2dc, 0xf000, 0x101, 0x2, 0x5}) fstatfs(r0, &(0x7f0000000240)=""/4096) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000000c0)="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") setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0xfffffffffffffe76) 21:04:50 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:50 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xe000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:50 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x68b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:50 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x407fe, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000012c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x1008) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x200, 0x3, 0x1000, 0x8000, r2}, 0x10) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000200)=0xa5c) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x101000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r1, 0x4, 0x2, r1}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000040)={0x80000001, 0x5}) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000180)=0x400) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) read$eventfd(r0, 0x0, 0xfffffffffffffcbd) 21:04:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x74f48c5f) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:50 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000)=0x2, 0x800) 21:04:50 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3c2, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:50 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x15000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0xffff8881bc706c78) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:50 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x7fffffff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:50 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x55f, 0x2000) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x80000000, 0x10}, 0xc) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000300)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbc, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x3f, @empty, 0x70}, @in={0x2, 0x4e23, @rand_addr=0x6529}, @in6={0xa, 0x4e22, 0x55f, @local, 0x1}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x401}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x15}, 0x1ff}, @in6={0xa, 0x4e21, 0x7fff, @mcast2, 0x30}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r3, 0x7ff}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r4, 0x0, 0x0) 21:04:50 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x439, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:50 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x600, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:50 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x0) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:50 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0xfffffffffffffdb9) 21:04:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0xffff8881bc7061f8) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:50 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x28c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:50 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x5, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:50 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f0000000100)='net/sockstat6\x00') getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@rand_addr, @local}, &(0x7f0000000080)=0xc) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 21:04:50 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0xf8d}, 0x1) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="041656e715cfe29ccfbdb1ff850eb95a1ceab56179404d79ffa84b00000000000000000000100800003c226d64ed2894e0a18250ea21ac93109dbe252b24597627508c2bb955f924a085f627725740dce4007e68c793925bab9fdc9eec51e51c7ebc702a7e0870ae876a887f75ccd7f8c580fa17bf4d106eecfaeb0a7a8dbf84d56baa614bcbf559c1b53fbce621e09ea18159382b93db7eb35b60497a09b36ed6116fe892a13e7fb79a983369746097d300a602dab8419c521ebc0a4da7d7cf2967f8dec0eabd710eef81e09fc55dd445fe555d7ba61cec4df1b8ed4fb0c9a1"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.origin\x00') ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xa}) 21:04:50 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0xffff8881bc706498) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:50 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x4, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:50 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x40400) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x488080, 0x0) pipe(&(0x7f00000000c0)) ioctl$TIOCSBRK(r2, 0x5427) read$eventfd(r1, 0x0, 0x0) 21:04:50 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x7fff}, 0x4) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="99f256fe8e1423b34f7834"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r3 = fcntl$getown(r1, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f00000025c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000002600)={r8, r9/1000+10000}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) fcntl$getownex(r1, 0x10, &(0x7f00000020c0)={0x0, 0x0}) r12 = getuid() stat(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpid() r15 = getuid() stat(&(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpgrp(0x0) r18 = geteuid() fstat(r2, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000024c0)=""/240) r20 = getpid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002300)={0x0, 0x0}, &(0x7f0000002340)=0xc) r22 = getegid() sendmsg$netlink(r0, &(0x7f0000002480)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x903e421acee29a81}, 0xc, &(0x7f0000000300)=[{&(0x7f00000003c0)={0x230, 0x37, 0x210, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x14, 0x4d, @ipv6}, @generic="00bd1110207ac9b893e53052ad9737802fa3b2ba02d29e1401dbfd4f6ccf6d9547e0a0b821715e2eb3990c38a29f4e0b3464ba1aa206cf4534da73f85ab73837ee905719d2b8787cc7d2ac5eaf6cbefab74153c54e56629f331a631c624711ec02e378804918e536eab2361f2bb8d8d893f627a5d2d7ed9c2acfb3fba1316a01626c926fdc7e1fd8af013413034d79a11ec99c77af9d081465a37ba1b6e8d5a69f4200140261991d553d01cad3f78d678a591c56dd5382b8e9300e69b0f2755078d04be374de450f50011b52840153ef5febe3157786eacd43d304a23a72841c03735885", @nested={0x4, 0x7}, @generic="37474272cbc952bb2fb5c9a264329cc66daa71eaad45fdcfbe4669e29bfc8526b30a2be26b8648ca56e34d3a2a764e1d2da8a1fbf396e7d21c7cc96e8fab186e4a34343185d5a02ece5931a17ce62a09d68ba93191136787c95cf428836646b12441681d179da82323de129da1b77021fdb69e633363f0d7bbd75fae3f9a16a371357ced2bef2029551f7d53759fe353700bfc6a883ca6d7949f0487f498f450260cb014693e05e517b670ebf285113cfb82be8ef94bf59c5e72e149988e04d98e93eff3cab565978dc94f2577325c72db917f864bfa41cc5a", @generic="59fbc2a38875b12515405f4eda1b873cc023617ba4fabef3a4005a82fe996d8b50a046b8cd21405ec41254f419f17a6d7762e6a163", @typed={0x14, 0x44, @ipv6}]}, 0x230}, {&(0x7f0000000600)={0x3f8, 0x3c, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x64, 0x2e, [@typed={0x8, 0x4d, @pid=r3}, @generic="1b1457175c4d343f4406316715d4105a4ebf4f5d068a4a5c9d0c5b2bb2e253783d916760b6080e644b39eff151a0695865050104d996d4ae1b0e08acea52d6350f9d4e4fddee2bb5f614edef88d5c5", @typed={0x8, 0x6b, @pid=r4}]}, @typed={0x8, 0x59, @u32=0x1}, @generic="4fae95d078d5fdacdf9ff0dc710b6f3de29b9b823fff6f51300b3406d1b8245922e7def62a616dd78a66c306f4082001935f37fedc509b3f0d9c02996d9635a342096ee7a1150f413976ec581021546026ab724a57f344406fef4e2bbdb342fd93c280caff61d1c80d0d8512685b261f5998fa7bbb4eb47d86d6b0a57397dc9a5d0e3297c107100d4399cc6c859907e45c114cb52e02db0e7dcb70612b1480196ed086cc25ef9871e0cc9f1187bfbea04c8f0da3706ce55822320e36ddc4beff855bbd44034339db9a571d9af39c5def4dd81d81a2056459337d52e0", @nested={0x194, 0x7, [@generic="1dc47a3106572a7516d64700979662285df56ea7d47a668e44da60bf8604860b81", @typed={0x4, 0x39}, @typed={0x4, 0x1c}, @typed={0xc, 0x74, @u64=0xfffffffffffffffc}, @generic="00f97c7dfab15506cbda8dcfb608715f077977ee6fc84320504a988558fb8f8198df67e0c8ebad9d4513047f4703eb0ac6bd383b9a7d6b779de2cadfab44fe3d3e5f1d2e3c35bacd8ab195fbc38d71677fa8721602f70ed7de017baa64663cddf4", @typed={0x8, 0x25, @fd=r0}, @generic="5e1939512b3e309c793ef41e2f064d4a54c0e14fa0d9353e0a31a67b64af54323a108a7649400569f2691968b9c3fc019be264d949c0b1d6134e8b03695e1cfde968b8db448ab74fcf55934d66f4956ea07162c7276adc4ed5aecd8833998b8c55177ad31d60925c34a2be540fd7c120120cceeefbe26f24d13e75fcd2e22ceb050fe9d1000041de42239f6f6d63fc8e6ed4aeace9dfe6b5898afc240b51051a4ad06deb06eb90f69401d7f81944337fee9216892660513d63a2645c3fd45bdcd8df2f2dafe0b6c5978d3d36ef768bb740cda66240773b09cf9b82d1e89c98cf9e20251c", @typed={0xc, 0x3f, @u64=0x4}]}, @typed={0x8, 0x1c, @fd=r2}, @typed={0xc, 0x25, @str='ppp1\x00'}, @typed={0x8, 0x75, @str='\x00'}, @generic="2d434aecba9048e7826219a03b0706173e2c8ecc0b7a5294a885f2048fb9e77940ca0d2c5bd99cf8f196710bc8c1e356e85870eff823e2457a0491738d935d4d2103ae910915880e41e9934d5975c0b67b6d9aba58492ca1a688768dcd78b557d5cd8aed9b801f98678b32ff25a8006b959396c57e89db52e80752a206a63875a0f24f8ce858991e9fcb55f86f8f51aaa8c09f3d585d45c0e6433306822759bc5ecd66c118aee67dd7f0eae5e756c46e23a51fd27464c4a506999adf07cb5d5a104e5c48d5c2179dda971d400ab117041efe11ebd9d9309e1aa19a4ff9e6b0d820c01d6e92744396", @typed={0x8, 0x70, @pid=r5}]}, 0x3f8}, {&(0x7f0000000a00)={0x1388, 0x19, 0x700, 0x70bd28, 0x25dfdbff, "", [@generic="c9d427515a7de1d13c1b9bf4fc9d91c67abb75719398b690d8fe637558207236524f461ed3563c1c96a642c10f06d1526c500afcdc5dd5695de1c3c98b63a66731df1deeed935ab718efc97cf7bfe1cfbf8f9187ee37638371b14be4d538f68c6ffef1b2c367f2932e2d920af1d6fcccc306e7e5fb88c9fce5c7353146453e1f32dc5a2ac9ad74bf9303a4c563b7c91711", @typed={0x8, 0x6, @pid=r6}, @nested={0x11f0, 0x61, [@generic="fcca7db259d74496c54ac37704f5933b13292a4f160623aa9e89208c2b468de787d0390551ed81075920a49ef6537b4d22e5a5e0c2d0bcb04bcf0d2dfa55311cee0b95a14a52bbc9b36d8275233fd0386f4bb395bbc5cfd8f3a49ce72100e13a08df815e2a36e982a888e36a029234b905a816a4b70b9c169cf49fac458ae7b29976a6c6562018da02c8322a7436eceeff96b73dc48c244558cc7782fed0927be593bfab29683f27033c0bf45836de392299cdbcec608a30541ae3bc14a5b98fdee4e0eee9d6a5ad6c98bfa11f9d4f231dcf7297f0fa83960be679148fa607fbb98ccd97b373f64f1b470a91713d19", @typed={0x8, 0x1a, @pid=r7}, @typed={0x4, 0x84, @binary}, @generic="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", @typed={0x8, 0x85, @ipv4=@remote}, @typed={0xe8, 0x48, @binary="2fe3ef71dd1171a99bddcd12532f5c5455c8b527fcfe93541c47f7ff572c54179183f56402d24ea6bc9dd7cd9786e7bf9f624ed72613025cf8ad6161a77c2cc68b6c3ce47a4ad7ed744c7932f4a727f84a0ae54590969f1a7d54aec87663bf7bad8d0f7c1ff0e7eee04c03ae313902fe43f2e36c624fed617ebb7dbacc041c8d68b017326c4ecf6f5fc0e0a6def0b386695547babaad197a73581118c60471afc8a72604724041542fd80f45f905ccdf2becffcf695eff7112453f988686ae70340e55f20c15556fe85692c4a279e256d1a69c13aabb7e104cf75defa0defdcbcd"}]}, @generic="287e08b8ce5bdbabc59db82aee2a09e8d82bc23dba734cda899245a8edaec94ab092354c61429d1c0046916af29723ddd5abf72b078c6359239dfa8ffc267e9dbf0d36b46c73040e42009ae5b329074f539d11739f8d9e154049e4d9332bebbe6434eaa04a2582a1117c960929a0bf912547ee5ae1c2b134cb104fafb8a42edad915fda34ee2eab30c73ef709eaf6d902b472489f1627df8e9db3a9b368ceba4cf8123953b0f62ba876f7e1b5285fcfcff61e8a30cebeb05c53a9db920e14ff6c1998c9499a50a04aa6cec7c91a55c8dd38b6ab59552c64f478f1d36e1a2a7c272889fe804afc1eeeab16a6080f1"]}, 0x1388}, {&(0x7f0000001dc0)={0xf4, 0x1d, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x8, 0x3b, @ipv4=@multicast2}, @generic="6a714eb204e85f743b956c056fb3bc3e32c6420dc9b37945806f5e6cb91b531dc5f7294daabed9663d8a8cd1b800016b56a0722324cbcb90ed8bb4f6c730944fe007600d0f741e3e4ed14cb4ca16d40b54c421833bc673ddfc6266b53ea51dfbf3585ec6ed19119da297f08938afd405632865a5786ecc2bd96d6a19eb45e241e0608a81f49314706379ede127c930147fd19bd9fd846311b8d1dd1b439d710936b33609888f6a7647d74e5cf0861ddfadec32e8c40626e08c61b40ae9476d80", @typed={0x8, 0x61, @ipv4=@rand_addr=0x80000001}, @typed={0x14, 0x4, @ipv6=@ipv4={[], [], @rand_addr=0x2}}]}, 0xf4}, {&(0x7f0000001ec0)={0x1e8, 0x33, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x4, 0x75}, @nested={0x84, 0xb, [@generic="c536507a9e03b8c8d33a067e4bae4c43c4e137771c1ea6865ad6df47c24ce0f696a74dfbf346d28422bc9bd8c916f0a149546c3f0648baf30ff5448251a3db59ed98324f37195df669100e072816f05e9d9a6d0e310511246f31aec7f7dbc11d4184c3515e10f6e74899c2f8159b09f7a25db861cbf60b8b380f22d68def"]}, @nested={0x104, 0x3f, [@generic="74ec8d6ec5de705e63aace05e9", @typed={0x8, 0x16, @str='em1\x00'}, @typed={0x14, 0x4b, @ipv6=@remote}, @generic="eb8df3e000f58a0502ecd3fb7af357da874877324cc4a2456bad7f92ead2c3e5c4ed1369de8b35f5262d063cf1fe702292580c9423e2756439d0ab7ec4e5634a100b7aaeb5426755d7babb24ca2f228292fc867a1e755d17c6f1b65e370ee36d321c46c62b5172220b2e0d9d37f52f42b768315d9742e0d6789f8f21bc5f567bbe34e2747946c315a9dfc54885f2d8d833857efadad07e0c432dd663", @generic="4a3638978d988bd5167dbbe5552325e0a736c2ab4a9294ce9e68e34bf986156bd26d0f37763472d46b7bf917065f981581dc2d9787f817ed05e906"]}, @generic="2ca18855b2c93a31385a29b7a343d133347fe6e69579c73f2aac58afcd5ec133dae494aa79bae4c327aebe6adef2a71e1155a114", @typed={0x8, 0x5b, @pid=r10}, @nested={0x10, 0x79, [@typed={0x8, 0x72, @fd=r0}, @typed={0x4, 0x51}]}]}, 0x1e8}], 0x5, &(0x7f0000002380)=[@cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x18, 0x1, 0x1, [r2, r2]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r2]}, @rights={0x18, 0x1, 0x1, [r2, r2]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}], 0xd0, 0x4000040}, 0x0) 21:04:50 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1100000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:50 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x947, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x7) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:51 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x500, 0x0) read$eventfd(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x8, @mcast2, 0x4}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r2, 0x6}, 0x8) 21:04:51 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x8000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xb, "65e556c88f3631df9cf356"}, &(0x7f0000000100)=0x13) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={r3, @in={{0x2, 0x4e24, @empty}}}, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:51 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x948, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:51 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1300, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x800) read$eventfd(r0, 0x0, 0x0) 21:04:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0xffff8881be773498) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:51 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) fcntl$getown(r0, 0x9) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x2) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0xff7f) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) sync_file_range(r0, 0xfff, 0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000280)=""/158, &(0x7f0000000100)=0x9e) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x20, r3, 0x12, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x20004800) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:51 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x33, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xd00, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x121) 21:04:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x27) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:51 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="04005609000256fba94b7958c31d3723b6c74f74d951c3363932050f4256"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:51 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2b2, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = dup(r0) read$eventfd(r1, 0x0, 0x0) 21:04:51 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x300, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x788, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x1100}) 21:04:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x5) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:51 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xa, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:51 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) signalfd4(r0, &(0x7f0000000000)={0x9}, 0x8, 0x800) read$eventfd(r0, 0x0, 0x0) 21:04:51 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x394, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xf, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080), 0x4) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0xffff8881b7a0ae38) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:51 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x351) 21:04:51 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9bc, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xe, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:51 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x12000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:51 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x9d0000, 0x9, 0x7, [], &(0x7f0000000080)={0x9b0bf7, 0x1, [], @p_u16=&(0x7f0000000040)=0x1}}) read$eventfd(r0, 0x0, 0xff63) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x400000, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) io_setup(0x7f, &(0x7f0000000180)=0x0) io_pgetevents(r2, 0x80000000, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0xfffffffffffffffc}, 0x8}) 21:04:51 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x51d, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:52 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000083735b4dd11b94cc43171ed15ef1c03ef7000000000000047aefd1ca615d331fb0a0b06a0c402d27f47dacbdddba"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x25) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:52 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xa000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:52 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000100)=""/50) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080)) 21:04:52 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x76e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x0) 21:04:52 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffe) read$eventfd(r0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x7, 0x6, 0x8000}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000000c0)={0x2, 0x4, {0x52, 0x10001, 0x7, {0x7, 0x3f}, {0x8, 0x3ff}, @ramp={0x5, 0x3ff, {0x2, 0xdd, 0x7, 0x200}}}, {0x59, 0xffffffffffffff21, 0x7, {0x6}, {0x9, 0xba4}, @cond=[{0xfff, 0x80, 0x6, 0x79a, 0x3f, 0x7}, {0x43, 0x3, 0x3, 0x3, 0xffffffff, 0x7}]}}) 21:04:52 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x18000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:52 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x39) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:52 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8eb, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1119.187469] serio: Serial port pts0 21:04:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:52 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x7, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:52 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) io_setup(0x10000, &(0x7f0000000000)=0x0) r2 = eventfd(0x2000000000000) r3 = fcntl$dupfd(r0, 0x406, r0) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000040), 0x0, 0x9, 0x0, 0x0, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f00000000c0)="0a948cdab7930bb2d3bd0ba1b436151a1a36ae959d4bdfd8a31a17bfa0c06ed162946cd1e0e970e2e9544048745d6db79e78bcbdf314ca804327190af8e6f7fba650fc398aa49cf3702db5d84dff850cd4861ddb13ff24d2385c203be7591c56af6a47707cb6a5ff26580c2c68faa746844ae9d3506071800d6ba84af2cb71ae3f8350eafa705bd8d5a41f6bde000a7ba9b674dc1d787c86326131f840b0ba563fbe143a0fb74de1ec0f70503a1d53c693521e5c8676fe5091e657dfe7d3f4fb15562bb98d1a4b8c60fe628a8b1bf2a3a3fe126a9255796747f0beebca6c25b030e6d9fccc9dc6447e997f", 0xeb, 0x6, 0x0, 0x1, r3}]) read$eventfd(r0, 0x0, 0x0) 21:04:52 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x101003, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xfffffffffffffd5a) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x31f, 0x3, 0x1, 0x7, 0x5, @remote}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) sendto$inet(r2, &(0x7f0000000100)="8c93c8cdf46f26006097d600518046fe7fd9a8ed62bc2b1b0a597d524a99644da79e57e34cd6de522bbecdf0664f97c43376958733cb808c8157f99f5a8f58aa6e0dff5c33f8f0bb811aa563", 0x4c, 0x20040000, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) 21:04:52 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2cd, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:52 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xb00000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:52 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) [ 1119.954675] serio: Serial port pts2 21:04:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0xfffffffffffffffd, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r1 = syz_open_pts(r0, 0x400) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0xfe36}], 0x1) r2 = gettid() fanotify_init(0x60, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x60002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x1}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000002c0)={r4, 0xd, "de696a45b4baf6dd00ba3105a0"}, &(0x7f0000000300)=0x15) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f00000001c0)) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000380)) 21:04:53 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x90c, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:53 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0cac7e22000259507f681d"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x7f, &(0x7f0000000080)=0x0) io_submit(r3, 0x6, &(0x7f0000000700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x9, r1, &(0x7f0000000100)="2aa7075ae82b501f89f4a6a45add19a4f849fd3dff148be3194eb44c09654ff26fbda2012e24e3c54d6f5639f907248818f3994c59542341aba010e42790b1f12fd036672f727c5129b9647d860138662de1b96862e293cf62cf9a7efbed1671f8e582e92799d93df6cff7508689c08e8cea8eec3e48f75151f74916b3b41511f5e028", 0x83, 0x163, 0x0, 0x1, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x64b, r0, &(0x7f0000000240)="c93591ab6f4f4912586c3dfe2116ba46a925ef0aad42752913d88dace623313a4e9a47c2ea0695d24e", 0x29, 0x100000001, 0x0, 0x1, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x80000000, r0, &(0x7f00000002c0)="43198ec19ba4c71d8f7a921cfeb50887d8991de929c58b1ae7cd4d73b97e381b77cd8c880d05fa2cc09f48e6767b6631d573d5e802c2db0ba8033125f367e6e9c7869f0bc6afe91e97c657f25d7f0bea540956a1ddd4a587611a4ec34a420c38e6e47810f8efaeaadf54922ea76d3312e2cfd19a9db3d580114b", 0x7a, 0x584, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f00000003c0)="f88e487240e70dd311ef79d2b5e52bab3ca536f183f7f31d99e7c468c12d0c2a4b5593ebbe57fce8f646f507c9611ed9c3b5b7b626bfbe36086cd7fd982339ce286d6e6e6bb045be564ac15ec7f75799555867e2c087101f34ff2c97458873bf7743fcddd70721513e4f109f1a65effdd7904ea84a0e8ed1918ef6a1c62d5ebd3e96bf622e08dbd786d276025e91e1ec6c20cb855e325d015a9378f677a046a135769a753aa0a1f7d9af67d673e52c32fedf812b532ed5c32fad27c310b3339fb446a783dfd3f0daf84b6178b940fc8af9b6494398cc6220ec7b2447fb3ba0f609920aa5b1b79c13d76cc0e97693e6b1137f25d792d2bfd7da97cd", 0xfb, 0x5983, 0x0, 0x1, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x4, r1, &(0x7f0000000500)="61136c17b342adb0589b1fe9fcceef0ec693ad3826ba20279667f1340b79c247a0c3ea4f90f31c8eb5878ff6988c240dc7ba67b666c0bca88fd50affd76fbcd780f177216fb17ee33dbff6882aea7cf725ac47915cbfe2e924516fc7b3960d5e1192deba18dddcbafe21daa14e0e042c7fd3f8dd69871d128919fbfb8adaeb3dc8109d5b1920a5f54807f065c6f17d4d4c8087df45a91e1b016ec8020548f0b85c1c1184f19258d65007483ce85fb47b502e2fd8c4", 0xb5, 0x2, 0x0, 0x0, r1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xf, 0x316, r1, &(0x7f0000000600)="a9dbf01b2d1dcee94b42a8ec386ef25a17b04bcafab9a99e6036d98404968970f5e22eb19fbeb475ba7699f23dd7943462a0a5b6f6f8c0039db18f23b2935f4068fe465bafe0c33a6bf1849982c58fd8de5cf298dcaeb5fed55471b9afefa3b83545b4eabe94b6a677700fb1c520065602d9f74dcd90b97e4edcb5bc9b6814252869a566a59c7d25835e4a58f6a6437b3f3250b4bbcae06a46779115b4e721c74994e0d79b12c26bf9d8397147d255ed42674819cddc", 0xb6, 0x5, 0x0, 0x1, r1}]) r4 = msgget(0x1, 0x180) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000740)=""/75) 21:04:53 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1800, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:53 executing program 5 (fault-call:5 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:53 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10000000) inotify_rm_watch(r1, r2) read$eventfd(r0, 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000040)={0x13, 0x14, 0x1, 0x13, 0x8, 0x4d6, 0x3, 0x15c}) 21:04:53 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1100, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:53 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7c8, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:53 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x17ffe) read$eventfd(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7b, 0x105040) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x0, 0x0, 0xe4, 0x100, @scatter={0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/178, 0xb2}]}, &(0x7f0000000240)="7f13343b69542cf3bc128afa7a652fb3d249518273e558203c181791f21b17f080a8e14f5c2160da1c9cd4e6115188fb1d473af68d1d6ea07807ba9f2740ef2c10325bd56fda9602463f1a338680043f89eefced578df4e48e8477aaca6beea27eb11176df6ac6d95503a4f428afc7250c3e161d830cfcbe694a0901bd82fb93a2a45efc2696c99856173768124cb510f36df39a28e1381cdaa2ebaf290036425de21c2c82fced587651cc6b4a2fda566c00feb39cbe5ef47e178cd0788d01d9e27181d81a51bbfe235d42d38f6e154b7c9233dcca1aa5f4c1989582517b6fc6a4bbdc69", &(0x7f0000000140)=""/91, 0x9, 0x2, 0x0, &(0x7f00000001c0)}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) [ 1120.126256] serio: Serial port pts0 21:04:53 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xf00, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:53 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x3, 0x0, [{0xda3, 0x0, 0x7}, {0x926, 0x0, 0x7e5}, {0x2c9, 0x0, 0x2}]}) [ 1120.211644] serio: Serial port pts0 21:04:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0xa) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) timer_create(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x3, 0x0, @tid=r2}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) getresuid(&(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000200)=r2) write$binfmt_elf64(r3, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x100000000, 0x3, 0x7, 0x80000000, 0x2, 0x6, 0xffffffff, 0x4e, 0x40, 0xba, 0x7ff, 0x7, 0x38, 0x2, 0x27, 0x0, 0x9}, [{0x7, 0x6, 0x0, 0x5, 0x5, 0x7e12, 0x101, 0x910}], "70e2134a361d478445e5ba64751555b9f2738abea87582cf14161abd5751fb4e96c12c25df627cd152f71a8a0695834d3e552fa7b58eac46909ebe4e6ccf1e379b85aa66df338ebed5b8fd1a668ed8c820462a0805d25ab786030e497f40bb99d3f17c73a8bdead59e29d496378c2a1ebd71b28939cfa464b25e5cc24f8d2ddf7ca32d92c0e2149be26bcb5c7ce379efa8349d68fa79dd80638357f4a1e22dce20e3cb5245a4dfc265b48ed7b6043df204055f96849999c600ffb7009f173b00ae5a18796601f5f156568f0a859646c8", [[], [], [], []]}, 0x548) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000240)={0x1, 0x3, r2, 0xffffffff, r5, 0x2, 0xfffffffffffffff8, 0x5}) write$P9_RRENAMEAT(r4, &(0x7f00000002c0)={0x7, 0x4b, 0x1}, 0x7) getsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000380), &(0x7f0000000a00)=0x4) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000300)={0x400, 0x0, 0x4, 0x2000008, {0x77359400}, {0x3, 0x1, 0x1, 0x2, 0x1ff, 0x4, "e938bd6b"}, 0xffffffff, 0x0, @fd=r3, 0x4}) sync() tkill(r2, 0x1000000000016) 21:04:53 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x18, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:53 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5de, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:53 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x400000) read$eventfd(r0, 0x0, 0x0) 21:04:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x400445a0, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:53 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x101, 0x0) socketpair(0x4, 0xa, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) poll(&(0x7f0000000180)=[{r0, 0x83a0}, {r1, 0x10}, {r2, 0x20}], 0x3, 0xfffffffffffffffe) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r4 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="840056090002d69f8cda41bf956857386e8de3d5ea48f2fd7a9f9971fc7c813cdcab5217fd379d0e802d3a67bd39f0b465ed71db5131d19e51f0535c55ab0c17d988fd66519a526191645d7f0f8cbca3a82705c15cb173d4b2ca8059b2770a42e6319a836e8520cf5e7127468ae90c21d9239836eec0c91832fe2bc84a806ea78397abba1f4b43804bf807433c46b1c4571924dfe7865d47b46eb3184a7bd693566c08e5a21f4f77d7a1fd9be722f22195c834adbe93bf80556aa64775867f56cdd45c50"], 0x6) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x180, 0x0) write$P9_RWRITE(r4, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r3, r4, &(0x7f0000000000), 0x800) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000040)={@remote}, &(0x7f00000001c0)=0xc) 21:04:53 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000001440)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x7fc, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x3c, 0x1, @ib={0x1b, 0x9, 0x7, {"b0d98563055a08f5cb2aa7abc3897d5b"}, 0x100000001, 0x4, 0xfffffffffffffffc}}}, 0xa0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000001340)=0x10000, 0x4) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000001400)={0x11, 0x97b89f3e715713fd, 0xfa00, {&(0x7f0000001300), r2}}, 0xfffffffffffffe57) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000200)={0x1, 0xffffffffffffff9c}) read$eventfd(r1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffff9c, 0x50, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)=r3, 0x4) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000300)=""/4096) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001380)='/dev/loop-control\x00', 0x400, 0x0) fchdir(r0) 21:04:53 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x10, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:53 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x937, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:53 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1400000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:53 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000240)="ac0371a4419f86728ef0be4980e87e0152e983a619acb4aef81311233b05266755004d387e181854cdcaf8de2483dc95ede5a48d9e512cd13de47f82375b33da38a28e9219b0fff695184ca6fdca20905007260f0ba042000ee052cbc346911cf812c371432a7d85658f959af6f5957bda004f896e65e86ed7a073e74dd7370093087f19b668ce8906293f728dde6317590641a947b312ea12ca02885b33be7d8b441bb9bd3fda992989190c71e60148bb62b70a36a038ab6af256aff79dcd0fea53d7232605", 0xc6, 0xffffffffffffb17e}, {&(0x7f0000000140)="289dc0a394d762f23925cef585b8cfc21b96", 0x12, 0x1}, {&(0x7f0000000180)="aea859c53f6658dc2ffc57", 0xb, 0x7f}, {&(0x7f00000003c0)="d7a8bf4fc422d3516cd2b064e3cde6011343fd2527325a09f4446932c2c320a66658180dca33d150ff7e108cd325de80dd662c337d136de0e99f4b7030503d9ac1d215c9515861fac9c388f22f802f1eec0a33f7f5aa9ae4d90494ce3b6b557ea9dd1d9cce2d2f28", 0x68}, {&(0x7f0000000440)="25d7f3979e9db203c2e5dd9efe237eccdfdd6ed87aee22e06164ef147d1e3a64d46f9da288ac541d25087aba8e2ce4683095e9f85732fda309bdf729a48b85c18558d0ecd67f173d4e6755cd3240113343b3bb8f14818a9053b0b5acd988497a0c5230bab1484a6c90256c99787a71198263d1284527c9", 0x77, 0x6}, {&(0x7f00000004c0)="d08915d0fb500e149e097cb573b41825d387414c9dad0c4ae315a195b4d0cf4eb9119f87271f96f0c2bdbb745ef4452d177aa595d3c45390ce79cf90739b37071f13116b98ecc790c73bda227926eb882c02f9ae26ce4d082db9731b80ed871280c8d4486016ea01005af25a0f90c31b0c9cf5cbef7bd73894310c72c9c3dd4e23e956d09260c3b57be2de21744026a5be5ade7ad840d01db5cb578fb0d57c23a65a62cdc2136518404fb19e496f97b47a6e3f0c122b34a25c5313bb21c7618cf704f9819d0f0863d240a4189d49f468d1", 0xd1, 0x401}], 0x20000, &(0x7f0000000680)={[{@four_active_logs='active_logs=4'}, {@grpquota={'grpquota', 0x3d, 'em1\x00'}}, {@test_dummy_encryption='test_dummy_encryption'}, {@lazytime='lazytime'}, {@background_gc_off='background_gc=off'}, {@inline_dentry='inline_dentry'}, {@noquota='noquota'}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@audit='audit'}]}) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:53 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x80002) read$eventfd(r0, 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x8, 0x5, 0x4, 0x200400, {}, {0x1, 0x9, 0x0, 0x968, 0x8, 0x7ff, "40d9af57"}, 0xf129, 0x7, @userptr=0x5, 0x4}) write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x477) 21:04:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x80044501, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:56 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9ab, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:56 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x900000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:56 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r1, 0x0, 0x0) 21:04:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/21, 0x21}], 0x100000000000018a) r2 = gettid() r3 = syz_open_dev$swradio(&(0x7f0000000540)='/dev/swradio#\x00', 0x0, 0x2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x410}, 0xc, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00ddc28e611de83b8e071603918600", @ANYRES16=r4, @ANYBLOB="020425bd7000fbdbdf250c00000008000600490f00000800050003000000080005000400000008000600030000000800050001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:56 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0400090002008e07a0151609cc535aa2a63e8cc10a0bd4cff5ae54b742eb1cc00c880b7fc6ec872189dafe42bcf6fe1c32eeb5cc29c0ba82b4a7fb"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:56 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x15, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:56 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') semget(0x0, 0x7, 0x80) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x410080) read$eventfd(r0, 0x0, 0x0) 21:04:56 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x28a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:56 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x1) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40084504, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:56 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x400000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:56 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x1) read$eventfd(r0, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000040)={0x401, 0x61eb, 0x1, 0x200}) 21:04:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x40) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000180)={0x6000, 0x3000}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() r4 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0xf3d1, 0x2) accept$alg(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x7) sendmsg$alg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x840}, 0x40000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) 21:04:56 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7cb, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:56 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x1) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:56 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x600000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x80084502, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:56 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xc37, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x20000000008}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) read$eventfd(r0, 0x0, 0x0) [ 1123.740541] serio: Serial port pts0 21:04:56 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x14a, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:56 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x9000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:56 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xfd58) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x800) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = getpgrp(0x0) sched_setparam(r3, &(0x7f0000000140)=0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8001, 0x0) 21:04:56 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x5, 0x200200) prctl$PR_CAPBSET_READ(0x17, 0x1c) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000400)) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000001400)=@hopopts={0xfb, 0x1f, [], [@pad1, @enc_lim={0x4, 0x1, 0x1f}, @jumbo={0xc2, 0x4, 0x2328}, @enc_lim={0x4, 0x1, 0xffffffff00000001}, @hao={0xc9, 0x10, @ipv4={[], [], @local}}, @pad1, @pad1, @calipso={0x7, 0x38, {0x20, 0xc, 0x0, 0x4, [0xffffffffffffd2d2, 0x2, 0xc5c, 0x10000, 0xffffffffffffebef, 0x9]}}, @generic={0x4, 0x9c, "65d3aec1d512374607941c4b4e31225c8992d89625d7f4ff76199424955690a54718988dc5719d5349f319a2f926bb905996f9a4d9b3745f86647b1ca7ff9345dc616e8cd9c087ca04886f7ba872a3db550199dda14043381e99aeb0b1d6ae0f634b50bc1e3ba81d98dd16b0154783b4fc8a7e80224e3e3cdd33eede312671447be880eb604c5d186d33fd574ef6c5bd37e47df83549bd6ec522fbcf"}]}, 0x108) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0xc0000000, 0x6, "c820b767dae20c96b1d1b48c9458d45ffa457274c6a5c9258c00ac673cd1e9bc", 0x7, 0x6, 0x400, 0xfffffffffffffffa, 0xffff, 0x200, 0x400, 0x3, [0x2d4c, 0x4, 0x2074, 0x1f53]}) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00'}, &(0x7f00000003c0)=0x44) read$eventfd(r0, 0x0, 0x0) r2 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001540)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000000)=0x1008) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000001c0)=0xd000) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000001380)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e20, 0x8000, @ipv4={[], [], @remote}, 0x354}}, [0x6, 0x2, 0x1, 0x80000001, 0x5, 0x3f, 0x40, 0x5, 0x800, 0x8, 0x1, 0xffffffffffffff81, 0x7ff, 0x1ff, 0x9]}, &(0x7f0000000140)=0x100) 21:04:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x4020940d, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) tkill(r2, 0x1000000000016) r3 = shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x3000) shmdt(r3) 21:04:57 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x806, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:57 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000080)='/dev/rfkill\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) 21:04:57 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xa00, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:57 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x400000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000380)={0x8, 0xbf7, &(0x7f00000002c0)="e27ea89ef17ca58bdfe0123c0d2b9c6c395ee4d7d21dedf8c87b78d14218efc005bdae9b274e6336d392b5bd860c94b078925838339ec78017a7e8c41476c7b0c5560ec9efe1e7125be5fd56dc0cf45accd8d7bed1ea32441105ea1231caffa651ded91f5ef417", &(0x7f0000000340), 0x67}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/195, 0xc3}, {&(0x7f0000000100)=""/247, 0xf7}], 0x2) read$eventfd(r0, 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000340)={0x8, 0x6, 0x8}) 21:04:57 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6dc, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1124.063578] serio: Serial port pts0 21:04:57 executing program 3: r0 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="040056090002c3d642d23ecc76b96194c941f8d951438c478d29862388cb8c2f3e43421e53dced222b9c2278963cf87f918e1175c7313cc821974deb6f7ffbaba91b233edf0c124ce15f01dc4d8263b158c5ad70c79b9ea09dc990c524b950a18b0ca7a382fe1ca67183622e99ec1303a5b48135e99bb12ff23162ee"], 0x6) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x3}, 0xb) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) getpgrp(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x800) 21:04:57 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x700, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1124.132665] serio: Serial port pts0 21:04:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x5452, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:57 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2e6, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:57 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000100)=""/250) read$eventfd(r0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000040)={0xb, 0x4, {0x57, 0x8, 0x4000000, {0x4, 0x1}, {0x3, 0x7c28}, @rumble={0xd6a, 0x6}}, {0x51, 0x6, 0xffffffffffffff01, {0x3, 0x2}, {0x5, 0x3}, @const={0xa52, {0x5000000000000000, 0x8, 0xffffffffffffffc0, 0x2}}}}) 21:04:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000040)=0x648b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:57 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xc00, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:57 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x20400, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000003c0)={[], 0x1000, 0xffffffffffff7fff, 0x3, 0x0, 0x800, 0x1, 0xd000, [], 0xc2a}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r2 = memfd_create(&(0x7f0000000200)='em1\x00', 0x800) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000580)) write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x20}}, [0x10001, 0x1000, 0x8, 0x3, 0x8, 0x8, 0x7f7b80cd, 0x29, 0x4, 0x4, 0x2, 0x2, 0xee06, 0x8, 0xd43d]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r3, 0x8, 0x9}, &(0x7f00000002c0)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300), 0x4) sendfile(r1, r2, &(0x7f0000000000), 0x800) 21:04:57 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x641, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x5460, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1124.346179] serio: Serial port pts0 21:04:57 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2a000, 0x0) read$eventfd(r0, 0x0, 0x2c9) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0)=0x3, 0x4) 21:04:57 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x200000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:57 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xfd3e) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x20000, 0x0) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) sendfile(r0, r1, &(0x7f0000000000), 0x800) sync_file_range(r2, 0x2, 0x4, 0x3) [ 1124.407274] serio: Serial port pts2 21:04:57 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xaf, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40084503, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:57 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) read$eventfd(r0, 0x0, 0x0) 21:04:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x4, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02ab3751fa35611c97c335033206b20bb135f9fbcccdc47b"], 0x6, 0x2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:04:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x105) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r2 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="da1a5c4078cfc9916d4f0cc600127d8ef24baa7ea9e1a07a4bddb2e85c10076d3e77745b11be7b336799c91443060675adb10b062777ca97c7c6edcb6b95b9377ad70c6b841ebf6f8e6609c4bca464e13938a08bcdfc4d6ad0a9c63ea711c047949f6640d64d139eadcc8d03cc8f7270"], 0x6) write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r2, &(0x7f0000000000), 0x800) memfd_create(&(0x7f0000000040)='em1\x00', 0x1) 21:04:57 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x11, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:57 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x89f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x80284504, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1124.655866] serio: Serial port pts0 21:04:57 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1400, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:57 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6e4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:57 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xfffffffffffffdc5, 0x77, 0x0, 0x4a98}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x400, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:04:57 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x8, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:57 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x14e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:04:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x80104592, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:04:57 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x400000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"]) 21:05:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000001c0)={0x1, 0x3ff, r2, 0x7, r4, 0x7, 0x8000, 0x8c7}) tkill(r2, 0x1000000000016) 21:05:00 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) r3 = fcntl$getown(r0, 0x9) r4 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$netlink(r0, &(0x7f0000000240)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)=[{&(0x7f00000003c0)={0x288, 0x10, 0x300, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x8, @pid=r3}, @generic="beb2c76dc1ecaf1d806eab5ae1693e1b50a115bc11610cc920badcba691d84b7cd70c18e7eded72e6ac95818cd1959d8297db510dd1552174332cc8eb072420a53f8c8bcf9e0e837154fe117282eee3892ca0412a43b32a365f892d730c3ed47e7b29d92dc1ea6499f734b5f3cc34b25cfa782db11413c9aee524482b7b05fa5ac5ae5f1be8474dd33d5e6bac3252bc32a8a646089b757de71689f4a165eaa64727ae0af79cc321635baf5520492888ea21f0f7db806e538ad1b0c9c", @generic="79294c5df09f5f765fd052c073695f1005fc6ec3b41161a96909750e630756ec4243ba246f9ca83c92efdf1f4f3e6fbac1d963a68524f97bdee3e51c78848c29bb25cf33006a0282a75f155e9d6071c41852d8743c114cfa0c1a70d606f2f6ea4b81a7650f65c2443f03a007215ca8c7c4bfdf28d33f25f616e5b095f5381038b57525a162414abe1f0a05c1e68d3bd5ad9935a3ce4ab98ad32032650953ff080995d243d3db35a982b02bf9a554beb539f1655c7f33576a83fb87d05b66aa01c3992bb9415644a8d66303954a882d5e10b0b3825cbc564b3acbff407c73fba0", @nested={0xd4, 0x10, [@typed={0x8, 0x62, @u32=0xe14}, @typed={0x14, 0x17, @ipv6=@loopback}, @generic="b1c5b1e89c0edc71e6261dead400239020a8ab2fae5467ab40d2c111b731154c99a60dfd10c1ee6836481d5f5cf06c31de88f7634f742ff49ad12eee7e997b4ce67e4dc0c9669da437a4e237e2303250bd2663480c1c3a4859784f0ba346dedcf4c1c31418c5d4d0849a9d0e72bc054f55b062d68eab3f1ed2f41f09530206e14e025d7a1f051f653d36f8fd390c9c2d3705b109a6e3d3f7946060a265bbf9d70a42cb8d4673911a59abab8f5435e7fec93c8ce6"]}]}, 0x288}, {&(0x7f0000000680)={0x17a4, 0x36, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x40c, 0x9, [@generic="6f7c3da48d618aac1769aa623332cdd5a8b3bd529caab57b0d55079d407f95a29124fca42c3b4f27d49eca5e70f7cf77be079dcdf1a2040a33a04d6e811e410c0fa9587400c4f58e65f2d47f2ad6ca37219a6e89f4be014658146e6c53dbb028cdd828228266997e4967e2fdbe97bae1aca7857eb3fa018b", @typed={0x14, 0x4c, @ipv6=@dev={0xfe, 0x80, [], 0x1c}}, @typed={0xf4, 0x1c, @binary="47e669cf261c6eb216133ebf0caa1bf9983e34cfb215fe6601f8369aa52d4c7de4c5341ed6feac2fdb8b0d6af9683c8e448d4c644f6a18a7eb4a6cd49db4b1b605f27a18d2803c5edd9c0010bbf5177a26016944ad430a8a9d3562d287330054226a85e249d8aeae75f750e2b27de115c965f2ca161f819279d1e7ad47b936c777ae94efb66a69b26bc90511a983e966d44cd6af206214bcd632e5f222c47b662728c31f833a49cc210a2288b8144c46a355a59954bccdab7f31d1c468cbffa4afccc4360bd9ee7482fa6bd9b94093b446dcf4278a070d064f58d9f806cabcc4fe5edbfb865cb30924b37ab13d3dfe"}, @typed={0xf0, 0x21, @binary="6ed6d3fad3c73acd3f952c18176c1206d8f235335188eef367e0e80ad6e85f319e1bfc174cd72035981e2745f200d22724193fa999646312f4e83c9b5067806d454d299a8c4c6af094706ba4600064997878e3938eaac6b58f3097540de277390e8378fb66cfd76440d25982295c91556b25893ae1a324c8ff014ef813ecacf04e1cbf1a0e4cce17fb71f9f37827d9318a1202b20dd2ba7921362afc830b16749565de6be83010d8bd11e33b8b3f80e5d9cc80cf013b757c63bdf9fbcbf8625a5f1f0ebea832ac8537df1187055d88aa4040a66f8c063a78dba0b53b21a74fcf148d77922f5ffc57027c92"}, @generic="e5fa6a1d026fe9004d86af9a51ba2400f42b38b8db0aefdc3583df8a746689e16e49fa172f48fb97bdc833326aab43ed3749277361be270f8a344c7c4e545db19987fe77441f99b3719f7f0000240389bbb3d3cb9ebe5d9465eefb203a83b21deb82411c8fd02cae5c51c846dc98e4a6c89f9c957dd3da741396dcab9e4a6b20213646b99f", @typed={0x8, 0x80, @str='\x00'}, @typed={0x48, 0x75, @binary="9ffdae7ed39ef916e9b6584d5e9b9932676589a1dfc293aecf3fc4b8b8004dd24ca27388d9200b272f8a7d5892e9995486011c6ed8c0a1536d0ccdd4f16bc058c53b6c"}, @generic="48450cdc0024870d24779b5760a401d64536f1fa766de73b9a2a2f450968a7ebad60789776dd677c35ab7864904e7b806ad71c2f98689711c36c0aeae31ddb2f237ce34c0522ae4482cfd89c5720e5bab332b2c517d4f7c75cf3d40c20de2e3d591103680715040304b1bf538954a4b58b918dc933081df78f6c25dbb30a49b7036cf110c9d8eed6404f15f327feb0ef085a5914166297667c9be7f45ff304f6aca092d1c8ce5cc9687a76c5b57532ca51bf5243d0ec49b4da9cc53e9ac3c05648b745"]}, @nested={0x11e8, 0x92, [@typed={0x14, 0x7b, @ipv6=@local}, @generic="09eaa2435c0c26b3d252627fb6dc03e4f7806b505a1aaba886e328694eda27df8445cb6a160c79f646af771634c05914337f941db39761cbf70e70562520e8954ad9cbda08d048f3ad8440a2b4bc6059418d73be5f42c657035e0d7755f3bd5c9f1b8efb6543a49dff9aa30c8e262a04e5af163e89829bf20aad555bc9baaee9245c7d6e65f4725935a4da32403894894842867e0d6d9e7afb3674015b072e52f8d7da89b0f6ae8f381c096a7e3f077696d80b3de23b25cd1bb9b4235a20da8a5ab1e01e390372895c11fa542fafce51a0a2", @generic="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", @generic="a987353522f79b11860b626ada116d875a2dc83f866c6828fc7cec5d5639ab856072d816b0a899438e27ffa850b25ea51e645e6454d5a701aafbfcb06ecb1cd4888440475500cf18ada91df95f1ed6214f92a582be1f027faeeb1b86ad7f9073e167e460cb483cfe463757769a16f66d73ad10435a6ea6e72acb1b966ccdf904e0f5a65e26f8fcb02ec49806e9279c1a68af9601d2d5c98e31b736d8fc66e72f1646ebf6b413", @generic="63fd74d07a3f38046890131b2f625758e19cbf757eaba577e69ba63b4a959d09f6bbf427b22c7234b40ed780f779fd268514aae9e2fa724fcb51b0acda511811d9f919ee5574282a3f138221e0", @typed={0x8, 0x29, @fd=r2}]}, @nested={0x1a0, 0x3d, [@generic="906ca918c324d9467a6e803362614a15368885012fe5961b4cfb95103dd9ab9e14c4bfa99d4a42d0fca9f861f61b68bc7322fefebd50554a5c2a5cc26afd0b21895aa8", @generic="705a2a087101d63fbe36883eddd4a996dd838587aa6cbf3c0fa651be5652f41295384d3fac975ebf07e5f1272544c9fc893100b5c2f86024cd31275ae7f75aec97a392a26dbcde6ac483c2e75350b0f87945422c18ba6d9954936e5612fc560bbd7885a8c7aab571aa97c71b0692a4bd4548b1f2cc36f102fd", @generic="ef1eba3b09ba59fe", @generic="18ff5007f40f4efc58aed09c87765d28267e085d9024f904a23212e834f349969ad153b3e028ba823d20e1e891ec3f1bc16305d29ca57afbfc41977c6148e7b95a64b5b8c1d541f91bcdae405d9af4aeea3f2b948611cf28", @generic="e9ea031082a33aea9355becd0702cc72045890899e601c571e1a1b7384a176f70d0cfcb346275803883004", @generic="9b68f63c8f7d64411acfa410990a9de81d4aebad8326591c924852d61ec92b0bc23dd291ced4970610b943974689a32d515ed80160bef51192984dfc", @typed={0x8, 0x1b, @u32=0x1000}, @typed={0x8, 0x6c, @pid=r4}, @typed={0x8, 0x4f, @uid=r5}]}]}, 0x17a4}, {&(0x7f0000001e40)={0x4f4, 0x1c, 0x3, 0x70bd2a, 0x25dfdbfc, "", [@typed={0xc, 0x2e, @u64=0x6ba7}, @typed={0xc, 0x63, @u64=0x9}, @generic="5850443feacedcda36e2b077138c15a2388b2d196b3fa3ae8216e22af58950d09cc4283e83200959d3212507d6dc20d824c57c01fcdc0a9b91905fbc80fee18924ac29c20ae35a33c63c4144bf4e22e3035e54e04267bb116be96f3149c754e38216d67770f1deae5650582912c8ef33046a4581bec10004bba60c1280bc136ddcbfe6caf3c5ef00c283dc419503daf878ae8935c4", @nested={0x358, 0x2, [@typed={0xbc, 0x7, @binary="df7bd2b63c21f22e9940e69a98927a342d8b76f02445611c4cbe0911fde9b47a58b12b191869b1917cbc1eba9624929643d25dbcf4a424c60c39fbe3c40e3f720db75f436eb0b2e626c6e894903b0288fd77a273dceda4fe36c7f2a23267997d894f91de0a421076dcd1d98bd1eaa096cec71f5c918a38b8c458a2ff8a0af179f2e2fea1384c9e9cac46886130b24a00da7f53eb0df9704b9376dcef44708876023b016a0d3e160225a5be3999d8e7beba4a637a7fc09cc7"}, @generic="c723aa457242e32292c273716b1edb1ddaebd769f93a40d95eed5548924164", @typed={0x18, 0x6d, @str='lo{%%cgroupcgroup\x00'}, @generic="26da258010f3a9306111677068b262ba4155c8991ca2eaa51887b6d22eed6eb0445f384eb3c2b61336b353cfc355942f3d1d86028af21aca6f868d4eb7089208fecee414f52e9ff33ba0e303de3da84525683f6ef98a2f8bb6bc1a0dbcb871747b69b54ea82860dca30063d3b33067f54d20726845cca35ea8c76440a43670d3855ce72921139bb807f0235acaebac67b05ff00d833b6305cb30ac686d51bd59b5e5d5d698c8607ac6929ee12882305519c1989451ae4d28e5de00dca0ea11eb73d45c82efa7992bdb6bab4435aa4ea0cfc3127fe6ba01f7917578ae3f00f2ad461a13659edbef52249cdcf6cb4e0b7cc9c110e38c09a3", @generic="c5eb4899255d46d8fda8af4366fdeda41c5dfc73ec95be7bbda796e76a1a213fc0bdc1c0dc75833089cc036223a866198c72793bffee6d57cd150e998da9d825b416529f972a321815feb01328df942a86c06aaafe62f1e376e08297124c199238f15500756125a13af6ab1a7c5e25f6a2b5a54e32a5a107e0a573ed8a7c29610a75d09ce4e14efe4c8c80af7e35db64e61fd6c8c9061657b9a31ec63762c441ec061ed82b1e7467bf347b33ee49", @typed={0x8, 0x43, @u32=0x1}, @generic="8e8440138f1caddf6952769f94bfc304b7b88bad8a8aa8ba3bf3b8147ae051ef330eaacf3f9bc893b1c1b4b732589ea3d7fdd9dff24af387c66dfe72984b3ae59b79cc3b3bd6817f05c27bf0ca20a648ff6cfe852080e417903c782870e02efaafc3e481a7b85fd7a19d4f6a0a59d639fd5d9aa9992ad5b0c40ae8ba58aab5e9cb557bc17607df752c37adf62610e03bfd320cf7f0974c44d76905846b9910ea863e8a7ab6a1243d166387d32cc7735d80"]}, @nested={0xdc, 0x21, [@generic="95e6dcc9d1a214ff7604da5693672901c0307c30cdca64cc22fed401d77f9b79edbb69b39d2769d1c7d5fb6cafd1bdba7302a844ca44c71e5186b3d6b8beabbfa506469fd5f96a1dcfaf0c7b2f701362105f146138717b856ace51d1984343f3678a69f75cc21d5e1004a16415cbb032e741138dd8967ba64c2784bf44ef1b3824cf50406a2b9c4c00d85d9c05c7d31212cc837ca14f6b91f043179a142a3df2068548db0de8970cf4b873132b20c19cbc99a5f4f98ecf478722ea20830a6c", @typed={0x14, 0x1, @ipv6=@mcast1}, @typed={0x4, 0x78}, @generic]}]}, 0x4f4}], 0x3, &(0x7f00000001c0), 0x0, 0x81}, 0x50) 21:05:00 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xa00000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:00 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x5dd, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x5450, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:00 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3a, 0x840) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xf2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={r1, 0x1000, "c527b9c4c5a5f2c0351ed749e2c63b6c44d53b416aa28c70eb322d89045a1d4d1a773b84f5af8253b2806eabb0bbd2f4812844671526854532968949a2dcdfd930d5a65defa86be8b25959963ea55a484dd3c49b008b344c96deabb1b589dfbf4b8930d07ab4e7f27845f24dddd69142286dd1a224e12d5df6c51c2dfd2a7e9ed2924bf6f9ae084a26e354d7153d2962320943c889c9977f3ecf54a5d3931c6ad8bb1e66a49ba0f2ec41ee87ae43e7accf0c5211296b9f963c806425b3939f5be1464852c87333a18d3d6de40058f9011b5d852bb0a300015c96af7a3d3fc42ba55522481e059c8560d3bfe80f3d9752ca1523706939c67df75dbfc124b982386fdfc5b425e40d19b14f12cda2dd1cd283cb7da9782068a00dc0f8881a557b62d98321d4e6e2123020b44334e9169b13e97b91bc2591d576b2a7bbe604f9b535e7e54908ab96c8a7774124650a642b27ce61cd9a82c91d68aa5ad1fb513c11a16729cd465cf3feb785a276406a557b9f7b07f31f053deb4ed9fc9f7dd7b06ba3380b002fd5972cc3b070e77b6b9df159c4c7f5dff30807a241388cef4e656386b7d920fbd8b964372eada3b9f8e3534264756ed8e4ddcdfea1b843baa9e488e793158a7f974e2b4c957bc8a947a5ab47c3cfba681692abfd88a0bdd245066eb9d278232b772b7c0cc54f5858eb9cee25492fe4ebecb6a6b4b7924619f9c6ac28ccb54155b2faa4dab3c22527077ba6465c42b74b46cfa2f4683c55b068c45bede21486382b8e43089feb72a62a37e1887a2337adf107c67318802553406a92c08c7f7717035a4627d1fc2b39939ab2ba306f9509a7ed64b522bf20d2bc11f7f14f87259240748a538782a4b4c18ca95676a26b37e9e963e9eab22c7b9a87a29616b68be9cf87909dce48a85039a9a4eccb7d7315555add5e5a39b989574a76212f6a24e5875ef0b9fb9bcfca95a8adb15a7c7420870d05fa15da5f5943d7a39ecb9446e88cccd04643930621903a26b05564b8af60c5ac2111b2a9c5d4c6447dd90fc6b4161edcd2e1dc77d20f6e68a1c31641adf40eabbbdb1af42beb0707c7e0679589868ca993f6a51af45de0737b341fc66bc05190e15a18e8d9baa6d6888ca4957fbf79712f31d520560861c6774a673f36db2c8fa09e4e65afe5ee6387de9d6b56b28e8c2747d7683591d8bd5dd5b0f0e050cad83e8491bd50f316d3219af524bbeeb5071605358dc2afd9e37bbccc309eb2a81597137f0abf0a3cee82d99776521afc19849d2de71691369a8b11a873b17ba5fe42458a2fac4aefdf8cd215851eab1e0255a07e9ec4ed82724583fc04a6aea5c79b14cc962007a74915da28c3d11486c58b9d8b1ac9aebe761ea6bfb44b25771baa43e311ddd1fcde5ebc55948d478d885c91f82d1463c61f0844cfefbabc1ec01d0a6dccc53773f5207ae31219665946d9687fd3ed0f3e496b3c4e3f7a67548b4a4c395fc3d8e5c80690bf9e5db9eb9e255d23c12f7f65ee9a58470dab116b77f9cfeea7665d771b99f06e93b762583855eff6a6514cd414acb6c388580c584243ba8df162fb3e0189121705a2dbf5a48b01aab8c5cc9a5c2f6451416a8b90aa6f525be5f5870bc6c68f43045c2cf6b0b483862635f7ebc569a611446859e1703205c381278024f6270a89bf760cc2ccd03f71c4c347fcaa0ffb681e2d0c10d42415c0515bd5e573c1cca98f451b39f84f1db88157acb0fdc0b8465fadba776faf3ec906b55050558dd531a983d3b615eaf2eb344b8776e9a9dc2f6aeae825ece3954b82845fd9e84f7268b47719acd7bbb9d938616de524509cef049a276c545bb3c7d916c4b2dd15008337cc46379acede525bf0fefe951d6b486fff22660dafd706e896f5c3e2c8a91efc24caee3d59d646c1b7d5c518deaf311c88c50d13146fe3229158549bf4134c4c0fe4b5ec38e9d4814e426fb935a8d882c5f46bd7ffa3e983736ba222e9d4fad101e4fcbfdb4573b2ee564d82112ecf7adf88bc964e03e8360b245a73a4071267f6f6e508b70a6df812003e81ccd7fa6a1041e4015162fcc2b8d91b1e44051f240ce21327da5aa2830034b960308dfd4742ed31d10ccf28788b949b33d7572e987aa9d4fc0ddd25df98ebebdc673548e32428d2f95a7421987e3b6602bbbe614e1608eb7a8d62340f6f07d21f6b4c770f631ce147eb884ff93f08b7fbff785fc01820ecf8f1e7ce9087d53bd183d5b5cf5d4361e2deb2f0302deddc5d5272ffd6b68cabc29fa8051b4b5c15cb269799d8b8428a0c47c6a30bf92bcae592c2c24a83e10be67b9442d032d0a2c0d84353c6b3646f00387248975a340b764af546363cb192903422651902d85a3c7a31e2a6e26c5cf68ecaedda0f6571e77280c186dc37c1128545a93982e0380629678f6a744f3929c344fbd0f35001c894e3dc9d4505e57002fb1bc18e52354b8295478aaf9c8d827a353f980a0cfb80f074925974389ee55492f55d6f775a05d9e99c97f25b190601d05e4d60bde212e7f0f5bfefe7f4a338cc39e4e07ae576fd24dd8e5a27dd0f904eb38fe5547b93eb14dbbc2a9c153065a40aa7a6f00677b346d80c7a90909c36baee84e1d82ac9a6b57e38a214584cd4cae63cb8a3d6863981dde9bfdc798e58eb2a8a7b2544643e8f4b10f2651a46c521ff0479de501a8282c75c72ef36679a436d5995e4adb8c05b7b1f0debff3edf8bcd399659c928e193644559a3bf42683b0afb0fc6ba22e6982d0670d1a9b5cdd58ba4afd57d5097a39c494ce94bd68169683b92d67b2d1a75b39f4e293c721297c64a12630a37706c66a291b0dde414ec7f8e2d30741f1f7d66486eac5c68c7eee82dee588e0caebfee71e131ceede93dc80182c9eafe0ceb50938ed763d0106fc8714e9e3faeeae25b0500d4e84505358ef1befb99297c1d48e9716d4eb76933d1b4c39fb5ab21e85c1daa5b6d22ff8d1c953c4123decee2df52b64e8c9d7a5b9a8670cdb592feef98a361750db3c0f66265771fa592459bd0f4f2aa5606f08cfb9a914d44afb0b59eae2dd3ad06ce151a3e0d30da4f93e242e07c5fe8274e69d3f52ed1b5318e762ad8636fcdddf1d0bcfa2672b61c9ae06a1bd205655eea6d5756572491e1b97f71e649fadef17b70e184d079bb101259ee1f2b58d0c66ac43a9a0c359753716e3c6703be2a75e55b2f207e1ed9552cb7a3a354234112077a068266886def51022349b5caa2eb32b4c8f793603f008c7045caa9a343543393764be1bad014659c55c5e3c80126150c3fbcc24f66d392c77fa00be644ea4120f61c43f4461bbfc3a7f786fef0c9eca9cbdcc0bf1fa51fb341d0554841c2b5f4eb8c0d9747fcc76b79d1add0558d6ed8a9fa4452e09d83f3ae878b56184680fadb43e05d95a3b622292a1bcfbae754a41be0ee0ce130c48c72c94b420312aad8bdc12e14a88d966befbd710dfb1ee23dedb5ce599a5ce60daecdecbcbba2a7d70c749efdf8f09e78ca29f74b94bd4a15f7d37c9c89cf700590644b6341a4127a755a6320943d92d9b6600f61bf6b09d81dd07fbaed57aeec8d495302fd0901b294c5794846bbe890fdfd461366a94d1275154821aa54887e09931b5e7f6fc0be5977cd10b0d7a328b991b3f479c5bd9bcf09225ce8eb89193ca4ef1f3b13bedb575220cd86d740f8691151e8cb59d7c0ae244db8136698260c16a4e266b8b7d5d7ba354ecbcd650d25230224362bff7df56d56f89654e717fe08a911a066fc374af7988301ca7fdef9ae5c739c1e7b0eeb9a3e798612c1ff0c9a986a86241a2658df80a4b8021820a91c25b96503a0c76ef90351f2776f75bda50bfdab757a7cc45d8284ec994b7eb01042fa707c990a3d8493448f3d8b6e6cbdd44e51854945af8920c14c3a850fb3bd37f8690fba2db9838b3d702720d5ba32bff7890ed4ddce4ca134eb7bcdd9c4f1b821e0eed9bdadbb383064e19c53abd002ab725117a568cd3ad90364d4fa65528efa4ffbe0a14329f18821c3309148e5e984bbe489f736db3eb9b05959c6813f631994206eedfcd570fa22b38fe39bbd3592fbd2d3dd4215acbaa76569bc70c1e146cd996d7fcd6a1b754e583dabd8cec6457869be76c9d728260cfbf03ddde1d0aa38b6733cf40d46ff569392ff7f0595a15edd3e722b2f8e859446d569f79298883373cde602189e9f4ad8b55af1ff65677b1af78c547c904a4eb9e2e9466b75608b194e237708b062216f8df9063b665b40f076754d1de129e84660b498878c8e35a62965269e9502f110c6f7d9fe003b0a14e877eee89733cb06930f922b40bb156c4bc1929ca63b91d2887ca6b1ad74c387c6e6324cb830200259667ca21b9669bc660f78e56ac3a97469645eb0b5cf9e627655fca74a85c6b39de6f25746a9efc5bca7c7b5962b115f45e70fd442602396d303b3751eb6b50a438de0e2d19b3c48e449f28a36570f2fe4724f8c2060b68e58c6f79a7bcb4cf281f73d8cc33f0b36048d7feb34101296152ce2cc000cbef691ca8e15dacdd7968bfb11d0ee60fa359eed9778e8a2ec2d6de2809b75ff41eb48a5a037676a6dafe6db7df4249b927b98edf9aa74269e36d1e0f1ef7c16c78851991a0f8bb12da14e86a862af0379bcff610f8c96683ba9456c4f30f213b24fcc8144a6434e040a317013feb8653eabdc5770f13a89aa3a7b50b49e28eb318fe9101f152192d5dc51398de8ab1df05d91036ac690486eac70c62351f06d1bb301169899a6b6fd2e831d2195a81fdf588f2fd887e4baade7895719b14ed0b8c3a28af369e981a7de380ad8c8f6224ffd5381bfeba58398515def5de38d43ec54ee4d172c643abbe32a49c4de86705c972f9bf0e8239c8f7c84c9dc27107f23942e3a69bda4e46a6b5c976c45e5952c2ce48da0fe0ffc80667a27b94663e932ce12e1034433900755e9dda461e24299ae6b1510bbadb6c2aa5bbeaa443a9c0451f161c422d180228f74aec1c29ab4cc3ac446a6610fe244bfa1cd8b3d030de1b82f2a919d122bae11133dfee8b925868036cf9ae3458d26ba64226f7865337f353730d3013c88438c24c1bc2affb4047fb36018cf78420162d55775f444ec0e66d2df204bef788ece61094db0df2614441927b52e9b98c6c4255c1c22d0b333c8cf7e1870bab0c040f61b82596c643c0485352799a57a54305bdebb863cbaaa15e386cd781cc685f2b8da927979f7ff5363673382f00dae244788f97aad25d2d2ec2c423b6dea502c63762123d00044e03bf6f0ffe9b544af536c6cafa6092cff309803beb4c407c4f45b098ae1a0311718056c399b42c0ebc7396ac4c299d0f17562b08b87f9a844a2984a6d8345d209df704cf833e31738bc567ac2ce58ab5e04525b802ee679d0bbb29e799dfe427fa6c6a3793ffe591bf493d874e8fa11cf26d607014db23d0c95e2169414f8ae182331db4827dbbe146c16b13840c63d5619cd70a481a5e450e97eba24f7bea90dc7e26bb6b32b22d43bb03a40c39276e0c65ecdf87c9fa2f734395bd4870e5e0f1f407052fa64eb3b91abb9aa449df42614a54a492c7a57a56ae9c767a32c173b194e4c5dc08b73f6b8db2b83e795ab016afb00d938ed3c3142691da1998d7e6202c5b327f51ad1d9837c286ff389c4e66b2f5fda8190947cb92c3462d2f6067f80ef84a9414d1565b3523e97cecef420643031d0735625ea348c17f0351e30008d664ad32716762d0d7fbf5beca7d90144492df1dd9d4f73cf299c6058fb858feca4516a7daf4df3f7"}, &(0x7f00000000c0)=0x1008) r2 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r2, 0x0, 0x0) 21:05:00 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xd4, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000003c0)=""/158) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r3 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0449abfabefa0783644a02"], 0x6) write$P9_RWRITE(r3, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r2, r3, &(0x7f0000000000), 0x800) 21:05:00 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x40000000000000) read$eventfd(r0, 0x0, 0x2f6) 21:05:00 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8a0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:00 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xe00000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1127.751047] serio: Serial port pts0 21:05:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x2, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1127.815851] serio: Serial port pts0 21:05:00 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x561, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r3 = open(&(0x7f0000000080)='./file0\x00', 0x480, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000180)={0x18, 0x0, 0x5, {0x800}}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x410000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x7ff, 0x3, 0x20, &(0x7f0000fff000/0x1000)=nil, 0x6}) 21:05:01 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x888c0000000, 0x200001) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={r1, 0x2, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x20, 0x8, [], &(0x7f0000000100)=0x4}) r3 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r3, 0x0, 0x0) 21:05:01 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xd00000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x5451, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:01 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x30) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x0, r2}) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:01 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7ca, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:01 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x300000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:01 executing program 2: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000140)="27ef63052e8473424f01ffdaa294e7e55acde3a618c9321b7c645db75487731ede95c119ad6054003016aeaa9603222910c6e08690df8227893ef1a7a4986c0554f8405e6600952037bdef59bc74581d9fdbd2bf7c3a7e30c9eaae81ee771a3a82b6618fc5c3b0f0e93138c6bab61f67c71b3b698899525d25af85167e9ca03675f6d1f668707ec5abb704d4cafdbf5acc86f04d67f92495853a46509e1fdca022f618a63c14f6e69be93213fcb4dd748e516d2fd2", 0xb5, 0x97c}, {&(0x7f0000000240)="a1ef66dcf57fac7b2bd923dc559d34b9243852ab282ce3bdf7a96cc8b34e3acf8b538871ea0f1a53bed78fcfa053946af4e2e0f796d38f51c656cc9e96191f17f344560ecaa73c9d06ce149eab3970047ba5ab98a453", 0x56, 0x9}, {&(0x7f00000002c0)="a897b54c158c9e57fd3eb366a7945592d6848801842969e930238d627ff0719b526f0466723eb8bd24df535150259f4aa22a2758a9a563bd0db4f48d952fbf522a89c9b9c6aab2db06d07d78c9bea6640298f3ff70146a19a0235b7b30108269df0356994f1bc803b3f3cc168cfefb72247f9e3df6a47658bbcdf59c3b677536ad41d6f7b34c04d2b0a42f36cf1e2eac9bb2cb8b00640a9d4a961c118a4dab391b414a1d67d0fe486dc3d2ef3948670f64506fdcce642968235bd9780bb62f3007301ed45ed18e827887b7bdfd36", 0xce, 0x7f}], 0x8, &(0x7f0000000600)={[{@nodots='nodots'}, {@dots='dots'}, {@fat=@nocase='nocase'}, {@dots='dots'}, {@nodots='nodots'}, {@dots='dots'}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@uid_lt={'uid<', r1}}, {@obj_type={'obj_type', 0x3d, '/dev/snd/timer\x00'}}]}) r2 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$netlink(0x10, 0x3, 0xf) connect(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x1, 0x0, 0x1}}, 0x80) read$eventfd(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x1, 0x1, 0x9, 0x1, 0x1}}) [ 1128.098866] serio: Serial port pts0 21:05:01 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xfffffffffffffffc, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r2, 0x16, "92d0f0c0657a9e5923a314982d2219171ebbc108a237"}, &(0x7f0000000180)=0x1e) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:01 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1200000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1128.161445] serio: Serial port pts2 21:05:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0xc0045878, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:01 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x8e5, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:01 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x1) r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r1, 0x0, 0xffffffffffffff50) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x80) 21:05:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000240)={{0xa, 0x5, 0x3f, 0x5, 'syz0\x00', 0xfffffffffffffff8}, 0x0, [0x1, 0xfffffffffffffffe, 0x7e2e, 0x5, 0x8000, 0x3, 0x1000, 0x1f, 0x5a, 0x1000, 0x5, 0x401, 0x0, 0x1, 0x80000000, 0x8, 0x80000000, 0x9, 0x6c55, 0x0, 0x6, 0x80000000, 0x7, 0x8001, 0xf59, 0x800, 0x3b7, 0x0, 0x750, 0x1f, 0x5, 0xffffffff, 0x100, 0x4, 0x8000, 0x8, 0x8001, 0x9, 0x3, 0x100, 0x81, 0x2, 0x1, 0xfc5d, 0xc018161, 0x6, 0x6f, 0x3, 0xffff, 0x7, 0xdd88, 0x9, 0x9, 0x5, 0x6, 0x8, 0x0, 0xfffffffffffffe7a, 0x5, 0x7fffffff, 0x1, 0x5, 0x6, 0x8, 0x100000000000, 0x1800000000000000, 0x1, 0xffffffff80000000, 0x3f, 0x3, 0x3, 0x8, 0x92cc, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x8, 0x5, 0xafe, 0xffffffffffffff7b, 0x3, 0xfc, 0x40, 0xc86, 0x80000000, 0x1, 0x8000, 0x401, 0xffffffffffffff01, 0x9, 0x1, 0x6, 0x63, 0x21, 0x7, 0xad0, 0x100000001, 0x5, 0x6, 0x2, 0x8, 0x898b, 0x80000000, 0xdac4, 0x1, 0x6, 0x7, 0x5d7, 0x8, 0x85, 0x401, 0x1, 0x23f6, 0x8, 0x5, 0xa2d, 0xd90d, 0x2, 0x2, 0x2, 0x4, 0x7, 0x7, 0x9, 0x0, 0x2], {r4, r5+30000000}}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) tkill(r2, 0x1000000000016) 21:05:01 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x14000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:01 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x37, 0x8, 0x11, 0xe, 0xa, 0xd05, 0x1, 0x63, 0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r2 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r2, &(0x7f0000000000), 0x800) [ 1128.384103] serio: Serial port pts0 21:05:01 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9ff, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40284504, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:01 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r0 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r0, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0xe3b9, 0x10001}]}, 0xc, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1400208) sendfile(r0, r0, &(0x7f0000000000), 0x800) 21:05:01 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0xffffffffffffff71) 21:05:01 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xc, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:01 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa75, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:01 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x28, &(0x7f00000002c0)={0x0, 0x0}}, 0x9) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r1, 0x4, 0x10}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000006c0)={{{@in6, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000007c0)=0xe8) semget(0xffffffffffffffff, 0xe25712061bcfa6f7, 0x4) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000000)=""/25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vlan0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@mcast1, @in6=@local}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000180)=0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000001e40)=""/64, 0x40}], 0x2, 0x0, 0x0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480), 0x0, 0x0, 0x0, 0x2}, 0xca}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}, 0x5}, {{&(0x7f0000003800)=@hci, 0x80, &(0x7f0000003940)=[{&(0x7f0000003880)=""/155, 0x9b}], 0x1, 0x0, 0x0, 0xc1}, 0x6}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b80)=""/23, 0x17}], 0x4, &(0x7f0000005c40)=""/4096, 0x1000, 0xb5d}, 0x8}], 0x5, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x4400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$unix(r0, &(0x7f0000000240), &(0x7f0000000140)=0x6e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) r3 = accept$alg(r2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) r4 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0xd9, "4a1d719c7c4721923f1acaf57c47943b1d4859996202da101c94061c57d623eee169925d743679ec2989bb96351495626c5643c556b2bd97cd3783b5644ead0005bb8395c8bcb5b7b33953fd30b79aede3cec952a986fd9c7c7750482bd4a278d31885fae1b1fed62ba88bd12763b3f99c5f84b024024d0a589f938e31b84c7f74773bfbff1c5e3c0658a27c03790e8871689fa518edc63737876a7cf3c848ca32e92e9898f310914dde835d197cebbb75bf2520856113508ba69eb8c7e2a2b417b55c63ad7c93f3bc75b716c52cf46946d4f82d01a6ec79af"}, &(0x7f0000000480)=0xe1) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000004c0)={r5, 0x5}, 0x8) 21:05:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0xc0045878, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:01 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x2a, 0x4, 0x0, {0x0, 0x101, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="04119e200000"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x10e473e1, 0x1ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) fstatfs(r1, &(0x7f0000000340)=""/94) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xcc, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xfffffffffffffffc, @dev={0xfe, 0x80, [], 0x1c}, 0xa8d}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e23, 0x8, @ipv4={[], [], @remote}, 0x101}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x2}, @in6={0xa, 0x4e20, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}, 0x7}, @in6={0xa, 0x4e23, 0x2, @remote, 0x7fff}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000180)={r4, 0x7}, 0x8) 21:05:04 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xd, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:04 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x689, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:04 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x5421, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:04 executing program 2: mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='autofs\x00', 0x20000, &(0x7f00000000c0)='system%user@wlan0trusted{\x00') r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 21:05:04 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r2, r2, &(0x7f0000000000), 0x80000000) r3 = getpid() ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000140)={0x7, 0x3}) capset(&(0x7f0000000080)={0x20080522, r3}, &(0x7f0000000100)={0xd2c, 0x4, 0x800, 0x7, 0x100000001, 0x400}) 21:05:04 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x1000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:04 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x4e0, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:04 executing program 2: syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xffffffffffffffce, 0x400) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = dup(r0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000240)=""/4096, &(0x7f0000000000)=0x1000) read$eventfd(r0, 0x0, 0x0) 21:05:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0xc0189436, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1131.507750] serio: Serial port pts0 21:05:04 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x6, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1131.647427] serio: Serial port pts2 21:05:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x400) timerfd_settime(r3, 0x1, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x90200, 0x0) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x7) 21:05:04 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x943, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:04 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r0 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="fc000019c202d8789e020000002717ab2115000000adcfa15c456f4a6606a933da7db1d55a58eeaba4ce0577ccabfb77b7a0aa76a8bb1e3e3a1373"], 0x6) write$P9_RWRITE(r0, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000000000)=""/39, 0x27) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 21:05:04 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x3) 21:05:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40044590, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:04 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xf00000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:04 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3b3, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:04 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x4000004002, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xfffffffeffffffff, 0x10000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x3, 0x3, 0x6, 0x3, 0x5}) read$eventfd(r1, 0x0, 0xfffffffffffffe9f) futimesat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) 21:05:04 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0400330900021c3d7b2bc7135cc5494a620138707dac845120619bc3d42979666c1d8de4f8d0b998259aa865f776588ad23b61bece631f43067040"], 0x5) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, r3) sendfile(r0, r1, &(0x7f0000000000), 0x800) [ 1131.839060] serio: Serial port pts0 [ 1131.923084] serio: Serial port pts0 21:05:05 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x300000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xafb1, 0x8800) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="000004000500010000d6b0820420ae26060f21e2984d0f10738ca56dcea6bffe0124b5b5de0ce871"], 0x10) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() msgget$private(0x0, 0x10) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="21821ddb44171f90678f269e9312cf221f6b431dfed7c3ebf12e12f28718f789efe549d53972c6af1dd2fa1894bd1494a2df9659a5aaca43ae17b043cc5755016e5f9c1d72b89a48d51a2826981b7ae734e2af0f81568de565bcca9ea8f8191a2c5d45d2f22a06105aa4a9fcff7ec4180d7d26330a7ee1112682becb5c5b52ddd9a40188ad54325fa877e8ff3e3ce624479301f760afa636fb1b203d9d75591b31b4d5377ef98b0fa9ed72a482e8c5f3079cbfed6cd93c57daf437847cd03a2f8a563e96e566af74497c2dc0d94f7f7c2bb6bc31484e11af5669af89ac65db2c5a00578025d5259e4a6a792c166360195e6b15bbe4af80ad953d63f7f1c1ef89") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @ipv4={[], [], @loopback}, 0x95}, 0x1c) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x1b, 0x4, 0x81, "e3c32987a2d52e14d9304dd36cd097e2", "1fa8351db079"}, 0x1b, 0x0) tkill(r3, 0x1000000000016) 21:05:05 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000240)={{0x6, 0x3, 0x3, 0x100000001, '\x00', 0x7fffffff}, 0x1, 0x20, 0xffffffff00000000, r2, 0x6, 0xb1, 'syz1\x00', &(0x7f0000000100)=['/dev/rfkill\x00', '+\\md5sum\'mime_typelo(self\'nodev\x00', '\x00', '/dev/rfkill\x00', ']\x00', '/dev/rfkill\x00'], 0x47, [], [0x0, 0x6, 0x0, 0x5]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:05 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6ae, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x80084503, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:05 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x3000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYBLOB="1ce0dfcb"]) r1 = dup2(r0, r0) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0xa, 0x3, 0x7}}, 0x14) 21:05:05 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x3e, 0x10000, 0x12}) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4, 0x2, 0x200, 0x7, 0x0, 0x80, 0x80, 0x7, 0x392, 0x2, 0x7, 0x96c, 0x389, 0x1, 0x7ff, 0x9, 0x1, 0x8, 0x8000, 0x6, 0x1, 0x9, 0x7ff, 0x5, 0x8, 0x9, 0x7c, 0x72, 0xfffffffffffffffe, 0x3ff, 0x48f8, 0x0, 0x9, 0x2, 0xffffffff, 0x81, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000100), 0x4}, 0x2000, 0x1, 0x80000000, 0x3, 0x1, 0x592, 0x10001}, r3, 0x9, r1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:05 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x904, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1132.184607] serio: Serial port pts0 21:05:05 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000100)={'nat\x00', 0x21a, "09cb1243f5f961b9c23483140ac5ee112b61292b3d6ed37c9eabaa5948aa16c37cef7583db6edbca5d7972abab1293bc268fe4d1d82d5dec1f69ed22957a73cc802f4a34d228e9969d082af36b87940c90b04825c046157b032270939327f2431980d4e61612bf7f0233c1a46729e30baca18eca027b232763e1125358787c20de89b5b85af2d9fddfbdc4e9d19665"}, &(0x7f0000000080)=0xfffffffffffffe61) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000001c0)=0x6, &(0x7f0000000240)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x408200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0xc020660b, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:05 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x10000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:05 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/237, 0xed}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f0000000140)=""/129, 0x81}, {&(0x7f0000000340)=""/223, 0xdf}], 0x5) 21:05:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$KIOCSOUND(r0, 0x4b2f, 0xff) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/uts\x00') r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ptrace$setsig(0x4203, r3, 0x7, &(0x7f0000000000)={0x28, 0x4, 0x3, 0x2}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 21:05:05 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6a3, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:05 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x3f00, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:05 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f0000000000), 0x800) [ 1132.466098] serio: Serial port pts0 21:05:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40044591, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:05 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x10410001) read$eventfd(r0, 0x0, 0x0) 21:05:05 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xfe, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1132.530555] serio: Serial port pts0 21:05:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) timer_create(0x3, &(0x7f0000000080)={0x0, 0x24, 0x2, @thr={&(0x7f0000000300)="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", &(0x7f0000000040)="93ee29a092e85cdb987ec3c23646dd918c1646c6e2c425261567051053c6004219716ba6fc916a35112da9efc96418e8fa06bfde44cbd36c91"}}, &(0x7f0000000180)=0x0) timer_settime(r2, 0x1, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000001300)) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000013c0)={0x2, 0x0, [0x0, 0x0]}) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x8001, 0x4) pread64(r1, &(0x7f0000000240)=""/145, 0x91, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000001340)='trusted.overlay.opaque\x00', &(0x7f0000001380)='y\x00', 0x2, 0x2) tkill(r3, 0x1000000000016) 21:05:05 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000080)={0x400, 0x3}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:05 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x3501dbcfcdb686b7) 21:05:05 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x12, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:05 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa4e, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40044581, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1132.751341] serio: Serial port pts0 21:05:05 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x18200) read$eventfd(r0, 0x0, 0xffffffffffffff48) 21:05:05 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) fallocate(r0, 0x60, 0x8, 0x101) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) mmap$binder(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000000, 0x3873, r1, 0x37) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x52b) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:05 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x8, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) gettid() ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:05 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x3de, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:06 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="040056090002"], 0x1b5) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xffffffffffffffe3) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) getsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000000080), &(0x7f0000000100)=0x4) [ 1132.948423] serio: Serial port pts0 21:05:06 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x1e9, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40049409, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:06 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xd000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:06 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x5, 0x2) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2b8e111006a80cbe7edf3531fa226e45bfa25d63a3ce679c554cb4516944f6a982f2ea1817af30b37105b45c68f88180b9651d316e39537b1e1f093a05bb9bed976550074f265542486e5a92f22af16b866ff795880b98ea8e7752ed4d0d73d88a95a06f7382febe07d79b8cdfd38645e29319c9264d7ac0792fa196faf3c36a13d1d6ef8ad69c9b4ef8512168224ceb80a89a3fa3aa2778ed2c100d94bffada153f0cad6ebb075dddbfa3db8127646e4748dfc4c3fd09d2e9b64fff79e47d985fd9a2fba70c4d8511df2011fd52d08e616ed908c37129c23c34cb7fc2dc54c97379638f4cc6e2cd4b2dbf91661a8bcbb0f12f53183add", 0xf7}, {&(0x7f0000000240)="b4e8bf2d6798bb01438e0b692da36b3f28d28a7e1cb46314d9a0a2cc9e95d6c7e7cb04d8bc64db6cd78533fd588930", 0x2f}, {&(0x7f0000000280)="eda4810b93bf699ea43d0199006c9e3b0a3eebc01932f7e2754d6751ebc313733448cf73a244be7d8019e9bec163a3500ccea2bfd0bc111f10aab20ef0ea466560904524441a635788c826c516769a4cd524892c24dba3314c08c0c6dd5a0e6c0f1f2d11f196269bd5d50a19c37a73f27f1785535ed496e122a8d47077c81c91d5879e9563c6f0c385f6d94a58ad52ee8473fc42bfac83358f84d351ec8ea39aff2697e96c8c793dfac34696834b13b9a192ef285e052eeb2657505bceca69e6fb5a9b7d804a3a117044db2b7d55e000f9ed8ff5c9e16e423f5a3b3e6753904965", 0xe1}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="ae60cac58e903b53dd4f05bf60440af9244c93cf9a76908cf2dae53ec7c310be259bca8e1a332edc94d5d2aaf109ab95794640f59fe0d0c4503fa5cf53bed7cc1008cd7d21f6f81fcfc0d0", 0x4b}, {&(0x7f0000000440)="b3", 0x1}, {&(0x7f0000000480)="8dd8679df7959d737a1362612e20b4ed7747085aa53cafa95739c8162f337b06b97b98cbcad2", 0x26}, {&(0x7f00000004c0)="a44292420c126aa084dee5e6941428aa0cc576429e76c22b1852871e0d651d71820bc2566a1eedbb9363e8c9b56a9e495f292b0435644684b5e121f43a31c20ab9ded6d876a9820a444d808e249d8ec291abbb437b03", 0x56}, {&(0x7f0000000540)="948ed46c7cdbee7e6fd1f845d2964ecf3e87ded8fda5f534b1bc8df7a8cc77a1b9ea203162275d5bd73da9a6323f492d25f4b6530a2ee27202419864f2bbae4fd66db04c502f209321ce1e12bd9675560bcf41104ecf2eaeb24126a00beb7d", 0x5f}], 0x9) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0x20000000000, 0x1, 0x2}, 0x0, 0x3ff}) [ 1133.024587] serio: Serial port pts0 21:05:06 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000080)=""/30, &(0x7f0000000100)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x5) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() read(r0, &(0x7f0000000240)=""/4096, 0x1000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:06 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x18000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:06 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9b, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:06 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x101000) read$eventfd(r0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x600201, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x440, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x4, r2}) 21:05:06 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x322, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x80044584, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:06 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x2, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:06 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="c3136724010000000200000000000000000000"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xb287, 0x240) sendfile(r0, r1, &(0x7f0000000000), 0x800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)="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", 0x1000, r1}, 0x68) 21:05:06 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x2e9, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:06 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101042, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x115080, 0x0) read$eventfd(r0, 0x0, 0xfffffffffffffcdb) 21:05:06 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xe, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:06 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x10000, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb1}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8800, 0x0) r2 = syz_open_pts(r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = getuid() r5 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r3, r4, r5}, 0xc) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r6 = gettid() ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000300)={0x0, 0x0, 0x2080}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000240)={{0x27, 0xb85}, 'port0\x00', 0x75, 0x40, 0x3, 0xc7, 0x0, 0x3, 0x3, 0x0, 0x0, 0x9}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f00000001c0)=0xc1) uselib(&(0x7f0000000040)='./file0\x00') tkill(r6, 0x1000000000016) 21:05:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40104593, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:07 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x40400) read$eventfd(r0, 0x0, 0x0) 21:05:07 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x9b4, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:07 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x40000007ff) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:07 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x13, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:07 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x200000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:07 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x4004, {}, {0x5, 0x1, 0x8, 0x10001, 0x4, 0x3, "60de1e5e"}, 0x7ff, 0x7, @offset=0x5, 0x4}) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x200, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x20006, 0x40000) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000180)={'syzkaller0\x00', {0x2, 0x4e20, @remote}}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x800000020514a, 0x200000000000007, 0x3002}, 0x4) 21:05:07 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x17) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r2, &(0x7f0000000000), 0x800) 21:05:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x80084504, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:07 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa89, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1134.323347] serio: Serial port pts0 21:05:07 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x1100000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1134.402543] serio: Serial port pts0 21:05:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:07 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) acct(0x0) sendfile(r1, r1, &(0x7f0000000000)=0x400000000000, 0x200000101) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000100)={{0xffff}, {0x6, 0x5}, 0x6, 0x0, 0x800}) 21:05:07 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x80000001, 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x6cdaeca83c856ee0) read$eventfd(r0, 0x0, 0x171) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000080)={0x9, 0x80000000, 0x5}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xb9, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) 21:05:07 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x978, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:07 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x500000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:07 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x117, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x5) 21:05:07 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x40000, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x1ff}}, {@mode={'mode'}}, {@mode={'mode'}}], [{@euid_eq={'euid', 0x3d, r3}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) fsetxattr$security_smack_entry(r0, &(0x7f0000000180)='security.SMACK64IPOUT\x00', &(0x7f00000001c0)='proc\x00', 0x5, 0x3) [ 1134.615859] serio: Serial port pts0 21:05:07 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5d489cdf, &(0x7f0000ffc000/0x3000)=nil, 0x4) read$eventfd(r0, 0x0, 0x0) 21:05:07 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x98f, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1134.690478] serio: Serial port pts0 21:05:07 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xb000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendfile(r1, r0, &(0x7f0000000040), 0x9) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:07 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x7e1, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:07 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fstat(r1, &(0x7f0000000100)) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:07 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x3a1002) read$eventfd(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x2000) ioctl$UI_DEV_CREATE(r1, 0x5501) 21:05:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x622401, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x1) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) sync() readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 21:05:07 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xc000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:08 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000080)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7fff, 0x4, 0x8, 0x423f, 0xe06, 0x2, 0x3e, 0x2, 0x196, 0x38, 0x251, 0x3, 0x7ff, 0x20, 0x2, 0x8, 0x1, 0x5}, [{0x3, 0x80, 0x8, 0x0, 0x2, 0x7, 0xf9bb, 0xffffffff}, {0x0, 0x7ff, 0x400, 0xff, 0x56d, 0x7, 0x27, 0x9}], "472373945c239eb448f4f9b17dba842aff108b6b5808c690ea4d05d1d0528760218d1ccd13dcd40f", [[], [], [], [], [], []]}, 0x6a0) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:08 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x702, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0xfffffffffffffff9, 0x6, 0x1, 0x2, 0x6, 0x3, 0x1f, 0x2, 0x9, 0x80, 0x8d8, 0x6, 0x7, 0x39fc3fbf, 0x4}}) pipe2(&(0x7f0000000100), 0x4800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1134.984218] serio: Serial port pts0 21:05:08 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffc) read$eventfd(r0, 0x0, 0x0) msgget(0x3, 0x140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x501080, 0x90) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x2584000000000000, "5068eb911cd63fd209f26388b047f96c3f054b20df9f2fafc51ef86dbcf1fdbc", 0x800, 0x3, 0x101, 0x4, 0x4}) 21:05:08 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xf000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1135.120904] serio: Serial port pts2 21:05:08 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1a01) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x5, 0x2, 0x3f, 0x2, 0x39c, 0x38, 0xc4, 0x951, 0x5, 0x20, 0x2, 0x2, 0x3, 0x5}, [{0x7, 0x10001, 0x2, 0x200, 0x0, 0x60000, 0x7, 0xff}], "438b628cf1adde6d42014a89276520c62f3fd62dfcf60c806c7ed864b7f1f64c2058fa67f556d9a27a73da47f67bdad29763a1079a02ec0c28f426ac1c6c11d32a01c3362b18f74166c6500ca95d2f0d68d9496cf09889e2abe2ef2db820adde7a0fa4bc625d77414548bc3dfe23d50cbd7fbc2e1a35b38251a475b234cbd1b44e139e18669b085227c993495cd08e9d825ef00fcd51c345f88781b3", [[], [], [], [], [], [], [], [], [], []]}, 0xaf4) sendfile(r0, r0, &(0x7f0000000000), 0x800) 21:05:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x6c000, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000080)={0x7, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e20, @broadcast}, 0x24, 0x2, 0x20, 0x2, 0x200, &(0x7f0000000040)='nr0\x00', 0x0, 0x1, 0x81}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x8000a000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:08 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x200, 0x121040) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0x5, 0x4) read$eventfd(r0, 0x0, 0x0) 21:05:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x40000000007, &(0x7f0000066000)={0x0, 0x29, 0x2, @tid=r2}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:08 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x871, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:08 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x1000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:08 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000012c0)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000001c0)=0xe8) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x5, &(0x7f0000001240)=[{&(0x7f0000000080)="5d62b500b1e81075cc48d11a1fb3531402994f20b5d39d9b596dd7a724ac58faf5917787c2bb5328c3e90a024d1c2333e6eb0cfa57e0ed0c6755fd842f64f30a16377e2a855d7a0b262e4a5c0bb133203e7a52fdb7657211fe71d439e38b1037524e45ed7399cb3a3c0f84787b9e9b101adae9796da9", 0x76, 0x8}, {&(0x7f0000000240)="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", 0x1000, 0xa7}, {&(0x7f0000000100)="49373a60f211cee7feec32c0662f56f4104b3495d4b827a88187386f09", 0x1d, 0x1}, {&(0x7f0000000140)="c65a78fc928bd006291229cc1a60c4ba28291ca44c5c44f5372da75d07e75356783a687264766c56d5bab13f42971d39cae2a116cccdb722d0", 0x39, 0x5}, {&(0x7f0000000180)="fe7c08", 0x3, 0xfffffffffffffff9}], 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB=',measure,obj_user=&\\wlan1,\x00']) modify_ldt$write(0x1, &(0x7f00000013c0)={0x1, 0x20101800, 0xffffffffffffffff, 0x3, 0x7, 0xffffffffffff8001, 0x1, 0x2, 0x5, 0x1}, 0x10) read$eventfd(r0, 0x0, 0xffffff46) socket$inet_icmp_raw(0x2, 0x3, 0x1) 21:05:08 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)) r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'ip6_vti0\x00'}, 0x18) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = msgget(0x2, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/31) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:08 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x3f000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:08 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x692, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) 21:05:08 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 21:05:08 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x0) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xfff}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r2, 0x9, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x2}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x100000000000002) getsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @empty}, &(0x7f0000000240)=0x8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x80000, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x9) 21:05:08 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x2000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1135.470126] serio: Serial port pts0 21:05:08 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x992, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x400000) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x134, 0x40) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000340), 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000037c0)=0xf10001, 0xfffffdef) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0xe3, 0xfffffffffffffe3e) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000700)=ANY=[@ANYBLOB="736563d37572691103800055a1fd2b247cbc1acabf2fc000000100000000000000fbff00000000000000008f040000003b07cf7a90e9fa54658a7cf4e14f6dc759f825ad42daf6e5b281e0ac6df663bd329e60c79af1469d286f6bf5411dd7a253f7b8379eac8e0bb615ac63079375e5e56e32ca2dfc623b817c895897ae45c11672ab054368d61ba500514443475699b62763cff4d8a3a3433e072a1d6ad82adb8a1daae369f98559b3689244e2212891466af078bb85313ad4291ba8efd6df4af7d23a8e2b320aeb970091e59f86c3785b044631548de09a7877670000000000000000000078e7a6ad920d7dda1dc6a818da1c82baec7b7195d08e79cd8588a4122399a0ca42ec09b7"], 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x1, 0xfffffffffffff362}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vsock\x00', 0x200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x0, &(0x7f0000000180), 0x0) clone(0x0, &(0x7f0000000400), 0x0, &(0x7f0000000300), &(0x7f0000000280)) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000380)=0xf14, 0x1cd, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x10000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000240)=0x4, 0x4) stat(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0)) setsockopt(r4, 0xffffffff, 0x7, &(0x7f0000000280)="cabc596ebfc6b9e50143e6c0567005187942db5a821fc93ac59d71e44f9e6d80f99713e11a30f7804cdbee976378cbe65ce598afcde6f149ccc4f3121e5320cb4fa0a8b922b1dbd089a8a09b13cd3b6f1e79702007ceec18b0045ab9124fff8da84ff9f8e4a2deff2be1", 0x6a) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000640)=0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000400)={0x2, 'J}'}, 0x3) r6 = syz_open_procfs(r5, &(0x7f0000000680)='attr/current\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40405515, &(0x7f0000000440)={0x5, 0x4, 0x8, 0x401, 'syz0\x00', 0x1ff}) socket$inet6(0xa, 0x1000000000000, 0x80000002) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000580)={'syz1', "8e7e2e65e7fe34aae9b159af3a3631126d3ffab2a53f09a57788dd7a01eaad568375a279eb39a994c575bd1acb0393b2d2a71f7e1e484b6a5dd84a3b22d41232a8852c73c8843b3d820c6087894b4e015f1d0cf02368c21a43a49fe18f8fac375ec0848917a6bd586fe7be40e2f7d2489fa8de3a607cfc2e94e3be42b1c12adf0778c81751bfdf6cb5168382c112257f758be0f29a96ab419cc6a285a27f3ea8c12f161c2eaacfe5d76c8c12e091b280f8"}, 0xb5) [ 1135.541729] serio: Serial port pts0 21:05:08 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x14000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:08 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) fsync(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="04017562fa4001c90000fd79a19c168b00e95a522c8a43a143afdf41de77703c90aa86d71cf9a42f96676a6191345f9b5a9c1ba37b041cba876684a92525c1651355f3d7332e2e991acebd09672d00be0f21ad50d310d45500726653700d43771d5260f0641009b3b372468aa2d6da988bb20f663fe9827cff59027c5f38003753f6d25a01f1f58331056a84c13717597f58c2794fc22c0b8def1e808f93fa7c0d0a249e11fee614b21e5ffb7890a3981d3c073867bd128fa27d33f596"], 0x6) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x107, 0x7ff, 0x2, 0x2c, 0x37b, 0x7f, 0x3af}, "63234714244b199982e8a127f1b03f2d26b05ad8a6691b09bbf642e54c72494b6f3ae42a6687cf92fef39bab5cced73c122f8ccb10907c2edf339232429bace8bbe0f03ee11bfa0957bbcd50dffeaa35f5cc12e02ca97a522ee7d331c02453d63824bc", [[], [], [], [], [], [], [], [], []]}, 0x983) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000080)={0x303, 0x77, 0x3, 0x3}, 0x3e9) prctl$PR_SVE_SET_VL(0x32, 0x2cb92) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1008000, 0x4) sendfile(r0, r1, &(0x7f0000000000)=0x1000000000000000, 0x800) fcntl$getflags(r1, 0x408) 21:05:08 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x499, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x4000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x400000, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x80000000000006) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 21:05:08 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6c2, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:08 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="89005409feff05b415136e8a307d8f6de5c840f7c0bee9c0baecaf2ba052f6ef1739a609a5509511d7b5eb8e1e1a2609ddf70c23a97a73c8567306d37a9aed5c44f018887c4f35ad46b866702265996306dd5f1badafa5830d2d4350c4891c475aaa38625094a886c0973270c114ff05f34d04dd81e60767e37f585cedc7e08f0081ccdd079067c6436df1bd5f79221d64943b5d60aa5ad7"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:08 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x1100, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000440)={0xf, 0x81, {0x55, 0x100, 0x6, {0x6}, {0x1, 0x7}, @cond=[{0x4, 0x80, 0x6, 0x6, 0x7ff, 0x80000001}, {0x3, 0x81, 0xb48, 0x7f, 0x3, 0x6}]}, {0x57, 0x7, 0x0, {0x4, 0x541a48bc}, {0xab7b}, @rumble={0x9b, 0x8000}}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{r3, r4/1000+10000}, 0x12, 0xfffffffffffeffff}, {{}, 0x17, 0x2, 0x16a}, {{r5, r6/1000+10000}, 0x4, 0x401, 0x2e4d}, {{r7, r8/1000+10000}, 0x11, 0x1f, 0x9}], 0x60) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r9, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r10, 0x1f, "b9fb05", "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"}}, 0x110) r11 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x4, 0x101000) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x2400, 0x0) 21:05:09 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x870, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x101000, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/21, 0x15}], 0x1) r3 = gettid() r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40, 0x0) getsockopt$inet6_int(r4, 0x29, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) tkill(r3, 0x1000000000016) [ 1136.095738] QAT: Invalid ioctl [ 1136.191969] serio: Serial port pts0 21:05:09 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r1, 0x80000000}, 0x8) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070012000000030000000c", 0x11, 0x1400}], 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r2, 0x0, 0x0) 21:05:09 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xc00000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:09 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000080)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x81, 0x200) sysfs$3(0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:09 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x6ee, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x80001, 0x0, [0x8, 0x0, 0x4, 0x8, 0x1, 0xd2b2, 0x4]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 21:05:09 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xe000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1136.603478] serio: Serial port pts0 21:05:09 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="04005609000283819a78c29813dafdceab9fa6632cb2af1966d2f8ccd94a0ad14d22b0897c6ad5bba7471d95d0c482f022618c1388caf19a5b12acdc34173d73d0fa6d30e848ef01e821aa7d1928c1e4c9ce02b98b438d2616c4b7fe88cbcdd58cec2dfe633b5c2ab0c38075a2277c09006381dac4591bfec1aa1b8ab73689e47da05f47bcd4a055c33b53f4aa9c30856363662fa536e11bd00c06f40fd39887d5864bf8782d43d63e1f9287e9b8d7700b2f60ff703ad203733bfe0c312ddffd1fe0a0dc06934df067946fef2f44c1e5d8b2d941"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:09 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x869, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x24000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) 21:05:09 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x600000) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x15b, 0x202000) read$eventfd(r0, 0x0, 0x0) [ 1136.674020] serio: Serial port pts2 21:05:09 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x15000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:09 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0x973, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x802) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) tkill(r2, 0x1000000000016) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x301000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000180)) 21:05:09 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000080)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000340), 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000037c0)=0xf10001, 0xfffffdef) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0xe3, 0xfffffffffffffe3e) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x1, 0xfffffffffffff362}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vsock\x00', 0x200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x0, &(0x7f0000000180), 0x0) clone(0x0, &(0x7f0000000400), 0x0, &(0x7f0000000300), &(0x7f0000000280)) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000380)=0xf14, 0x1cd, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x10000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000240)=0x4, 0x4) stat(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0)) setsockopt(r4, 0xffffffff, 0x7, &(0x7f0000000280)="cabc596ebfc6b9e50143e6c0567005187942db5a821fc93ac59d71e44f9e6d80f99713e11a30f7804cdbee976378cbe65ce598afcde6f149ccc4f3121e5320cb4fa0a8b922b1dbd089a8a09b13cd3b6f1e79702007ceec18b0045ab9124fff8da84ff9f8e4a2deff2be1", 0x6a) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000640)=0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000400)={0x2, 'J}'}, 0x3) r6 = syz_open_procfs(r5, &(0x7f0000000680)='attr/current\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40405515, &(0x7f0000000440)={0x5, 0x4, 0x8, 0x401, 'syz0\x00', 0x1ff}) socket$inet6(0xa, 0x1000000000000, 0x80000002) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)) write$binfmt_misc(r3, &(0x7f0000000580)={'syz1', "8e7e2e65e7fe34aae9b159af3a3631126d3ffab2a53f09a57788dd7a01eaad568375a279eb39a994c575bd1acb0393b2d2a71f7e1e484b6a5dd84a3b22d41232a8852c73c8843b3d820c6087894b4e015f1d0cf02368c21a43a49fe18f8fac375ec0848917a6bd586fe7be40e2f7d2489fa8de3a607cfc2e94e3be42b1c12adf0778c81751bfdf6cb5168382c112257f758be0f29a96ab419cc6a285a27f3ea8c12f161c2eaacfe5d76c8c12e091b280f8"}, 0xb5) 21:05:09 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x400, @local, 0x40}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x6}, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x54}, @in6={0xa, 0x4e23, 0x8, @local, 0xc8}, @in6={0xa, 0x4e23, 0x400, @dev={0xfe, 0x80, [], 0x1d}, 0x1}], 0x9c) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:09 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x9, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:09 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x15) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:10 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1300, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:10 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x10, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:10 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1400, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:10 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_AIE_OFF(r1, 0x7002) sendfile(r0, r1, &(0x7f0000000000), 0x800) socket$bt_hidp(0x1f, 0x3, 0x6) 21:05:10 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x9000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:12 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 21:05:12 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x8, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:12 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x203, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="070056090002543eb79fdf9d9c36489e61adcc1276506ae78c1b80"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x401) sendfile(r0, r1, &(0x7f0000000000), 0x800) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x6, 0xfffffffffffffff7, 0x3}) 21:05:12 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x40) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) write$vnet(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/170, 0xaa, &(0x7f0000000100)=""/25, 0x3, 0x3}}, 0x68) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:12 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x5000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:12 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x28, &(0x7f00000002c0)={0x0, 0x0}}, 0x9) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r1, 0x4, 0x10}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000006c0)={{{@in6, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000007c0)=0xe8) semget(0xffffffffffffffff, 0xe25712061bcfa6f7, 0x4) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000000)=""/25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vlan0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@mcast1, @in6=@local}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000180)=0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000001e40)=""/64, 0x40}], 0x2, 0x0, 0x0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480), 0x0, 0x0, 0x0, 0x2}, 0xca}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}, 0x5}, {{&(0x7f0000003800)=@hci, 0x80, &(0x7f0000003940)=[{&(0x7f0000003880)=""/155, 0x9b}], 0x1, 0x0, 0x0, 0xc1}, 0x6}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b80)=""/23, 0x17}], 0x4, &(0x7f0000005c40)=""/4096, 0x1000, 0xb5d}, 0x8}], 0x5, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x4400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$unix(r0, &(0x7f0000000240), &(0x7f0000000140)=0x6e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) r3 = accept$alg(r2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) r4 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0xd9, "4a1d719c7c4721923f1acaf57c47943b1d4859996202da101c94061c57d623eee169925d743679ec2989bb96351495626c5643c556b2bd97cd3783b5644ead0005bb8395c8bcb5b7b33953fd30b79aede3cec952a986fd9c7c7750482bd4a278d31885fae1b1fed62ba88bd12763b3f99c5f84b024024d0a589f938e31b84c7f74773bfbff1c5e3c0658a27c03790e8871689fa518edc63737876a7cf3c848ca32e92e9898f310914dde835d197cebbb75bf2520856113508ba69eb8c7e2a2b417b55c63ad7c93f3bc75b716c52cf46946d4f82d01a6ec79af"}, &(0x7f0000000480)=0xe1) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000004c0)={r5, 0x5}, 0x8) 21:05:13 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000140)='em1\x00', 0x3) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:13 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x12000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:13 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xf000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1140.002901] serio: Serial port pts0 21:05:13 executing program 2 (fault-call:4 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10001, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:13 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xffffffffffffd034}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) [ 1140.074448] serio: Serial port pts0 21:05:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) personality(0x400000b) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000300)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r3 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000340)={'tunl0\x00', {0x2, 0x4e23, @local}}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TIOCEXCL(r0, 0x540c) tkill(r2, 0x1000000000016) r4 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000000)=""/125) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x6200, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{}]}) 21:05:13 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x4000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:13 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x15, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:13 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x5, 0x7, 0x6, 0xa7a, 0x2, 0xff}) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x1, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:13 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x15, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:13 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x15000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) [ 1140.323689] serio: Serial port pts0 21:05:13 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000100)={{0x6a7, 0x4}, {0x401, 0x9}, 0x5, 0x4, 0x4}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:13 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x4, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1140.379881] QAT: Invalid ioctl 21:05:13 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xa000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) exit(0x7) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1140.455536] QAT: Invalid ioctl 21:05:13 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x1500000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)=0xff, 0x4) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80001, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000240)="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", 0x1000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 21:05:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000000, 0x0) syz_open_dev$vivid(&(0x7f0000000300)='/dev/video#\x00', 0x1, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.syz\x00', &(0x7f0000000280)='eth0\x00', 0x5, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80, 0x0) ioctl$RTC_WIE_ON(r2, 0x700f) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000000c0)={0x81, {{0xa, 0x4e22, 0x2, @remote, 0x101}}}, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x5, @mcast2, 0x5}, @in6={0xa, 0x4e22, 0x3, @remote, 0xfff}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0xa, @loopback, 0x7}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x7}], 0x80) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$urandom(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0xca081, 0x0) 21:05:13 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000100)={[{0x6, 0xfffffffffffffbff, 0x8, 0x3, 0x9, 0xff55, 0x5, 0xa2, 0xfff, 0x2, 0x20, 0x1, 0x80000001}, {0x3, 0x8000, 0x2, 0x0, 0x6, 0xc3b, 0x401, 0x1000, 0x8001, 0x3, 0x80, 0x2fd1, 0x1}, {0x10000, 0xfff, 0x3, 0x9, 0x0, 0x6a, 0xffff, 0x20, 0x3fa, 0x9, 0x7, 0x9, 0x401}], 0x6}) write$P9_RLERROR(r0, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="aafb695ccc5eb887424afc65e52f5cf092faec02c0f4a8703fe19b639a3b68f1b8b1e000c0b76193bf6431146d4b26916d652fdbb0c3efff17379a8f27857ed180a596000000", @ANYRES16=r3, @ANYBLOB="240829bd7000fedb5f250100000008000400030000000c0003000800840076240000"], 0x28}}, 0x40) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = accept$alg(r6, 0x0, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000400)={[{0xd8, 0x1f, 0x0, 0x3, 0x8, 0x80000001, 0x2, 0x7, 0xfffffffffffff800, 0x878, 0x8000, 0x5, 0x6}, {0x9, 0x1, 0x42, 0xd51e, 0x270edaf8, 0x5, 0x1, 0x1, 0x4, 0x0, 0x23, 0x0, 0xa3}, {0x0, 0x1, 0x1ff, 0x100000000, 0xfffffffeffffffff, 0x80, 0x1000, 0x9, 0x63, 0x786, 0x8}], 0xfffffffffffffffc}) sendmmsg$alg(r7, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x2a0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x2}], 0x18}], 0x4924944, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:13 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x300, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:13 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xc000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1140.601349] serio: Serial port pts0 21:05:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x3}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10000, 0x0) mq_notify(r3, &(0x7f0000000040)={0x0, 0x18, 0x2, @tid=r2}) 21:05:13 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x4000101008, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="040056090002191d25d3ad76dd14f9355e02c7ee7951d5c6556d2272f79b7a6b14fec0374b2a969002f963b0255b460d16b319f54b79dd06d34321fa51763e30cc8d2bb9a5ca2adf01be191d85accdfaf8876c120de3229f"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000002c0)={0x0, 0x9, [], @raw_data=[0x2, 0x1164, 0x2, 0x0, 0x101, 0x6, 0x80, 0x8001, 0x4, 0x0, 0x2, 0x1, 0x6, 0x401, 0x10001, 0x1f, 0x2, 0x1ff, 0x20, 0x4, 0x800, 0x7, 0x91, 0x2, 0x4, 0xffffffffffff0000, 0x51, 0x3, 0x6, 0xffffffffffff836f, 0x7ff, 0x4]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fe) sendfile(r0, r1, &(0x7f0000000000), 0x800) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="f903165fb5d8d28d654ecbdb1fc745c3b1495dfd1a499723cb7a6f0570418753e69281444646d73e2f4440", 0x2b}, {&(0x7f0000000100)="fe48572f93efa864eb3e8e4954195d0ec5339a1a5ad1555728acfead638f4be32229117c2def825c65235785a81f3e", 0x2f}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x180, 0x40000}, 0x10) 21:05:13 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xc00, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:13 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xe00, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x3, 0x10000}, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001ff) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x1000000004, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r1}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="dd51b3d0ef9e3807365f1e4fa1805be4004199d45dc2eee199b9905121a18f41833dfa4d3af297f42c844365ff12e63197694ed244e8d042d6914132a481f1cdc797b2632e9d7aaa0ea843e613fd79cdbb528d3d02fb080f79518075a59e8a83c866b5d46a1e0bea00a28a1694eabf885018c256ecbaad0a466649b850766a709f44451a21ded713b9e29bdec68584599142b9c72ab84f82978925a0d126f7289bd7c8f0f621bea6518246983a5d0737c7"], 0x4) dup3(r2, r1, 0x80000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 21:05:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x519080, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x4, 0x40}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={r4, @in={{0x2, 0x4e24, @rand_addr=0x7}}}, 0x84) tkill(r2, 0x1000000000016) 21:05:14 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x3, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:14 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x11, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:14 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f0000000240)=""/221, 0xdd}, {&(0x7f00000003c0)=""/242, 0xf2}], 0x3, 0x1f) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/21, 0x7}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000240)="2019c755941bc830996f2173309ae3d732fbadefcf16bb8e45ae144c8ddaac9d12ea1cd9038839a65413199ad7916794c269e336688cfa529c0e0829f88814efa3f486457966c94003856ad3bb78432778870b2798cf47e507be9fd64e566fe2d1db13ead1ac92dbbc218575e10d2a5eff7ec025a7d9938dd0a7e2513f72e2f5f6139f28a4a58fd6d8f49ae9c4078ff2dc8f5d1d8b993c69bea6a2a72c28d41ab91d07814d24841d505c7abcdaf698a6679b3fa27eab73a80a4286f420884045183f8a48d3b2a6482074") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000, 0x0) 21:05:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000200)={'team_slave_1\x00', {0x2, 0x4e20, @remote}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x42200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in=@local, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000140)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'yam0\x00', r3}) 21:05:14 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x14, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:14 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xd, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:14 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000080)='!cpuset\'$-\x00', 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={r4, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000180)=0x84) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_POLL(r2, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x2, {0x33}}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 21:05:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000040)={0x1, {}, 0xe4a, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r2, &(0x7f0000000080)={0x52, 0x7d, 0x2, {0x0, 0x4b, 0x2, 0xffffffff, {0x20, 0x1, 0x2}, 0x92000000, 0x800, 0x3, 0xffffffffffffff80, 0x0, "", 0xc, '/dev/autofs\x00', 0xc, '/dev/autofs\x00'}}, 0x52) [ 1141.574328] serio: Serial port pts2 21:05:14 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x13, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:14 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x7, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x20000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000012) 21:05:14 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000240)={0x17, 0xd6, &(0x7f0000000100)="132dcc381d7ee9424b6f1c9341cca8629444c449cc3411c64b3c7b81936e4f0e786ee1ec1ba68cd49a0600dcd6b8f8abc6940bb669c9d3efa688b13b4b818ac4f3189b6cdd3d8ace2470562aa8f9685e1c79fc293532e80b04580e858168cc2d6847214ae497c26c4fb8caaa51cc20ef05e0f897e3e35af1098c323da35d241aa5827c6653aad2266c2f4a46a679158fae8d217db51799793ceaab4a225922c4134439393fc0a864a1d3e78a32864df7592e3d689622e1a3bcd198ab10429c575848360e0e711c5d3efd4094c44308e7551cfc65363d"}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r2 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r2, &(0x7f0000000000), 0x800) 21:05:14 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x3, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1141.772498] serio: Serial port pts0 21:05:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$input_event(r2, &(0x7f0000000040)={{0x77359400}, 0x0, 0x200, 0x4}, 0x18) 21:05:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x1000, 0x86, &(0x7f0000000240)="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", &(0x7f0000000000)=""/134, 0x2}, 0x28) 21:05:14 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x1800000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:14 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x46) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:14 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1000000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") close(r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x800) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000040)=""/81) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:15 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x900000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:15 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x3000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1142.555113] serio: Serial port pts2 21:05:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x10000) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:15 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) ioctl$FICLONE(r0, 0x40049409, r0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:15 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xa000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89bf, &(0x7f0000000040)={'dummy0\x00', @ifru_addrs=@can={0x1d, 0x0}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@mcast1, 0x5c, r3}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 21:05:15 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xb000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x100000000, 0x90001) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x101080, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x12000, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x10000, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x40, 0x0) r7 = syz_open_dev$adsp(&(0x7f00000009c0)='/dev/adsp#\x00', 0x9, 0x1) r8 = syz_open_dev$usb(&(0x7f0000000a00)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x8082) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/rfkill\x00', 0x200000, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/zero\x00', 0x48800, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000b80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x70, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xee4}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x814) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/124) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:15 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x80000101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:15 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xc, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:15 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xd00000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x200200) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0xd, 0x80004, 0x232e) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000000)={0x200, 0xd21, 0x205, 0x10000, 0xa32, 0x1, 0x3, 0x6, 0x0}, &(0x7f0000000040)=0x20) poll(&(0x7f0000000240)=[{r2, 0x1000}, {r1, 0xa211}, {r3, 0x5088}, {r1, 0x120}, {r3, 0x2}], 0x5, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={r4, 0xaf7, 0x10}, &(0x7f00000000c0)=0xc) getsockopt$packet_buf(r3, 0x107, 0x16, &(0x7f00000001c0)=""/108, &(0x7f0000000140)=0x6c) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0xfffffffffffffffd, 0x0, 0x0, {}, {0x0, 0x2}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:15 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x5, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x951c, 0x2043) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r4 = getpid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) r6 = fcntl$getown(r2, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001540)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000001640)=0xe8) setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000001840)=0x751, 0x4) r8 = getgid() sendmsg$netlink(r2, &(0x7f00000016c0)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001500)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0c003600040000c8000000000058010800080068", @ANYRES32=r4, @ANYBLOB="08008e00", @ANYRES32=r2, @ANYBLOB="44a7bac3b7280fc3afd1db13416e6a4a391ce9e16f1e86855e6a77d801118cc2cbb1fd36c3d97362d70f0b243d2fe54f794bac7107b577a4080cb5084c5a4f7aabcdd063918130078735b9a34fee494f467d9414249f5b06da631d2ab41b056c9e82e4457a5ac134b9bb7511f41ea5fabc4caa3f3702130a0420b658f952301cee43e5b6530f08f746f01f33f5af9e24ee1a4a08038e3b0aa9c348a115f1d32e2988b561457ca860c3231d280d94b748f33b5173455760dd7533b48725478bf3a3ad5c67875951964a1a6e1b3f8208001d00", @ANYRES32=r5, @ANYBLOB="9d6f8804cf42dfe652558f3df7666e6243321e137b666826f4280cd4a127a12e2c04294e62506b730ac73e798ccea4f1d505eb8997ff2923cf2b1697d97e519417bb235fef0582a2195d479adc5b675dbf786540c9456814009000ff010000000000000000000000000001000000"], 0x1184}], 0x1, &(0x7f0000001680)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x20, 0x4000000}, 0x20000040) r9 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000001740)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, r10, 0xc00, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) tkill(r9, 0x1000000000016) 21:05:16 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x6000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:16 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) fcntl$getflags(r0, 0x40b) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r2 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r2, &(0x7f0000000000), 0x800) 21:05:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1043, 0x10001}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xf4, 0x101400) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c6a582a9325edd878bd7000f9dbdf250c00000508008f00", @ANYRES32=r2], 0x1c}}, 0x4000000) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x80, 0xef) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000180)=0x1d) tkill(r4, 0x1000000000016) 21:05:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) 21:05:16 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x300000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:16 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x1200, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:16 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x13000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {}, {}, @cond}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)="2f70726f632f7379732f6e65742f697076342f76732f616dc1f0c73bfea2a968d97c37c326f9", 0x2, 0x0) setsockopt$inet_dccp_int(r2, 0x21, 0xb, &(0x7f0000000080)=0x1, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x200080) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0xfffffd17) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="6ac6f3f0711d3796d48dfe3cd509c6a93fe61ff6f496e3caf32ee219bc6c4294038c767007876a67d1c568d3150e6f9351d905294f6d746ac076e3235e3d3184f23c89ac2454feddb6196416154a7df2dd679ca700719bec6428b855e8c383a81d57a4e8c308fa684cf35ac58d7143c3596db8f53f077606dcb4b41ae1567c0889c8bdc82a1ae51b105b1cf81df6aabdacdbe463a55c5aa3f6e2e25f0be49563abcb", 0xa2, 0xfffffffffffffffa) r5 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r4, &(0x7f0000000380)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x0}, r5) renameat2(r3, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x2) userfaultfd(0x80000) [ 1143.710162] serio: Serial port pts0 21:05:16 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0400db8256090ee892adcde7343f8b35a46c369279dfd17e386d5cbd48bc9c2385a3f850a645351192c34dd3f1e1ab669a919f12f415a0d2752f3884292bea941a877c20c03879ad1f303a97164f0beca5c56957d08a53d987d169afad117c2ecba6b73bd96598e9afe407454e2aeecc129620d4700a"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000020}) r1 = syz_open_pts(r0, 0x4000000000402c80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:16 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xa00, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1143.836232] serio: Serial port pts2 21:05:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0xf7a6d0dbdcf46e42, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x3d) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000280)={0x9, 0x2, 0x1}) 21:05:17 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x12, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:17 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x4, 0x70a5, 0x7, 0x2, 0x0, 0x1, 0x20300, 0x4, 0x5, 0x1, 0x4, 0x3428, 0xff, 0x8, 0x1000, 0x0, 0x7f, 0x3, 0x100000000, 0x4, 0x0, 0x8001, 0x1ff, 0x1cf9, 0x1, 0xa7c, 0x100000001, 0x37, 0x6, 0x6, 0x0, 0x0, 0xdda, 0x2, 0x8, 0x7fffffff, 0x0, 0xffff, 0x0, @perf_config_ext={0x5d41, 0xb55}, 0x1000, 0x5, 0x2, 0x0, 0xb355, 0x6, 0x7f}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x2) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() ptrace$setsig(0x4203, r2, 0x70f2, &(0x7f0000000000)={0x10, 0x4, 0x0, 0x9909}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000040)=0x3ff) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:17 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x1400, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:17 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1300000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:17 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) r3 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000100)={r0, r1, 0x6d0a}) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) [ 1144.061032] serio: Serial port pts0 21:05:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) 21:05:17 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xf, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1144.118408] serio: Serial port pts2 21:05:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2b) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000040)={0x3, 0x7ff}) r3 = gettid() r4 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="eb5783c630b8173585b2fc31441a524ba314c0d0f89930f14d3b50241972cfdf27d6", 0x22, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r4, 0x9) ioctl$TIOCSTI(r1, 0x5412, 0x7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1f) 21:05:17 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x9, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000240)="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") readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:17 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="002d0f8d3360544653d34abad49e60efcd000000ee20"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:17 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x600000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:17 executing program 5: write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x2000002, 0x120013, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1, 0x6, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000080)="4c73b9cecfc82c034f43e03526e320b9bc4f13c314939c2b37c2ca89e7c6486c7334daf328045e91d1c9c31f386f4859a23af50e58176af7e1154669c6a30ff01e2a6cc50494fcf3e947f0a3e97dbe9c5453b8ae82a2cee50eb1a169b8d9d8d4087cc8fdf8d840d7f49f7e"}, 0x10) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x1980, {0xf6, 0x1, 0x5}, 0x2, r3, r4, 0xffff, 0xffffffff00000000, 0x81, 0x8001, 0x7, 0x6e27, 0x0, 0x9, 0xb8, 0x80, 0x8000, 0x800, 0x3aa, 0x3, 0xffffffffffffff7f}}, 0xa0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x6}, {}, @cond}) clone(0x1240000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:17 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xa00000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1144.362011] serio: Serial port pts0 21:05:17 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x0) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0x0, 0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0xee01]) write$P9_RGETATTR(r0, &(0x7f0000000240)={0xa0, 0x19, 0x1, {0x4, {0x1, 0x2, 0x3}, 0x111, r3, r4, 0x9, 0x100000001, 0x4, 0xd56, 0x0, 0x6, 0x6, 0xfff, 0x8, 0x93d, 0x0, 0x9, 0x7f, 0x800, 0x6}}, 0xa0) sendfile(r0, r1, &(0x7f0000000000), 0x800) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1144.422342] serio: Serial port pts0 21:05:17 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x700000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x7}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x9}}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) tkill(r2, 0x1000000000016) 21:05:17 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xe00000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:17 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x1300, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x400000000000002) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = userfaultfd(0x800) syz_open_dev$rtc(&(0x7f0000003cc0)='/dev/rtc#\x00', 0x2, 0x8000) r3 = gettid() r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000005d80)='/dev/snapshot\x00', 0x400, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000005f40)=""/83, &(0x7f0000005fc0)=0x53) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000005dc0)={0x0, 0x4, 0x30, 0xffffffffffffff00, 0x52ec8cb0}, &(0x7f0000005e00)=0x18) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000005e40)={r5, @in={{0x2, 0x4e24, @empty}}}, 0x84) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000006000)={{&(0x7f0000ff2000/0xc000)=nil, 0xc000}, 0x2}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000005d00)='trusted.overlay.nlink\x00', &(0x7f0000005d40)={'U-', 0x9}, 0x28, 0x2) fadvise64(r2, 0x1, 0x0, 0x7) recvmmsg(r6, &(0x7f0000005b40)=[{{&(0x7f0000000180)=@nfc_llcp, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/158, 0x9e}], 0x7, &(0x7f0000001640)=""/203, 0xcb, 0xcb3a}, 0x7ff}, {{&(0x7f0000001740)=@ethernet={0x0, @local}, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000017c0)=""/105, 0x69}, {&(0x7f0000001840)=""/77, 0x4d}, {&(0x7f00000018c0)=""/68, 0x44}, {&(0x7f0000001940)=""/247, 0xf7}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/125, 0x7d}, {&(0x7f0000002ac0)=""/246, 0xf6}], 0x7, &(0x7f0000002c40)=""/4096, 0x1000, 0x8}, 0x80}, {{&(0x7f0000003c40)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003cc0)}, {&(0x7f0000003d00)=""/249, 0xf9}, {&(0x7f0000003e00)=""/49, 0x31}, {&(0x7f0000003e40)=""/130, 0x82}], 0x4, &(0x7f0000003f40)=""/96, 0x60, 0x200}, 0x2}, {{&(0x7f0000003fc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000004440)=[{&(0x7f0000004040)=""/86, 0x56}, {&(0x7f00000040c0)=""/243, 0xf3}, {&(0x7f00000041c0)=""/89, 0x59}, {&(0x7f0000004240)=""/224, 0xe0}, {&(0x7f0000004340)=""/252, 0xfc}], 0x5, &(0x7f00000044c0)=""/27, 0x1b}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000004500)=""/251, 0xfb}], 0x1, &(0x7f0000004640)=""/16, 0x10, 0x40}, 0x10001}, {{&(0x7f0000004680)=@rc, 0x80, &(0x7f0000005a00)=[{&(0x7f0000004700)=""/82, 0x52}, {&(0x7f0000004780)=""/30, 0x1e}, {&(0x7f00000047c0)=""/114, 0x72}, {&(0x7f0000004840)=""/156, 0x9c}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/183, 0xb7}, {&(0x7f00000059c0)=""/25, 0x19}], 0x7, &(0x7f0000005a80)=""/170, 0xaa, 0x2}, 0x2}], 0x6, 0x12002, &(0x7f0000005cc0)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000005f00)={r5, 0x8, 0x2, 0x100000000, 0xff, 0xffff}, 0x14) socketpair(0x5, 0x80f, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_int(r7, 0x29, 0x3, &(0x7f0000000040)=0x8, 0x4) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000006040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {r8, r9+30000000}}, 0x0) tkill(r3, 0x1000000000016) 21:05:17 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x5) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="32f259b560f1809aa75b68b7e1cca7000000000004abe8b62c042f72890145da3816b6654f38c56ecc7355ac7d4f98cce57932feb413b20d1acb72420768b323dd28e29b4c27cb338a33245555d32b11a781bb075e48ffb838592bd22664667f881e5856b002c0a73d3fa4b4f2d599c04dcec72ecb723e42fb59b315006fc0e40d2b4ce55f4903d40225e20ca2c6d85eb2cea8e03eebe670205a41fc2c3a0913c24cf2755dde91c30cab53a944c2b2d4"], 0x6) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x804a802}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000001ad929f77204a7aec660e4538abed1b1c9f101b0008000000000000002feb721cf8a7f57909415f8f3b33d97ae37ead4f20fa089dc3bdd0d96c9d24fac697d48f394ab8c0a6976c48becca0b0", @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf250300000004000500"], 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x1) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000003c0)={"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"}) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0x364) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000100)={0x0, 0x7, [], @raw_data=[0x7, 0x9, 0x9, 0x0, 0x1ff, 0x1, 0xfffffffffffffffd, 0x8, 0x3ff, 0xfffffffffffffffc, 0xfc7, 0x9, 0x1000000000, 0x100, 0x0, 0x40, 0x18000, 0x0, 0x5, 0x5333, 0x6, 0x9, 0x3, 0x4, 0xc6, 0x5, 0x66, 0x0, 0x2, 0x10001, 0x400]}) sendfile(r0, r0, &(0x7f0000000080), 0x7ff) 21:05:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x51, 0x0, 0x0, {}, {}, @period={0x0, 0x4, 0x1, 0x9, 0x2, {0x100000001, 0x100000000, 0x5, 0x6}, 0x1, &(0x7f0000000040)=[0x6bcf]}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:17 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x400000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:17 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xe00, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:17 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x10b) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) timer_create(0x6, &(0x7f0000000080)={0x0, 0x10, 0x5, @thr={&(0x7f0000000000)="50efc884dc82837ed4aaeb2543d9fba0ff8aeec0e2ca14bdd3b14ec201ac84ea6b9aff0fcaf43b6b0353df70d55409ca4abab1d7cceffedf91d6560c16927c20", &(0x7f0000000040)="920fcb63032528ac34d0fc1e07830cbaf8904f941fbde3ef113b042384e7745b1edd5a3c"}}, &(0x7f00000000c0)=0x0) timer_getoverrun(r3) r4 = dup2(r1, r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'sit0\x00', 0x4}, 0x18) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:17 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x11000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:17 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x5, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x200000000000, 0x0, 0x0, 0x200}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() r3 = accept$packet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x14) recvfrom(r3, &(0x7f0000000240)=""/160, 0xa0, 0x40000021, &(0x7f0000000180)=@can, 0x80) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:20 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0400560980000000000000001b13281ebc2b204513409c095cfb0d6afdbfe23ebaf98faf443a6fc50a0000"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x3, 0x3ff, 0x0, 0x7f, 0x0, 0x0, 0x80000, 0x1, 0x4, 0x3, 0x4, 0x5, 0xfffffffffffffffb, 0x3, 0x7ff, 0xbf17, 0x7fffffff, 0x1, 0x8001, 0x8, 0x200, 0x2, 0x2a6b3e00, 0x4, 0xfffffffeffffffff, 0xfff, 0x6, 0x4, 0x741a, 0x8, 0x7f, 0x4, 0x5, 0x4, 0x3, 0x6, 0x0, 0x200, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x30244, 0x755, 0x1, 0x0, 0x6, 0x5b, 0x80}, 0x0, 0xb, r0, 0x1) kexec_load(0x4, 0x6, &(0x7f0000000640)=[{&(0x7f00000002c0)="f19f88dd04a0fb008c016135d4756a3b4d00ffb30f6fac0f3104c6eefa08fcefcc31d50b8da62c81a85dc3c156182ce66c04bd802cb8d53793e3", 0x3a, 0x7fff, 0x9}, {&(0x7f00000003c0)="71eb6bbbdabe2fc75d498550cf415d5b351129c382d7cc9326ca462bbd58532d22d937bfb032f0fd77b2d89992f0ae0191173c34951b3d7fad42c0bb44137766db1902a944d17adfcf3507a853e89922337fa2896a651506764d4636806969a0c97e68abaf62943ce78b21bea8a5c1eedafdafa655a1ef07c50b4a6eec8fa0c15abd2a4877b2caae3d8840bcfda283ac0f0be44d532432b206f90738319ad3d56108be9a25a945e699be", 0xaa, 0x2000000000, 0xfff}, {&(0x7f0000000300)="21bb110d484989095258318cc4bfce03a9b9908b8ba26fae9393850b56e3a24d82b96a72d4d9751ef4cf7f6c7f80119c7c751174fcfa0e016d6f4b7efc1d44b186d721", 0x43, 0x7, 0xfffffffffffffffb}, {&(0x7f0000000480)="2df9c2686d8dc3c6028e5e8d5c8d61ed46a5cce099afb685ef2d24d70295101e60a226c2a6510977532878b3055a615094c4a207ca832e5a8a12a7e9641331bed839b3fe30626921b5f5a1adbb3551b9", 0x50, 0x8, 0x200}, {&(0x7f0000000500)="839e793d5cd2f39c926f", 0xa, 0x4, 0x5}, {&(0x7f0000000540)="62e2803619e0831918c2a275bff693a7d57a67a51b98c9fb64380541a79318c0e162bf4b46c804dfb5a3cbec51c22b9dc82f135d71c968e9f52c60892277243118514ba040a0a20fa77d941413d2eaa10cecbdf673eaa6dbdc4d4887e33d2583c88443367780e415196fa276c4c1965d95981228f1fd2ea5d9dbbbf61d3266216966f3e7ef8c58e2fbfb1297e9b21915632e247d72b006da2ab4983305af42cc819f6c0d88c45203ef9461d2f89c3b47a580ef085cc5b7f4f313d20b91ffeb9178324f4c7e8b20b0eb3a0a1e8648bc99822234825865ed6eb9ba6fb618ff82cdca526cbe0dda0d21b07c6beafdae0390", 0xf0, 0x0, 0x100}], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x80, @mcast1, 0x4}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r3}}, 0x18) sendfile(r0, r1, &(0x7f0000000000), 0x800) socket$inet_udp(0x2, 0x2, 0x0) 21:05:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @cond}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40400, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffff36) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)="909ddb97de55655b") ioctl$VT_DISALLOCATE(r1, 0x5608) tkill(r2, 0x1000000000016) 21:05:20 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x18, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:20 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x12000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:20 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) [ 1147.708002] serio: Serial port pts0 21:05:20 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getsockname$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:20 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x1300000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:20 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x7, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1147.791309] serio: Serial port pts0 21:05:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) prctl$PR_GET_SECUREBITS(0x1b) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8, 0x100) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000040)) tkill(r2, 0x1000000000016) 21:05:20 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'tunl0\x00', 0x10000}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x10001, r2}) 21:05:20 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x18, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:21 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x11000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {0x800}, {}, @cond}) r3 = accept4(r1, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) accept$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x80001, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:21 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x900, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:21 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x500, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0400560d0002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSBRKP(r0, 0x5425, 0x3) sendfile(r0, r1, &(0x7f0000000000), 0x800) [ 1148.067378] serio: Serial port pts0 [ 1148.131772] serio: Serial port pts0 21:05:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x3f) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000240)=""/198, &(0x7f0000000000)=0xc6) tkill(r2, 0x1000000000016) 21:05:21 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x900, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:21 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x500000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x40000, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\x00', 0x5) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f0000000080)={0xfffffffffffffe15, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x3f) 21:05:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) 21:05:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0), 0x0) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:21 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x1800, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1148.337462] serio: Serial port pts0 21:05:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) io_setup(0x6, &(0x7f0000000080)=0x0) io_destroy(r3) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000040)) 21:05:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffe84, 0x77, 0x0, 0x3}, 0xb) open(&(0x7f0000000140)='./file0\x00', 0x8080, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) connect$unix(r0, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r1, 0x27, '|M2', "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"}}, 0x110) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x800) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000002c0)={0xa, 0x8, 0x9, 0xfffffffffffffff9}, 0xa) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) 21:05:21 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x500, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1148.397811] serio: Serial port pts0 21:05:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x3, 0x70, 0x1, 0x8, 0x6, 0x5, 0x0, 0xec, 0x100, 0x8, 0xfff, 0x3, 0x9, 0x0, 0x9, 0x80000000, 0x260, 0x100000001, 0x200, 0xfff, 0x7fffffff, 0x0, 0x6, 0x16c9d05d, 0x800, 0x5, 0x5, 0x6, 0x8, 0xfffffffffffffff7, 0xffffffffffff7fff, 0x6, 0x5, 0x3, 0x7dd, 0x7a5b, 0x400, 0x4, 0x0, 0x18, 0x4, @perf_bp={&(0x7f0000000040)}, 0xa, 0xb086, 0x2, 0xf, 0x7ff, 0x5, 0x1000}) clone(0x18000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:21 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x11, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) r2 = fcntl$getown(r1, 0x9) wait4(r2, 0x0, 0x0, &(0x7f0000000000)) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) fcntl$getown(r0, 0x9) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x4200, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000001c0)={0x6, 0x7}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 21:05:21 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xe, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000200)='em1\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="040056090002"], 0x6) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x0, 0x3}, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x800) 21:05:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 21:05:21 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x1000000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1148.640888] serio: Serial port pts0 21:05:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000000)) 21:05:21 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xb00000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1148.706563] serio: Serial port pts2 21:05:21 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x1200000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x100) openat$cgroup_subtree(r2, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 21:05:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x800, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:21 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 21:05:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x820c0, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000040)={0xb3f, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xb00, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:22 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1800000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1148.932090] serio: Serial port pts0 21:05:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x301400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x1e}, @loopback, @dev={0xfe, 0x80, [], 0xe}, 0x200, 0x9, 0x8a, 0x0, 0x6, 0x80008d, r3}) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 21:05:22 executing program 3: r0 = perf_event_open(&(0x7f0000005fdd)={0x2, 0x70, 0x199, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x4000000010051, r0, 0x0) perf_event_open(&(0x7f000000efbe)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1149.000085] serio: Serial port pts0 21:05:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000080)={0x1, 0x0, 0x2d, 0x0, 0x9}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 21:05:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xb, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:22 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1400000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:22 executing program 3: msgget$private(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, 0xfffffffffffffffe) 21:05:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x80000000, 0x5, 0x7, 0xd4, 0x0, 0x7ff, 0x4002, 0x3, 0x1, 0x3, 0xad, 0x200, 0x1, 0x0, 0x2, 0xfff, 0x10000, 0x2f, 0x4dd, 0x59e, 0x6578, 0x2, 0x3, 0x9, 0x6, 0x0, 0x2, 0x7, 0x7ff, 0x0, 0x4, 0x0, 0x6, 0x886f, 0xffffffffffffff81, 0x4, 0x0, 0xc0ad, 0x3, @perf_bp={&(0x7f0000000000), 0x2}, 0x100c0, 0x1f, 0x1f, 0xb, 0x1, 0x0, 0x7fff}, r1, 0x1, r2, 0x9) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x80000000, 0xffffffffffffffff, 0x7, 0x7fff, 0xfa}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 21:05:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000)=0x3f, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {}, {}, @cond}) [ 1149.206065] serio: Serial port pts0 21:05:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xa, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:22 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x2000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) 21:05:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x41) getsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(twofish)\x00'}, 0x58) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 21:05:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xa00000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000016) 21:05:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20842) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0xacf, 0x1, 0x9, 0x1000, 0x0, 0x81, 0x4000, 0x8, 0x1000, 0x42, 0x2, 0xff, 0x81, 0x5, 0xfffffffffffffff8, 0x5, 0x5d4, 0x4, 0x1, 0xffff, 0x20, 0x80000001, 0x2, 0x5, 0x5, 0x6, 0xffffffff855ac106, 0x40, 0x7fff, 0x8000, 0xf8f0, 0x1, 0x8000000000, 0x16fd51c9, 0x8, 0x101, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0xfff}, 0x0, 0x8, 0x2, 0x9, 0xb1, 0x9, 0x7f}, r0, 0x9, r2, 0x8) r3 = dup3(r1, r1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400201) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$security_ima(r1, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000300)=@v2={0x0, 0x1, 0xe, 0xff, 0x1000, "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"}, 0x100a, 0x3) 21:05:22 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xe000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1149.490496] serio: Serial port pts0 21:05:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x3f00000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1149.554839] serio: Serial port pts0 21:05:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(twofish)\x00'}, 0x58) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 21:05:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xb00000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:22 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x7000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x82200) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x60c002, 0x0) write$P9_ROPEN(r3, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x1000, 0x3}, 0x5}}, 0xffffffffffffff52) tkill(r2, 0x1000000000016) 21:05:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(twofish)\x00'}, 0x58) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 21:05:22 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x14, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x8, 0x202080) connect$llc(r1, &(0x7f0000000140)={0x1a, 0x106, 0x7, 0x1, 0x279, 0x80}, 0x10) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x400000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x80}, 0x8) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x3, 0x4) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82001}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x1a}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xfb}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x564}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x39}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8d}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xac}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0xa8846a7b540fc184}, 0x4000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000001c0)) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5) clone(0x8000000000040000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1149.792192] serio: Serial port pts0 21:05:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x700, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1149.854765] serio: Serial port pts0 21:05:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20100, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x7fff, 0x30, 0x2, 0x8001}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3, 0xca}, &(0x7f00000001c0)=0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) utime(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x7, 0x1f}) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$cgroup_pid(r2, &(0x7f0000000240)=r4, 0x12) tkill(r4, 0x1000000000016) 21:05:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(twofish)\x00'}, 0x58) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 21:05:25 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xc, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:25 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xc00000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001640)='/dev/ptmx\x00', 0x400004, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0xa0000) sendmsg$rds(r1, &(0x7f00000015c0)={&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000240)=""/159, 0x9f}, {&(0x7f0000000080)=""/13, 0xd}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000001300)=""/181, 0xb5}, {&(0x7f00000013c0)=""/103, 0x67}, {&(0x7f0000001440)=""/135, 0x87}], 0x7, &(0x7f0000001580)=[@rdma_dest={0x18, 0x114, 0x2, {0x6, 0x4}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x3}], 0x30, 0x4000}, 0x20000000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 21:05:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x100, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0xfe) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x210000) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000040)={0x0, "4b50b3c87d13ee80af0c4213f879bb0049f145cff7c9898e148741b2e6df3394", 0x2, 0x1}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000200)={0xdf01, 0x8001, 0xcf8, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0)={r4, 0x2}, 0x8) 21:05:25 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xd000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:25 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xe00000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(twofish)\x00'}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) [ 1152.573379] syz-executor5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 21:05:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x200) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1152.645155] syz-executor5 cpuset=syz5 mems_allowed=0 [ 1152.677667] CPU: 1 PID: 28256 Comm: syz-executor5 Not tainted 4.20.0-rc5+ #364 [ 1152.685054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1152.685065] Call Trace: [ 1152.685092] dump_stack+0x244/0x39d [ 1152.685121] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1152.705917] dump_header+0x27b/0xf72 [ 1152.709650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1152.715221] ? check_preemption_disabled+0x48/0x280 [ 1152.720259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1152.725844] ? pagefault_out_of_memory+0x197/0x197 [ 1152.725862] ? debug_smp_processor_id+0x1c/0x20 [ 1152.725897] ? perf_trace_lock+0x14d/0x7a0 [ 1152.739724] ? debug_smp_processor_id+0x1c/0x20 [ 1152.744416] ? perf_trace_lock_acquire+0x15b/0x800 [ 1152.744441] ? lock_is_held_type+0x210/0x210 [ 1152.744461] ? perf_trace_lock+0x7a0/0x7a0 [ 1152.744483] ? debug_smp_processor_id+0x1c/0x20 [ 1152.753806] ? perf_trace_lock+0x14d/0x7a0 [ 1152.753823] ? zap_class+0x640/0x640 [ 1152.753845] ? print_usage_bug+0xc0/0xc0 [ 1152.774790] ? lock_is_held_type+0x210/0x210 [ 1152.779250] ? perf_trace_lock+0x7a0/0x7a0 [ 1152.783540] ? find_held_lock+0x36/0x1c0 [ 1152.787630] ? mark_held_locks+0xc7/0x130 [ 1152.791820] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1152.796937] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1152.802066] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1152.806664] ? trace_hardirqs_on+0xbd/0x310 [ 1152.806683] ? kasan_check_read+0x11/0x20 [ 1152.806714] ? ___ratelimit+0x3b4/0x672 [ 1152.806738] ? trace_hardirqs_off_caller+0x310/0x310 [ 1152.815243] ? trace_hardirqs_on+0x310/0x310 [ 1152.815262] ? lock_downgrade+0x900/0x900 [ 1152.815291] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1152.815309] ? ___ratelimit+0x3b9/0x672 [ 1152.842048] ? idr_get_free+0xf70/0xf70 [ 1152.846105] ? _raw_spin_unlock_irq+0x27/0x80 [ 1152.850610] ? _raw_spin_unlock_irq+0x27/0x80 [ 1152.855142] oom_kill_process.cold.27+0x10/0x903 [ 1152.859913] ? _raw_spin_unlock_irq+0x27/0x80 [ 1152.864455] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1152.869056] ? oom_evaluate_task+0x540/0x540 [ 1152.873478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1152.879037] ? cgroup_procs_next+0x70/0x70 [ 1152.883290] ? _raw_spin_unlock_irq+0x60/0x80 [ 1152.887847] ? oom_badness+0xaa0/0xaa0 [ 1152.891765] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1152.896541] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1152.902109] ? mem_cgroup_iter_break+0x30/0x30 [ 1152.906726] ? cgroup_file_notify+0x226/0x2f0 [ 1152.911248] out_of_memory+0xa84/0x1430 [ 1152.915247] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1152.919853] ? kasan_check_read+0x11/0x20 [ 1152.924021] ? oom_killer_disable+0x3a0/0x3a0 [ 1152.928555] mem_cgroup_out_of_memory+0x15e/0x210 [ 1152.933415] ? memory_oom_group_write+0x160/0x160 [ 1152.938267] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 1152.943145] ? page_counter_try_charge+0x1c1/0x220 [ 1152.948120] try_charge+0xda9/0x1700 [ 1152.951877] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 1152.956592] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1152.961539] ? kasan_check_read+0x11/0x20 [ 1152.965700] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1152.970992] ? rcu_softirq_qs+0x20/0x20 [ 1152.975021] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 1152.980654] ? __kernel_text_address+0xd/0x40 [ 1152.985172] ? lock_page_memcg+0x350/0x350 [ 1152.989424] ? lock_acquire+0x1ed/0x520 [ 1152.993413] ? mem_cgroup_oom_control_write+0x100/0x100 [ 1152.998794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1152.998814] ? check_preemption_disabled+0x48/0x280 [ 1152.998843] memcg_kmem_charge_memcg+0x7c/0x120 [ 1152.998859] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1152.998878] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1153.009489] memcg_kmem_charge+0x149/0x350 [ 1153.009514] __alloc_pages_nodemask+0x75e/0xea0 [ 1153.009530] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1153.009545] ? lock_downgrade+0x900/0x900 [ 1153.009566] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1153.009581] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.009599] ? check_preemption_disabled+0x48/0x280 [ 1153.009625] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1153.063556] ? rcu_pm_notify+0xc0/0xc0 [ 1153.067515] ? copy_process+0x2026/0x87a0 [ 1153.071684] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1153.076733] ? kmem_cache_alloc_node+0x349/0x730 [ 1153.081535] copy_process+0xa09/0x87a0 [ 1153.085455] ? find_held_lock+0x36/0x1c0 [ 1153.089571] ? finish_task_switch+0x1f4/0x910 [ 1153.094082] ? _raw_spin_unlock_irq+0x27/0x80 [ 1153.098619] ? _raw_spin_unlock_irq+0x27/0x80 [ 1153.103163] ? __cleanup_sighand+0x70/0x70 [ 1153.107412] ? compat_start_thread+0x80/0x80 [ 1153.111859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.117416] ? _raw_spin_unlock_irq+0x60/0x80 [ 1153.121941] ? finish_task_switch+0x1f4/0x910 [ 1153.126450] ? finish_task_switch+0x1b4/0x910 [ 1153.130970] ? __switch_to_asm+0x34/0x70 [ 1153.135050] ? preempt_notifier_register+0x200/0x200 [ 1153.140165] ? __switch_to_asm+0x34/0x70 [ 1153.144262] ? __switch_to_asm+0x34/0x70 [ 1153.148339] ? __switch_to_asm+0x40/0x70 [ 1153.152410] ? __switch_to_asm+0x34/0x70 [ 1153.156474] ? __switch_to_asm+0x40/0x70 [ 1153.160546] ? __switch_to_asm+0x34/0x70 [ 1153.164612] ? __switch_to_asm+0x40/0x70 [ 1153.168689] ? __switch_to_asm+0x34/0x70 [ 1153.172785] ? __switch_to_asm+0x34/0x70 [ 1153.176854] ? __switch_to_asm+0x40/0x70 [ 1153.176867] ? __switch_to_asm+0x34/0x70 [ 1153.176878] ? __switch_to_asm+0x40/0x70 [ 1153.176894] ? __switch_to_asm+0x34/0x70 [ 1153.185012] ? __switch_to_asm+0x40/0x70 [ 1153.185034] ? __schedule+0x8d7/0x21d0 [ 1153.185052] ? perf_trace_lock+0x14d/0x7a0 [ 1153.205353] ? perf_trace_lock+0x14d/0x7a0 [ 1153.209662] ? __sched_text_start+0x8/0x8 [ 1153.213848] ? zap_class+0x640/0x640 [ 1153.217573] ? plist_check_list+0xa0/0xa0 [ 1153.221735] ? zap_class+0x640/0x640 [ 1153.225525] ? perf_trace_sched_process_exec+0x860/0x860 [ 1153.230990] ? do_raw_spin_unlock+0xa7/0x330 [ 1153.235439] ? do_raw_spin_trylock+0x270/0x270 [ 1153.240039] ? lock_acquire+0x1ed/0x520 [ 1153.244073] ? __might_sleep+0x95/0x190 [ 1153.248063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.253622] ? futex_wait_queue_me+0x55d/0x840 [ 1153.258232] ? refill_pi_state_cache.part.8+0x310/0x310 [ 1153.263611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.269204] ? get_futex_value_locked+0xcb/0xf0 [ 1153.273930] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1153.278963] ? futex_wait_setup+0x266/0x3e0 [ 1153.283416] ? futex_wake+0x760/0x760 [ 1153.287230] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1153.292438] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 1153.297550] ? futex_wait+0x5ec/0xa50 [ 1153.301372] ? print_usage_bug+0xc0/0xc0 [ 1153.305462] ? print_usage_bug+0xc0/0xc0 [ 1153.309533] ? futex_wait_setup+0x3e0/0x3e0 [ 1153.313868] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1153.319074] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 1153.324198] ? futex_wake+0x304/0x760 21:05:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x21, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240)="c0cd033ffd42000caca96f35c396ab424eb7370f5b6aa8488b05f97c39ff1a3cc21bee5f12a22b43f409bbc68803961a7090b23140e9fb1774e7d2ebeeacd69e75a36617198917c2f8acfc74cd7721cd6e841233bda702a63d90d282e424f3dffd3d72d44fdb360f0f56b1ac410216a654839d806f84d657532a2ecf31af89026a7f64485c5d760cfbc2114a31ff516b417884caa4cc5bd7bc972945", &(0x7f0000000040)="ef7f60a92f158302848bec216e94df9a2ff8221573dc420625054c525d56b50e72b95d4c7f8e276c8755e122bb12805ae20c788d87cacef30823f999fb7ca6bad5b4cf2638d4"}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:26 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x400000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1153.328043] ? __lock_acquire+0x62f/0x4c20 [ 1153.332353] ? mark_held_locks+0x130/0x130 [ 1153.336596] ? do_futex+0x249/0x26d0 [ 1153.340340] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.345909] ? check_preemption_disabled+0x48/0x280 [ 1153.350939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.356492] ? check_preemption_disabled+0x48/0x280 [ 1153.361526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.367093] ? debug_smp_processor_id+0x1c/0x20 [ 1153.371824] ? perf_trace_lock+0x14d/0x7a0 [ 1153.376117] ? debug_smp_processor_id+0x1c/0x20 [ 1153.380798] ? perf_trace_lock_acquire+0x15b/0x800 [ 1153.385839] ? lock_is_held_type+0x210/0x210 [ 1153.390266] ? zap_class+0x640/0x640 [ 1153.394000] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1153.398957] ? zap_class+0x640/0x640 [ 1153.402685] ? wait_for_completion+0x8a0/0x8a0 [ 1153.407283] ? rcu_softirq_qs+0x20/0x20 [ 1153.411299] ? find_held_lock+0x36/0x1c0 [ 1153.415438] _do_fork+0x1cb/0x11d0 [ 1153.419004] ? fork_idle+0x1d0/0x1d0 [ 1153.422803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.428371] ? kasan_check_read+0x11/0x20 [ 1153.432527] ? _copy_to_user+0xc8/0x110 [ 1153.436519] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1153.442107] ? put_timespec64+0x10f/0x1b0 [ 1153.446272] ? nsecs_to_jiffies+0x30/0x30 [ 1153.450438] ? do_syscall_64+0x9a/0x820 [ 1153.454435] ? do_syscall_64+0x9a/0x820 [ 1153.458441] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1153.463037] ? trace_hardirqs_on+0xbd/0x310 [ 1153.467381] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.472926] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1153.478307] ? trace_hardirqs_off_caller+0x310/0x310 [ 1153.483455] __x64_sys_clone+0xbf/0x150 [ 1153.487455] do_syscall_64+0x1b9/0x820 [ 1153.491352] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1153.496727] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1153.501680] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1153.506535] ? trace_hardirqs_on_caller+0x310/0x310 [ 1153.511566] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1153.516628] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1153.521668] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1153.526531] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1153.531753] RIP: 0033:0x457569 [ 1153.534984] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1153.553893] RSP: 002b:00007f8650fc2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1153.561655] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 [ 1153.568936] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 21:05:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x8000, 0x200) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:26 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x1000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(twofish)\x00'}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) [ 1153.576213] RBP: 000000000072bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 1153.583492] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8650fc36d4 [ 1153.590787] R13: 00000000004bdaa6 R14: 00000000004ccc90 R15: 00000000ffffffff 21:05:26 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x300, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:26 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x7000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1153.638155] Task in /syz5 killed as a result of limit of /syz5 [ 1153.644818] memory: usage 307184kB, limit 307200kB, failcnt 44 [ 1153.652953] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1153.659945] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1153.672216] Memory cgroup stats for /syz5: cache:44KB rss:271660KB rss_huge:258048KB shmem:48KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:271688KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1153.708662] Memory cgroup out of memory: Kill process 8272 (syz-executor5) score 1106 or sacrifice child [ 1153.746794] Killed process 8272 (syz-executor5) total-vm:70472kB, anon-rss:2212kB, file-rss:33696kB, shmem-rss:0kB [ 1153.768151] oom_reaper: reaped process 8272 (syz-executor5), now anon-rss:0kB, file-rss:32864kB, shmem-rss:0kB 21:05:26 executing program 5: write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(twofish)\x00'}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 21:05:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xffffffffffffffff) r2 = dup(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x8, 0x3, 0xff, 0x8, 0x5, 0xffffffff00000000}, 0x20) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000100], [0xc1]}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x81d, 0x1, 0x1, 0x1, 0x20, 0x1, 0x7, 0x20, 0x0, 0x179, 0x80, 0x3}) r6 = gettid() ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x800, 0x4f, 0x207, 0x6, 0x401, 0x2, 0x1, 0x6, 0x6, 0x7fffffff, 0x6}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r6, 0x1000000000016) 21:05:26 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0xd00, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:26 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x600, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) 21:05:29 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x8000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:29 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x10, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(twofish)\x00'}, 0x58) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 21:05:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000240)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c40)={"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"}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x41, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000016) 21:05:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000080)={0x1, 0x8, 0xbf5, 0x4}) 21:05:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(twofish)\x00'}, 0x58) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 21:05:29 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x800000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:29 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0xf00000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1156.397533] serio: Serial port pts0 21:05:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) mmap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x28000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xb2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x3, {}, {0x1}, @cond}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:05:29 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/33) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x4, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() fcntl$setflags(r2, 0x2, 0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000000)={'syzkaller1\x00', 0xdb4c}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) write$UHID_CREATE2(r0, &(0x7f0000000240)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0xd7, 0x5a, 0x1, 0x7, 0x5, 0x1, "bc615d9133c0bd5734b32a00eea43967bffc4063165873cbe234e3c98a27530d1e4958dc514fba4e80a3d500495afbbc1f50c6c7232a0a140a058074cd0b32eb639dfc359936dd1a49a0be3c7709a9f029449bfd10ce9f6b5fd817e8c272659e13115aea097fc8127a1470f926ed5bb736364e221d7644b376e57d4c863f02be10a4747b11ea6d7fa2f763ba1391b813d24b33c4f8f6c795e70e7c6c945d52a64205f6cff1d5c8b29b17df1ba962b7c3e197f47aba4b32f2bc0d978201f1f8184f0fff7c312f245fd0b8e1dd0dfd54372104caa18a02b1"}, 0x1ef) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x30) 21:05:29 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x1400000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) gettid() r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0xaff, 0x0, 0x5}, {0x400003b1, 0x0, 0x3ff}]}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:05:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(twofish)\x00'}, 0x58) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 21:05:29 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x900000000000000, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:29 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x100000000000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 21:05:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 21:05:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000180)=0x2, 0x4) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000000)={0x2, 'IZ'}, 0x3) r4 = gettid() set_mempolicy(0x2, &(0x7f0000000040)=0x5, 0x6) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) [ 1156.636123] serio: Serial port pts0 21:05:29 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x700, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1156.702175] serio: Serial port pts0 [ 1156.740463] WARNING: CPU: 0 PID: 28356 at mm/mempolicy.c:1745 alloc_pages_vma+0x1bd/0x4a0 [ 1156.748829] Kernel panic - not syncing: panic_on_warn set ... [ 1156.754730] CPU: 0 PID: 28356 Comm: syz-executor2 Not tainted 4.20.0-rc5+ #364 [ 1156.762130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.771488] Call Trace: [ 1156.774106] dump_stack+0x244/0x39d [ 1156.777791] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1156.783029] panic+0x2ad/0x55c [ 1156.786237] ? add_taint.cold.5+0x16/0x16 [ 1156.790412] ? __warn.cold.8+0x5/0x45 [ 1156.794237] ? alloc_pages_vma+0x1bd/0x4a0 [ 1156.798492] __warn.cold.8+0x20/0x45 [ 1156.802222] ? rcu_softirq_qs+0x20/0x20 [ 1156.803784] kobject: 'loop3' (000000004afa3985): kobject_uevent_env [ 1156.806214] ? alloc_pages_vma+0x1bd/0x4a0 [ 1156.814145] kobject: 'loop3' (000000004afa3985): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1156.816908] report_bug+0x254/0x2d0 [ 1156.816935] do_error_trap+0x11b/0x200 [ 1156.816957] do_invalid_op+0x36/0x40 [ 1156.837596] ? alloc_pages_vma+0x1bd/0x4a0 [ 1156.841878] invalid_op+0x14/0x20 [ 1156.845360] RIP: 0010:alloc_pages_vma+0x1bd/0x4a0 [ 1156.850215] Code: 5f 5d c3 e8 35 2f bf ff 45 89 ec 31 ff 41 81 e4 00 00 04 00 44 89 e6 e8 31 30 bf ff 45 85 e4 0f 84 50 ff ff ff e8 13 2f bf ff <0f> 0b e9 44 ff ff ff e8 07 2f bf ff e8 22 5e ff ff 48 89 c3 e9 6b [ 1156.869128] RSP: 0018:ffff88817cd870b8 EFLAGS: 00010212 [ 1156.874173] kobject: 'loop4' (0000000005a59734): kobject_uevent_env [ 1156.874500] RAX: 0000000000040000 RBX: ffff8881da96f528 RCX: ffffc90009e06000 21:05:29 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(twofish)\x00'}, 0x58) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 21:05:29 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x4, 0x4, 0xa94, 0x0, 0xffffffffffffffff, 0x13000000, [0x7, 0x0, 0x0, 0x1400000000000000]}, 0x2c) [ 1156.874511] RDX: 0000000000000276 RSI: ffffffff81c06cad RDI: 0000000000000005 [ 1156.874522] RBP: ffff88817cd870f8 R08: ffff8881b79422c0 R09: ffffed103b5c5b5f [ 1156.874532] R10: 0000000000000002 R11: ffff8881dae2dafb R12: 0000000000040000 [ 1156.874547] R13: 00000000000742ca R14: ffff8881da96f530 R15: 0000000000000002 [ 1156.888121] kobject: 'loop4' (0000000005a59734): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1156.888235] ? alloc_pages_vma+0x1bd/0x4a0 [ 1156.931029] ? alloc_pages_vma+0x1bd/0x4a0 [ 1156.935306] do_huge_pmd_anonymous_page+0x59e/0x2030 [ 1156.940426] ? __switch_to_asm+0x34/0x70 [ 1156.944507] ? __switch_to_asm+0x40/0x70 [ 1156.948605] ? __switch_to_asm+0x34/0x70 [ 1156.952679] ? __switch_to_asm+0x40/0x70 [ 1156.956751] ? __switch_to_asm+0x34/0x70 [ 1156.960855] ? __thp_get_unmapped_area+0x180/0x180 [ 1156.965809] ? mark_held_locks+0x130/0x130 [ 1156.970085] ? __schedule+0x8d7/0x21d0 [ 1156.973995] ? perf_trace_lock+0x14d/0x7a0 [ 1156.978257] ? perf_trace_lock+0x14d/0x7a0 [ 1156.982510] ? print_usage_bug+0xc0/0xc0 [ 1156.986586] ? print_usage_bug+0xc0/0xc0 [ 1156.990668] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1156.996221] ? check_preemption_disabled+0x48/0x280 [ 1156.997222] kobject: 'loop3' (000000004afa3985): kobject_uevent_env [ 1157.001248] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1157.001272] ? debug_smp_processor_id+0x1c/0x20 [ 1157.001288] ? perf_trace_lock+0x14d/0x7a0 [ 1157.001305] ? debug_smp_processor_id+0x1c/0x20 [ 1157.001321] ? perf_trace_lock_acquire+0x15b/0x800 [ 1157.001347] ? __lock_acquire+0x62f/0x4c20 [ 1157.001365] ? __lock_acquire+0x62f/0x4c20 [ 1157.001378] ? mark_held_locks+0x130/0x130 [ 1157.001397] ? zap_class+0x640/0x640 [ 1157.001427] ? mark_held_locks+0x130/0x130 [ 1157.014536] kobject: 'loop3' (000000004afa3985): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1157.018067] ? mark_held_locks+0x130/0x130 [ 1157.018090] ? find_held_lock+0x36/0x1c0 [ 1157.018179] __handle_mm_fault+0x3c91/0x5be0 [ 1157.018207] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1157.079610] ? lock_is_held_type+0x210/0x210 [ 1157.084034] ? perf_trace_lock+0x7a0/0x7a0 [ 1157.088285] ? perf_trace_lock+0x7a0/0x7a0 [ 1157.092548] ? zap_class+0x640/0x640 [ 1157.096272] ? zap_class+0x640/0x640 [ 1157.100009] ? find_held_lock+0x36/0x1c0 [ 1157.104114] ? handle_mm_fault+0x42a/0xc70 [ 1157.108372] ? lock_downgrade+0x900/0x900 [ 1157.111650] kobject: 'loop0' (000000006839aa7f): kobject_uevent_env [ 1157.112537] ? check_preemption_disabled+0x48/0x280 [ 1157.112559] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1157.112575] ? kasan_check_read+0x11/0x20 [ 1157.112605] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1157.112622] ? rcu_softirq_qs+0x20/0x20 [ 1157.121557] kobject: 'loop0' (000000006839aa7f): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1157.124093] ? trace_hardirqs_off_caller+0x310/0x310 [ 1157.124112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1157.124129] ? check_preemption_disabled+0x48/0x280 [ 1157.124152] handle_mm_fault+0x54f/0xc70 [ 1157.124171] ? __handle_mm_fault+0x5be0/0x5be0 [ 1157.176143] ? find_vma+0x34/0x190 [ 1157.179715] __do_page_fault+0x5e8/0xe60 [ 1157.183811] do_page_fault+0xf2/0x7e0 [ 1157.187623] ? zap_class+0x640/0x640 [ 1157.191351] ? vmalloc_sync_all+0x30/0x30 [ 1157.195508] ? error_entry+0x76/0xd0 [ 1157.199246] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1157.204291] ? find_held_lock+0x36/0x1c0 [ 1157.208367] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1157.213228] ? trace_hardirqs_on_caller+0x310/0x310 [ 1157.218277] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1157.223151] page_fault+0x1e/0x30 [ 1157.226648] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1157.232283] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f 40 00 [ 1157.251192] RSP: 0018:ffff88817cd87af0 EFLAGS: 00010202 [ 1157.256557] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000004 [ 1157.263892] RDX: 0000000000000004 RSI: ffff88817cd87bd8 RDI: 00000000209b1ffc [ 1157.271177] RBP: ffff88817cd87b28 R08: ffffed102f9b0f7c R09: ffffed102f9b0f7b [ 1157.278477] R10: ffffed102f9b0f7b R11: 0000000000000003 R12: 00000000209b2000 [ 1157.286245] R13: 00000000209b1ffc R14: ffff88817cd87bd8 R15: 00007ffffffff000 [ 1157.293547] ? _copy_to_user+0xf6/0x110 [ 1157.297563] do_timer_create+0xec4/0x16f0 [ 1157.301732] ? __do_compat_sys_clock_adjtime+0x2a0/0x2a0 [ 1157.307197] ? lock_downgrade+0x900/0x900 [ 1157.311360] ? perf_trace_sched_process_exec+0x860/0x860 [ 1157.316846] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1157.322394] ? _copy_from_user+0xdf/0x150 [ 1157.326553] __x64_sys_timer_create+0x1aa/0x1f0 [ 1157.331229] ? posix_timer_event+0x130/0x130 [ 1157.335666] do_syscall_64+0x1b9/0x820 [ 1157.339614] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1157.344996] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1157.349952] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1157.354854] ? trace_hardirqs_on_caller+0x310/0x310 [ 1157.359888] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1157.364922] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1157.369959] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1157.374842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1157.380052] RIP: 0033:0x457569 [ 1157.383273] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1157.402184] RSP: 002b:00007fe96a5bec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 1157.409901] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 1157.417309] RDX: 00000000209b1ffc RSI: 0000000020066000 RDI: 0000000000000000 [ 1157.424586] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1157.431965] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe96a5bf6d4 [ 1157.439243] R13: 00000000004c54af R14: 00000000004d91e8 R15: 00000000ffffffff [ 1157.447919] Kernel Offset: disabled [ 1157.451748] Rebooting in 86400 seconds..