dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x0, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x0, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) setns(0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x0, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x0, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x0, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x0, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:56 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:56 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x0, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240), 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240), 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240), 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r4) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:57 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r4) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:57 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r4) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) setns(0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r3, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, r4) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r3, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, r4) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) setns(0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r3, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, r4) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:58 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:58 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x0) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x0) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x0) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:37:59 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:37:59 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:00 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:00 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300), 0x0, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x0, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x0, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300), 0x0, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x0, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r6) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x0, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300), 0x0, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd188185", 0x2b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:01 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:01 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe80312"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd188185", 0x2b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe80312"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe80312"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd188185", 0x2b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c097", 0x40, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x0, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c097", 0x40, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f0000000180), 0x4) 2033/05/18 03:38:02 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:02 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x0, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:03 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:03 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x0, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 1: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f0000000180), 0x4) 2033/05/18 03:38:03 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c097", 0x40, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:03 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:03 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e892"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 1: accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14, 0x80000) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r0}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=@canfd={{0x4, 0x0, 0xb807, 0x5}, 0x24, 0x1, 0x0, 0x0, "1064ed3eed281a7a60e8c13c1678fe9d87a77a48e3e3bbb77c4b5ade37532707fb63995724935beedc00d712260599d2ad9e05ccbe815431b1b9bdd5b0ac8d6c"}, 0x48}, 0x1}, 0x80) mmap(&(0x7f0000ac6000/0x4000)=nil, 0x4000, 0x1000003, 0x2000000000008010, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000380)={{0xffffffff, 0x3, 0x9, 0xf0, "19bbc6d2e56f878b807306701a155079e559b617efe5a074d2f9472f24c23826c35abb5e1935e310cc5529b9", 0x200}, 0x0, 0x0, 0xfffffffffffff68e, r1, 0x3, 0x4, "0fc937bc754ab5507e405e443c754c324198710f9db1f6b627bc855e42a7b14d44f2636d647b1bfee0a46975049925af347375bdd625cbcae63ff479ad21b6be", &(0x7f0000000340)=']{\x00', 0x3, [], [0x3, 0xa0, 0x1]}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0x9204, 0xf0b1) mkdir(&(0x7f0000000940)='./file1\x00', 0x171) r2 = syz_open_dev$usbmon(&(0x7f0000000580)='/dev/usbmon#\x00', 0xeee, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f00000005c0)=0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000440)={{0x10f000, 0x0, 0xc, 0xb2, 0x5, 0x1f, 0x3, 0x7, 0x0, 0x0, 0xffffffffffff9de4, 0x531}, {0x0, 0x1b4dfad996688811, 0x0, 0x1, 0x0, 0xff, 0x7fffffff, 0x0, 0x5, 0x2, 0x0, 0xffffffffffffffe0}, {0x1, 0x5000, 0x0, 0x81, 0x24, 0x80000000, 0x400, 0x100, 0x40, 0xd1, 0x40000000000000, 0x1f}, {0x0, 0x0, 0x0, 0x40, 0x1, 0xffffffffffff90be, 0x101, 0x5, 0x0, 0x3b78, 0x9, 0x80000001}, {0x2000, 0x7000, 0x1d, 0x7fffffff, 0x0, 0x1, 0x0, 0x7f, 0xa3ac, 0x4, 0x7, 0x401}, {0x6001, 0x2, 0x4, 0xe6, 0x5, 0x3f7b, 0x0, 0x80, 0x800, 0x7fff, 0x5, 0x6}, {0x0, 0xf000, 0x3, 0xff, 0x401, 0x7f, 0x0, 0x4, 0x3, 0x46, 0x32c, 0x7}, {0x10001, 0xd000, 0xf, 0x0, 0x8f37, 0x0, 0x3, 0x10000, 0x400, 0x200, 0x100000001, 0x9}, {0xd000, 0xf005}, {0x101000, 0x5000}, 0x1, 0x0, 0x1, 0x80, 0xe, 0x1000, 0x6000, [0x8, 0x1, 0xffffffffffffffa1, 0x59df]}) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000014, &(0x7f0000000600)=0xd484, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x3f, &(0x7f0000000640)=0x7ff, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x30b) sendto$inet(r3, &(0x7f00005c9000), 0x0, 0x800000020000000, &(0x7f0000303000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x800000000000852b, 0xffff}, 0x14) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) r5 = memfd_create(&(0x7f0000000380)='/dev/ptmx.', 0x3) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0xf, 0xd, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a", [0x0, 0x9]}) close(r4) accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x204) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000000c0)={{0x2f, @rand_addr=0xf778, 0x4e24, 0x2, 'sed\x00', 0x0, 0x4, 0x78}, {@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x10000, 0x9, 0x6, 0x200}}, 0x44) 2033/05/18 03:38:03 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:03 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:03 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e892"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:03 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 1: ftruncate(0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fchdir(0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x6, 0x3ff, 0x1, r2}) r3 = syz_open_procfs(0x0, &(0x7f00006e7ff5)='net/ptype\x00') r4 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f000019ffe9)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in=@remote}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000340)={{}, {0x0, 0x200}, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f00005e9000), 0x0, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x20004e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)={0x5}) r5 = open(&(0x7f0000000480)='./bus\x00', 0x4480, 0x0) ioctl$TIOCCBRK(r1, 0x5428) sendfile(r1, r5, &(0x7f0000d83ff8)=0x2000, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000001c0), &(0x7f00000000c0)=0x68) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x4, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x5, 0x7, 0x0, 0x9, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x3, 0x7, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x49d8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2033/05/18 03:38:03 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:03 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:03 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e892"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000001fc0)) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000024c0)={&(0x7f0000002040)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001f40)=[{&(0x7f00000020c0)="73c7575b94a72990e177f86ed4835a72a65c1a6c6831eeb0c48163a47ab63bcb605c8450cc4798ff6521c2aa722d1a7105c8a07e6c", 0x35}], 0x1, &(0x7f0000002500)=ANY=[], 0x0, 0x40000}, 0x20000000) r2 = gettid() perf_event_open(&(0x7f0000001ac0)={0x1, 0x70, 0xffffffff, 0x835, 0x9, 0xffffffffffffff5f, 0x0, 0x1000, 0x42000, 0x0, 0x8, 0x80, 0x1, 0x4, 0x100000001, 0x9, 0xff, 0x0, 0x1000, 0x7, 0x7f, 0x200, 0xb715, 0x3, 0x7fffffff, 0xf0a, 0x40, 0x8000, 0x8, 0x7, 0xffffffffffffff74, 0x4, 0x6, 0x0, 0x0, 0x335, 0x3ff, 0x58, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000001a80), 0xe}, 0x244, 0x80000000, 0x82, 0x7, 0x5, 0x3, 0x80000001}, r2, 0xd, r0, 0x8) mount(&(0x7f0000002300)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000002c40)="6d7113da29c1e3287075658c6500", 0x0, &(0x7f000000a000)) r3 = getpid() socketpair(0x5, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$kcm(r4, &(0x7f0000002240)={&(0x7f0000001b40)=@in={0x0, 0x0, @rand_addr}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000026c0)=""/237, 0xed}, {&(0x7f0000002100)=""/131, 0x83}, {&(0x7f00000027c0)=""/98, 0x62}, {&(0x7f0000001880)=""/5, 0x5}, {&(0x7f0000002840)=""/65, 0x41}, {&(0x7f00000028c0)=""/105, 0x69}, {&(0x7f0000002940)=""/112, 0x70}, {&(0x7f00000029c0)=""/131, 0x83}, {&(0x7f0000002a80)=""/120, 0x78}], 0x9, &(0x7f0000002bc0)=""/70, 0x46, 0x10000}, 0x1) r5 = perf_event_open(&(0x7f0000001a00)={0x0, 0x70, 0x0, 0x8, 0x0, 0x3, 0x0, 0xb8, 0x1000, 0x0, 0x3, 0x4, 0xfff, 0x4, 0x4dae, 0x40, 0x100000001, 0x6, 0x4, 0x0, 0x3, 0x753c, 0x6, 0x100, 0x1de, 0x6, 0x4, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7fff, 0x80000000, 0x3, 0x8, 0x81, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x4}, 0x801, 0x400, 0x1, 0x4, 0x1, 0x9, 0x80000001}, r3, 0x7, r0, 0xb) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000002380)) mount(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)='devpts\x00', 0x40, &(0x7f0000001cc0)="be623dfd58807ac0b2f86f052863a5f30adc0bce173ebcf648cefd7d64732aeb5b94e6af3ab33e53669ba6d304d067dad4b1ff3ed87f18fd170aac904e8f105e80e22881717c98752a9cd7cfb06d102877e3b36b2624d22427331755a9514b225d25999ed605ffe4188630db2e7ddcc57f6316b60c4f3845d9dfcbbde5e49af627b48d7c9bd743b536de31a9ba3010cb6714c9b90a50537be55ca12a18e6541bff5a82d293e7734ea9c90707899663bd96b3bcce5887bf0bd35963c5adc39ddcb6f2a0a02b01661242046cb54ef1aec5a486b69e006305064124867bf79f4dc11798e214b61575168b79887122e0a3461f703c077f902c0a") socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000001800)={&(0x7f0000000240)=@alg, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/83, 0x53}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/40, 0x28}, {&(0x7f0000000400)=""/144, 0x90}, {&(0x7f00000004c0)=""/200, 0xc8}, {&(0x7f00000005c0)=""/60, 0x3c}, {&(0x7f0000000600)=""/105, 0x69}, {&(0x7f0000000680)=""/127, 0x7f}, {&(0x7f0000000700)=""/8, 0x8}], 0xa, &(0x7f0000000800)=""/4096, 0x1000}, 0x10000) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000002340)=0xf60) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003900)={&(0x7f0000003400)=@can={0x0, 0x0}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003480)=""/194, 0xc2}, {&(0x7f0000003580)=""/250, 0xfa}, {&(0x7f0000003680)=""/100, 0x64}, {&(0x7f0000003700)=""/14, 0xe}, {&(0x7f0000003740)=""/159, 0x9f}, {&(0x7f0000003800)=""/15, 0xf}], 0x6, &(0x7f00000038c0)=""/29, 0x1d, 0x5}, 0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0x5, 0xa, &(0x7f00000023c0)=@raw=[@call={0x85, 0x0, 0x0, 0x3}, @jmp={0x5, 0x2, 0x7, 0x0, 0xc, 0x1, 0x10}, @generic={0x2, 0x9, 0x1, 0x2}, @jmp={0x5, 0x2, 0x6, 0x7, 0xf, 0x20, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x2a}], &(0x7f0000000080)='GPL\x00', 0x8, 0xe8, &(0x7f0000002500)=""/232, 0x41f00, 0x1, [], r8}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r9) bpf$PROG_LOAD(0x5, &(0x7f0000003940)={0x4, 0x16, &(0x7f0000002600)=ANY=[@ANYBLOB="18000000030000000000004003000000dfd00c00fcffffff0000000000000000000803000101000000000000000000003d01f0fff0ffffff000000000000000095000000000017d200153852bf07cb0aeb945bfc07b03cc9ecf185e2a7b060fe443cf8192e006b754f1d767a15fc22087022dff96bc94ae6197d4086004ee0fb32e11be32c63515851adea3d9d10ac29ff5f646aac6e9083b2a6165a3315a44697231d06961b974fc00a9686c42e018e"], &(0x7f0000000380)='GPL\x00', 0xf172, 0x4b, &(0x7f00000018c0)=""/75, 0x41f00, 0x1, [], r8}, 0x48) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f00)={0xffffffffffffffff, 0x0, 0xf6, 0x22, &(0x7f0000001dc0)="9ef9482ea02fd36d0a768986a7ebe7a627dc88937e7073e3521858dfa0d5e02f571a01cfdfa76e048e5f956ea5da60b90e02a6c3d3687ed61ec9ab5b682c02498bddef38de9ce8c753e41e78f414d16202a033b6c7752711a5f56924e7846d6dcde2f71026e1eb0319b5e60f6b1ec67fca31c3cf1691d3af91a19f56be5a10ff337a53ba13dd3d75e1555211954b92ec0082d02b7b4cdddc021cbe84e4af8f20788977e3416918843e6c92b2ebf7b8b33ecbd4c7c9a9d5036c3e3e538748a32f1a28eb77818ca1878ffdd445dcdb8a40e6221e0fc474428449dfe93c62bbc69996aa9b34488c1da4f6f7c2275305a6a4fb256c1a516d", &(0x7f0000001ec0)=""/34, 0x1f, 0x1}, 0x28) close(r6) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000001bc0)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000001f80)='./file0\x00', &(0x7f0000000040)='cgroup\x00', 0x3441, &(0x7f0000000080)) mount(&(0x7f00000021c0)='./file0/file0\x00', &(0x7f0000002200)='./file0/file0\x00', &(0x7f0000000180)='fuse\x00', 0x2000000, &(0x7f0000002280)="9b3923bfddc346e9fa2aeaffae6ca386d8d50ba83ab72218340d3c30c045a89ac016797652ba04f1a203cfceccb458dbfd9fd03c4a80ef9a40dc7a4f24b6619d04a58186466fd8465757d9ee053c082cdfa957") ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000001940)=ANY=[@ANYBLOB="07000000000000000000000000000000000000000000000000000000000000000000000067eb0ecf1c127df7274c9ea1675e02fa4ffd89aa7e3394d69bee91d46297ce4f59482f2312a17617beb7d332a5c996e59875644dd1e3a690110400bc751bb0435977d90fcbb2b83c27812d818991d125e9c0f199be2bc7f01aa0a5cb9b9f99438aa0f1ae3d50201f7bb276536f567f03f062994da292"]) mount(&(0x7f0000df7000)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x200, &(0x7f00000001c0)) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x0) 2033/05/18 03:38:03 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:03 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e89200"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:03 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) [ 370.411801] devpts: called with bogus options 2033/05/18 03:38:03 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) [ 370.440954] hugetlbfs: Bad mount option: "" 2033/05/18 03:38:03 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1", 0x50, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:03 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e89200"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:03 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300), 0x0, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) [ 370.549667] devpts: called with bogus options [ 370.588789] hugetlbfs: Bad mount option: "" 2033/05/18 03:38:03 executing program 1: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) close(r0) capset(&(0x7f0000000000), &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x10001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000100)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{0xffffffffffffffff, 0xc1a6}], 0x20000000000000b5, 0x0) r3 = dup2(0xffffffffffffffff, r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2, 0x0) getpid() ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)) fcntl$getownex(r0, 0x10, &(0x7f0000000480)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000500)) getpgid(0x0) fcntl$getown(r3, 0x9) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x200, 0x5, 0x200, 0x0, 0x0, 0x8001, 0x0, 0x7f, 0x0}, &(0x7f0000000400)=0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)={r4, 0x3}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)={r5, 0x10000}, &(0x7f0000000340)=0x8) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0xffffffff}) getresgid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700)) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000880)={0x8001}, 0x4) setresgid(r6, 0x0, r7) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={0x9}, 0x8) renameat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000640)='./file0\x00') ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) 2033/05/18 03:38:04 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:04 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:04 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e89200"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300), 0x0, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1", 0x50, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0800152d29f9d000d9310402"], 0x2}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) splice(r3, &(0x7f00000001c0), r3, &(0x7f0000000240), 0x5, 0xa) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x0, r3}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4$netrom(r4, &(0x7f0000000500)=@full, &(0x7f0000000580)=0x48, 0x80800) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r8, 0x21, 0x1, &(0x7f0000000280), &(0x7f0000000680)=0x4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000800)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000780)={0x0, 0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f00000007c0)={r5}) socket(0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000880)={{{@in6, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x4e23, 0x80, 0x4e20, 0x80000000, 0xa, 0xa0, 0x20, 0x11, 0x0, r2}, {0xffffffffffff8001, 0xffffffff, 0x8000, 0x5, 0x8a38, 0xff, 0x0, 0x7d5d}, {0x0, 0x4, 0x75ceb8d2, 0x1}, 0x1b4200, 0x6e6bb5, 0x0, 0x0, 0x3}, {{@in6=@local={0xfe, 0x80, [], 0xaa}, 0x4d4, 0x3f}, 0x2, @in=@multicast2=0xe0000002, 0x3507, 0x1, 0x2, 0x200, 0x10000, 0x4ae, 0x1}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3b0c25a99d291eabb9c5e4d752ae400000"], 0x1}, 0x1, 0x0, 0x0, 0xc001}, 0x20040010) 2033/05/18 03:38:04 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:04 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1", 0x50, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) [ 370.939209] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 370.973137] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 2033/05/18 03:38:04 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 1: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={r0}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000480), &(0x7f00000004c0)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000a39fc8)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000733000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000a0affff000000ac5ef6d7060e24c2b7a30f000000000000000000"], 0x1f}, 0x1}, 0x0) socketpair(0x10, 0x80000, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={0x0}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in=@loopback}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000340)={r0, 0x420}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f00000001c0)={r5, 0x1}) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f00000003c0)={{0xa, 0x4e23, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffffffb}, {0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1ff}, 0x2, [0x3, 0x8, 0x2, 0xbe, 0x902, 0x7, 0x1, 0x5]}, 0x5c) socketpair$inet(0x2, 0x5, 0x2, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1) 2033/05/18 03:38:04 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r3, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, r4) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:04 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:04 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300), 0x0, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:04 executing program 1: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff08000000ffaaaaaaaaaaaa86dd60c000e200083a0000000000000000000000ffffac142e19d7bacc7041c390fa0a9dffaaff02000000000000000000003de00000e704c4b796705c0557bbe9122e97ecd680ee9dddfdb91402c249052bdbaa2aa024db6ab18a448e42e6b410a7ec2369c07cc6d739f5927d4b9159d5aa19918b7b5c60f9719d1986bae83c0325bdc6805a1e76bf614f01d324ccc95aad402402177f351e21"], 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x5d44) 2033/05/18 03:38:04 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:04 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r3, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, r4) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:04 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000ffbf47)=""/185, 0xfffffffffffffeba, 0x0, 0x0, 0xfffffffffffffde6) bind$inet6(0xffffffffffffffff, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) sendfile(0xffffffffffffffff, r0, &(0x7f00000004c0), 0x140) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='~\t\x00\x00\x00S{']], 0x1) r2 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)) sendto$inet6(r2, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa}, 0x1c) socket$inet6(0xa, 0x4, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) fchdir(r0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) tgkill(0x0, 0x0, 0x30) dup2(r2, r0) recvfrom$inet6(r0, &(0x7f0000000600)=""/191, 0xbf, 0x0, &(0x7f0000000440)={0xa, 0x104e24, 0x40000000000000, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) syz_open_procfs(r3, &(0x7f00000005c0)='gid_map\x00') socket$inet6(0xa, 0xa, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000140)=0x2) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000007c0)=""/4096) clock_gettime(0x0, &(0x7f0000000200)={0x0}) write$sndseq(r1, &(0x7f0000000700)=[{0x1, 0x3ff, 0x0, 0x5, @time={r5}, {}, {0x7fffffff, 0x96}, @note={0x3, 0x0, 0xffff, 0x4, 0x9}}, {0x0, 0x0, 0x0, 0x8, @tick=0xff, {0x7fffffff, 0x5}, {0x7, 0x1}, @queue={0x1, {0x8, 0x1000}}}, {0x0, 0x0, 0x1, 0x400, @tick, {0x800, 0x6}, {0x200, 0x101}, @result={0x9e, 0xf6}}], 0x90) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000480)={r4, 0x0, 0x1}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x3000000}, 0x3e0) 2033/05/18 03:38:04 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:04 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:04 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd188185", 0x2b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:04 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r3, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, r4) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x0, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 1: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) close(r0) capset(&(0x7f0000000000), &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x10001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000100)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{0xffffffffffffffff, 0xc1a6}], 0x20000000000000b5, 0x0) r3 = dup2(0xffffffffffffffff, r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2, 0x0) getpid() ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)) fcntl$getownex(r0, 0x10, &(0x7f0000000480)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000500)) getpgid(0x0) fcntl$getown(r3, 0x9) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x200, 0x5, 0x200, 0x0, 0x0, 0x8001, 0x0, 0x7f, 0x0}, &(0x7f0000000400)=0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)={r4, 0x3}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)={r5, 0x10000}, &(0x7f0000000340)=0x8) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0xffffffff}) getresgid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700)) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000880)={0x8001}, 0x4) setresgid(r6, 0x0, r7) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={0x9}, 0x8) renameat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000640)='./file0\x00') ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) 2033/05/18 03:38:05 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c097", 0x40, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693d", 0x54, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 1: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x1, '\v'}, 0x0) lseek(r0, 0x1ff9, 0x0) getdents64(r0, &(0x7f0000000040)=""/188, 0xbc) 2033/05/18 03:38:05 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x0) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x0, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) [ 371.957804] EXT4-fs error (device sda1): ext4_readdir:239: inode #11: block 8355: comm syz-executor1: path /lost+found: bad entry in directory: rec_len is smaller than minimal - offset=4089(4089), inode=0, rec_len=0, name_len=0 2033/05/18 03:38:05 executing program 1: getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f000001c000), &(0x7f000005c000)=0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x4000, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101002) ioctl$int_out(r0, 0x1, &(0x7f000005bff8)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0xd5, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x2, 0x5, 0x0, r1}) 2033/05/18 03:38:05 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x0) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x0, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693d", 0x54, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 1: getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f000001c000), &(0x7f000005c000)=0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x4000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[], 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101002) ioctl$int_out(r1, 0x1, &(0x7f000005bff8)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0xd5, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) fcntl$lock(r1, 0x6, &(0x7f00000000c0)={0x0, 0x2, 0x5, 0x1}) 2033/05/18 03:38:05 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 1: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) close(r0) capset(&(0x7f0000000000), &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x10001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000100)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{0xffffffffffffffff, 0xc1a6}], 0x20000000000000b5, 0x0) r3 = dup2(0xffffffffffffffff, r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2, 0x0) getpid() ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)) fcntl$getownex(r0, 0x10, &(0x7f0000000480)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000500)) getpgid(0x0) fcntl$getown(r3, 0x9) unshare(0x8000000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x200, 0x5, 0x200, 0x0, 0x0, 0x8001, 0x0, 0x7f}, &(0x7f0000000400)=0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x3}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)={r4, 0x10000}, &(0x7f0000000340)=0x8) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0xffffffff}) getresgid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700)) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000880)={0x8001}, 0x4) setresgid(r5, 0x0, r6) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={0x9}, 0x8) renameat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000640)='./file0\x00') ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) 2033/05/18 03:38:05 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x0) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693d", 0x54, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) setns(0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r1, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r3, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, r4) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) setns(0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r1, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r3, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, r4) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:05 executing program 1: r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x9516}) close(r0) capset(&(0x7f0000000000), &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x10001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000100)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = dup2(0xffffffffffffffff, r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2, 0x0) getpid() ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)) fcntl$getownex(r0, 0x10, &(0x7f0000000480)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000500)) getpgid(0x0) fcntl$getown(r3, 0x9) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x200, 0x5, 0x200, 0x0, 0x0, 0x8001, 0x0, 0x7f, 0x0}, &(0x7f0000000400)=0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)={r4, 0x3}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)={r5, 0x10000}, &(0x7f0000000340)=0x8) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0xffffffff}) getresgid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700)) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000880)={0x8001}, 0x4) setresgid(r6, 0x0, r7) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={0x9}, 0x8) renameat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000640)='./file0\x00') ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) 2033/05/18 03:38:05 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:05 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:06 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:06 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:06 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:06 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1", 0x50, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001080)='/dev/input/event#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x9, 0x29be}, 0xc) r2 = add_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)="b05945cb336ac961dcac9cfbcf22009be99398f1b6dde14dabf9b488c0e372e77e0a55fb25ca939081177fa155f7b93d8022aefcadc3a30537558de2174c9647e8d18ff94ef51df7007f67db204e82c322a96b86931352e769d7c164a7e5a3f2d0e7fe301176d18a40fbcfaa160312deed61f3d614032ea0512907fe66170aa5a59dcf807a91ae051dab39b4dced74", 0x8f, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) ioctl$TIOCSBRK(r1, 0x40044591) sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="4c6d69242fb4c019da65fc46", 0xc, 0x0, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000000)=[0xf2a5, 0x86ff], 0x2, 0x7, 0x5, 0x5, 0x100, 0x0, {0x4, 0x1f, 0x4, 0x3ba7, 0x7, 0x7, 0x2bd, 0x92, 0x1d0, 0x4, 0x6, 0x8, 0x3480, 0xfffffffffffffff9, "f0b498ce7f77c773a8bc92b10c1cb46a037cc517243cfa02a5f1020609bd50b6"}}) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000003c0)=""/238, &(0x7f00000004c0)=0xee) 2033/05/18 03:38:06 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) setns(0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r1, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r3, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, r4) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:06 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x0, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:06 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:06 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x0, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:06 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:06 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:06 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:06 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000000140)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x1000000000000088) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000685ff0)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000fc5fc0)}, 0x8000) mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f00000002c0)="fc23a864f16bc69c6a0f915209d9579ca3b2715c42d2f2ed98c1f45d40c922cf47644fe7b26ab805aebfc5eafa3c961a27786e84504af342e77a4cf269", 0x3d, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:38:06 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:06 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:06 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:06 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:06 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:06 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:06 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693d", 0x54, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:06 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:06 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x0, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:06 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:06 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:06 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:06 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:07 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:07 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0x0, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:07 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693d", 0x54, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:07 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:07 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:07 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:07 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:07 executing program 1: getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f000001c000), &(0x7f000005c000)=0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101002) ioctl$int_out(r1, 0x1, &(0x7f000005bff8)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0xd5, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x2, 0x5, 0x1}) 2033/05/18 03:38:07 executing program 1: 2033/05/18 03:38:07 executing program 1: 2033/05/18 03:38:07 executing program 1: 2033/05/18 03:38:07 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000ffbf47)=""/185, 0xfffffffffffffeba, 0x0, 0x0, 0xfffffffffffffde6) bind$inet6(0xffffffffffffffff, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) sendfile(0xffffffffffffffff, r0, &(0x7f00000004c0), 0x140) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='~\t\x00\x00\x00S{']], 0x1) r2 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)) sendto$inet6(r2, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa}, 0x1c) socket$inet6(0xa, 0x4, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ioprio_get$pid(0x3, r3) fchdir(r0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) tgkill(0x0, 0x0, 0x30) dup2(r2, r0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) recvfrom$inet6(r0, &(0x7f0000000600)=""/191, 0xbf, 0x0, &(0x7f0000000440)={0xa, 0x104e24, 0x40000000000000, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) syz_open_procfs(r4, &(0x7f00000005c0)='gid_map\x00') socket$inet6(0xa, 0xa, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000140)=0x2) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000007c0)=""/4096) clock_gettime(0x0, &(0x7f0000000200)={0x0}) write$sndseq(r1, &(0x7f0000000700)=[{0x1, 0x3ff, 0x0, 0x5, @time={r6}, {}, {0x7fffffff, 0x96}, @note={0x3, 0x0, 0xffff, 0x4, 0x9}}, {0x0, 0x0, 0x0, 0x8, @tick=0xff, {0x7fffffff, 0x5}, {0x7, 0x1}, @queue={0x1, {0x8, 0x1000}}}, {0x0, 0x0, 0x1, 0x400, @tick, {0x800, 0x6}, {0x200, 0x101}, @result={0x9e, 0xf6}}], 0x90) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000480)={r5, 0x0, 0x1}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x3000000}, 0x3e0) 2033/05/18 03:38:07 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0x0, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:07 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r2, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r1, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r4, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, r5) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:07 executing program 7: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693d", 0x54, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x0, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:07 executing program 4: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:07 executing program 0: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300), 0x0, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180), 0x4) 2033/05/18 03:38:07 executing program 6: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:07 executing program 3: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0x0, 0x3ff}) connect$bt_rfcomm(r5, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r6) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:07 executing program 2: truncate(&(0x7f0000000200)='./file0\x00', 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r2, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[], 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, r7) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2033/05/18 03:38:07 executing program 1: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x3fffa, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) open_by_handle_at(r1, &(0x7f0000000000)={0x9, 0x1, '\v'}, 0x0) lseek(r0, 0x1ffc, 0x0) getdents64(r0, &(0x7f0000000040)=""/188, 0xbc) 2033/05/18 03:38:07 executing program 5: truncate(&(0x7f0000000200)='./file0\x00', 0x8) syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x202001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r1, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c48034", 0x4b, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) inotify_rm_watch(r0, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e61740000000000000000000000010003000000000000001b000000050000004004003802000028010000ffffffff00000011e8030000e8030000e8030000ffffffffe803123508070000e8920000"], 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0xad1c, 0x3ff}) connect$bt_rfcomm(r3, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, r4) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000180), 0x4) [ 374.327144] ================================================================== [ 374.334794] BUG: KASAN: slab-out-of-bounds in __ext4_check_dir_entry+0x2de/0x320 [ 374.342330] Read of size 2 at addr ffff8801bbd28000 by task syz-executor1/26133 [ 374.349759] [ 374.351381] CPU: 0 PID: 26133 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #7 [ 374.358550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.367880] Call Trace: [ 374.370493] dump_stack+0x194/0x24d [ 374.374104] ? arch_local_irq_restore+0x53/0x53 [ 374.378772] ? show_regs_print_info+0x18/0x18 [ 374.383292] ? ext4_getblk+0x12a/0x500 [ 374.387165] ? __ext4_check_dir_entry+0x2de/0x320 [ 374.392049] print_address_description+0x73/0x250 [ 374.396880] ? __ext4_check_dir_entry+0x2de/0x320 [ 374.401711] kasan_report+0x23c/0x360 [ 374.405503] __asan_report_load2_noabort+0x14/0x20 [ 374.410418] __ext4_check_dir_entry+0x2de/0x320 [ 374.415080] ext4_readdir+0xd00/0x3600 [ 374.418958] ? __ext4_check_dir_entry+0x320/0x320 [ 374.423806] ? find_held_lock+0x35/0x1d0 [ 374.427850] ? lock_acquire+0x1d5/0x580 [ 374.431803] ? lock_acquire+0x1d5/0x580 [ 374.435805] ? iterate_dir+0xc3/0x530 [ 374.439600] ? lock_release+0xa40/0xa40 [ 374.443590] ? check_same_owner+0x320/0x320 [ 374.447925] ? rcu_note_context_switch+0x710/0x710 [ 374.452836] ? __might_sleep+0x95/0x190 [ 374.456840] ? down_read_killable+0x95/0x180 [ 374.461228] ? iterate_dir+0xc3/0x530 [ 374.465014] ? down_write+0x120/0x120 [ 374.468823] iterate_dir+0x1ca/0x530 [ 374.472515] SyS_getdents64+0x221/0x420 [ 374.476477] ? SyS_getdents+0x450/0x450 [ 374.480434] ? ext4_llseek+0x237/0x2a0 [ 374.484303] ? iterate_dir+0x530/0x530 [ 374.488196] ? do_syscall_64+0xb7/0x940 [ 374.492161] ? SyS_getdents+0x450/0x450 [ 374.496129] do_syscall_64+0x281/0x940 [ 374.500012] ? do_syscall_64+0x281/0x940 [ 374.504098] ? vmalloc_sync_all+0x30/0x30 [ 374.508233] ? _raw_spin_unlock_irq+0x27/0x70 [ 374.512729] ? finish_task_switch+0x1c1/0x7e0 [ 374.517204] ? syscall_return_slowpath+0x550/0x550 [ 374.522118] ? syscall_return_slowpath+0x2ac/0x550 [ 374.527046] ? prepare_exit_to_usermode+0x350/0x350 [ 374.532057] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 374.537410] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.542241] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 374.547408] RIP: 0033:0x454e79 [ 374.550574] RSP: 002b:00007f76f4ab3c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 374.558261] RAX: ffffffffffffffda RBX: 00007f76f4ab46d4 RCX: 0000000000454e79 [ 374.565516] RDX: 00000000000000bc RSI: 0000000020000040 RDI: 0000000000000013 [ 374.572773] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 374.580027] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 374.587284] R13: 00000000000000a9 R14: 00000000006f3078 R15: 0000000000000000 [ 374.594555] [ 374.596163] Allocated by task 6116: [ 374.599774] save_stack+0x43/0xd0 [ 374.603204] kasan_kmalloc+0xad/0xe0 [ 374.606897] kasan_slab_alloc+0x12/0x20 [ 374.610846] kmem_cache_alloc+0x12e/0x760 [ 374.614974] getname_flags+0xcb/0x580 [ 374.618760] user_path_at_empty+0x2d/0x50 [ 374.622886] vfs_statx+0xe9/0x190 [ 374.626319] SYSC_newlstat+0x87/0xf0 [ 374.630010] SyS_newlstat+0x1d/0x30 [ 374.633622] do_syscall_64+0x281/0x940 [ 374.637484] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 374.642643] [ 374.644253] Freed by task 6116: [ 374.647522] save_stack+0x43/0xd0 [ 374.650958] __kasan_slab_free+0x11a/0x170 [ 374.655211] kasan_slab_free+0xe/0x10 [ 374.658991] kmem_cache_free+0x83/0x2a0 [ 374.662948] putname+0xee/0x130 [ 374.666218] filename_lookup+0x315/0x500 [ 374.670263] user_path_at_empty+0x40/0x50 [ 374.674395] vfs_statx+0xe9/0x190 [ 374.677829] SYSC_newlstat+0x87/0xf0 [ 374.681522] SyS_newlstat+0x1d/0x30 [ 374.685138] do_syscall_64+0x281/0x940 [ 374.689010] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 374.694180] [ 374.695796] The buggy address belongs to the object at ffff8801bbd28880 [ 374.695796] which belongs to the cache names_cache of size 4096 [ 374.708523] The buggy address is located 2176 bytes to the left of [ 374.708523] 4096-byte region [ffff8801bbd28880, ffff8801bbd29880) [ 374.720991] The buggy address belongs to the page: [ 374.725911] page:ffffea0006ef4a00 count:1 mapcount:0 mapping:ffff8801bbd28880 index:0x0 compound_mapcount: 0 [ 374.735857] flags: 0x2fffc0000008100(slab|head) [ 374.740518] raw: 02fffc0000008100 ffff8801bbd28880 0000000000000000 0000000100000001 [ 374.748469] raw: ffffea000708f9a0 ffffea00070b3b20 ffff8801da5e9600 0000000000000000 [ 374.756322] page dumped because: kasan: bad access detected [ 374.762009] [ 374.763619] Memory state around the buggy address: [ 374.768524] ffff8801bbd27f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.775868] ffff8801bbd27f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.783209] >ffff8801bbd28000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 374.790551] ^ [ 374.793895] ffff8801bbd28080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 374.801237] ffff8801bbd28100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 374.808574] ================================================================== [ 374.815912] Disabling lock debugging due to kernel taint [ 374.821505] Kernel panic - not syncing: panic_on_warn set ... [ 374.821505] [ 374.828868] CPU: 0 PID: 26133 Comm: syz-executor1 Tainted: G B 4.16.0-rc7+ #7 [ 374.837347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.846675] Call Trace: [ 374.849245] dump_stack+0x194/0x24d [ 374.852855] ? arch_local_irq_restore+0x53/0x53 [ 374.857504] ? kasan_end_report+0x32/0x50 [ 374.861633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 374.866369] ? vsnprintf+0x1ed/0x1900 [ 374.870149] ? __ext4_check_dir_entry+0x290/0x320 [ 374.875008] panic+0x1e4/0x41c [ 374.878190] ? refcount_error_report+0x214/0x214 [ 374.882937] ? add_taint+0x1c/0x50 [ 374.886452] ? add_taint+0x1c/0x50 [ 374.889967] ? __ext4_check_dir_entry+0x2de/0x320 [ 374.894798] kasan_end_report+0x50/0x50 [ 374.898766] kasan_report+0x149/0x360 [ 374.902541] __asan_report_load2_noabort+0x14/0x20 [ 374.907450] __ext4_check_dir_entry+0x2de/0x320 [ 374.912098] ext4_readdir+0xd00/0x3600 [ 374.915968] ? __ext4_check_dir_entry+0x320/0x320 [ 374.920792] ? find_held_lock+0x35/0x1d0 [ 374.924846] ? lock_acquire+0x1d5/0x580 [ 374.928794] ? lock_acquire+0x1d5/0x580 [ 374.932751] ? iterate_dir+0xc3/0x530 [ 374.936533] ? lock_release+0xa40/0xa40 [ 374.940481] ? check_same_owner+0x320/0x320 [ 374.944778] ? rcu_note_context_switch+0x710/0x710 [ 374.949681] ? __might_sleep+0x95/0x190 [ 374.953629] ? down_read_killable+0x95/0x180 [ 374.958014] ? iterate_dir+0xc3/0x530 [ 374.961796] ? down_write+0x120/0x120 [ 374.965579] iterate_dir+0x1ca/0x530 [ 374.969268] SyS_getdents64+0x221/0x420 [ 374.973215] ? SyS_getdents+0x450/0x450 [ 374.977166] ? ext4_llseek+0x237/0x2a0 [ 374.981040] ? iterate_dir+0x530/0x530 [ 374.984913] ? do_syscall_64+0xb7/0x940 [ 374.988868] ? SyS_getdents+0x450/0x450 [ 374.992818] do_syscall_64+0x281/0x940 [ 374.996693] ? do_syscall_64+0x281/0x940 [ 375.000728] ? vmalloc_sync_all+0x30/0x30 [ 375.004852] ? _raw_spin_unlock_irq+0x27/0x70 [ 375.009333] ? finish_task_switch+0x1c1/0x7e0 [ 375.013802] ? syscall_return_slowpath+0x550/0x550 [ 375.018709] ? syscall_return_slowpath+0x2ac/0x550 [ 375.023619] ? prepare_exit_to_usermode+0x350/0x350 [ 375.028618] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 375.033969] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.038812] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 375.043975] RIP: 0033:0x454e79 [ 375.047138] RSP: 002b:00007f76f4ab3c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 375.054818] RAX: ffffffffffffffda RBX: 00007f76f4ab46d4 RCX: 0000000000454e79 [ 375.062071] RDX: 00000000000000bc RSI: 0000000020000040 RDI: 0000000000000013 [ 375.069325] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 375.076584] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 375.083829] R13: 00000000000000a9 R14: 00000000006f3078 R15: 0000000000000000 [ 375.091813] Dumping ftrace buffer: [ 375.095342] (ftrace buffer empty) [ 375.099025] Kernel Offset: disabled [ 375.102622] Rebooting in 86400 seconds..