32) 15:56:15 executing program 2: unshare(0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 15:56:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1109.123910][ T1333] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:15 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) [ 1109.220589][ T1334] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:15 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x201, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r1, r2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:56:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1109.464514][ T1347] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:20 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000064) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:56:20 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 15:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:20 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@initdev, @in=@remote}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:56:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000140)="4f1ed7078eeb63bf81b8355ce93f132d477764b632310e68437399de46eb501d32243b8d8e8c67fcf2513ead0582b72aea79e6cf8cfa3cc594a20a4a8d0a1349dcb0b9b67d0c03ed4de866a2e6caa08a895a1265b7437e67b02fe5", 0x5b, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f0000000240)={r6}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 1114.211458][ T1367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:20 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 15:56:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:21 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x6080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:56:21 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 15:56:21 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000080)) dup3(r0, r1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)=0xcb) [ 1114.604665][ T1390] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:21 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 15:56:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1114.984629][ T1414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:25 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000065) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:56:25 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 15:56:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:25 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r3, r1, 0xf}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$cgroup_type(r7, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) 15:56:25 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4200, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f00000038c0), 0x4000000000000a8, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="b00100ff", @ANYRES16, @ANYBLOB="00002bbd7000ffdbdf650100000004000c802c0004800500030006000000050003000100000005000300080000000500030006000000050003000700000008010c8014000b800800090012bae65b08000a00c228000024000b800800090035a5b71b08000900bccfaf4608000a0012f8000008000a0098ac000014000b8008000a00f9aa000008000a0004c000001c000b8008000a00c551000108000900d811e136080009008a14551c0c000b8008000900248953271c000b8008000a00178b000008000900d1e1d74f08000900f7b8f96f24000b800800090035fc9d170800090061a4947f08000900ccb23b6f08000a0065ce000004000b804c000b80080009004911722708000a00dc32000008000a005fe3000008000a006fa5000008000a001602000008000900647ba42408000a00310d000008000a0009510000080009005ba5002d0800020001000000240004800500030002000000050003000500000005000300020000000500030000000000300008802c000780080006001000000008000500877e572808000500e77a94210800060078000000080005000bac245608000100ffffffff"], 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4241}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="a4010000", @ANYRES16, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x24044040}, 0x6004) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000c674ad4f8cf84155cbf7a11cbec15b1ddccbf3f0ef01672520d8936516e364f8", @ANYRES16, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x100, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6993}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22e3ba41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ed0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11e1b413}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13333b93}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfdf3ce5}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d122c64}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1488}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c86cd8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e9596fc}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfeda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad71}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24ef7905}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d687e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7566}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeec3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c4e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51af5404}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd8830e2}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)={0x70, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x6000}, 0x20000945) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000801) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r1, r2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:56:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x4201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r7}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r9 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 1119.390186][ T1438] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:26 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 15:56:26 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r2 = dup3(r0, r1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)=0xd6c6) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101800, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x4) openat(r3, &(0x7f0000000080)='./file0\x00', 0x80, 0x0) 15:56:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000028c0)='TIPC\x00') setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000001c0), 0x4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0xb}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="e296126efa83c60b9f0d7a7bfc5b73dca33c09ecde8de5ff4507bdadc5a6fcce51103189d76c9ff1f14d505882329799ecde298fcd5cb8406608d7a217a15834946dea66e1bf368ee8eb10b3a00ba74206e9e95a7c0f40f02749d363d4aad5b7f37495fb2d78fa6c244bd78c701ad990cbc8c6b2d3f503dc528e854d8e398cd7b48d2de48eadbe924050dbefedd4e8b4", @ANYRES16=r4, @ANYBLOB="000828bd7000fbdbdf2501000000000002000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 15:56:26 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000080)=0x6) 15:56:26 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000180)={0x0, r1}) [ 1119.856660][ T1465] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1119.909747][ T1463] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:56:29 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000066) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:56:29 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x80000001, 0x4000800) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@sco, &(0x7f0000000000)=0x80) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:56:29 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 15:56:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:29 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:56:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xe4604c19c33d259a, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000000c0)=0x9) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x101000, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) dup2(0xffffffffffffffff, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 15:56:29 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) 15:56:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:29 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$caif(r3, &(0x7f0000000000)=@dbg={0x25, 0x0, 0x9}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:56:29 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) 15:56:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x64002, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f00000000c0)=0x54) dup2(0xffffffffffffffff, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r9 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 15:56:29 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r3, 0x0, 0x0) 15:56:34 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000067) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:56:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:34 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) 15:56:34 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20a482, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:56:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r6 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 15:56:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1127.915950][ T1576] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:56:34 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)) 15:56:34 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 1128.091522][ T1591] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:34 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)) 15:56:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00'}) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:56:35 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x50000, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000240)={0x81, 0x6, 0x8b39, 0x6, 0x6}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2800, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x1f, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800812dec4d8275583a7000ffdbdf250800010002000000080001000100000008000100000000000800010001000000080001000100000005397859288a112d8d085868d437f9adea5bbdfa4ac8e30458fb8dbad9b13c7974c4012ea2ab97c77a3c79e8c957685bd89a31c20317b4b0bbff9979be7cac99a7e7afd7d48c614661e7315ff08e7bb094a73ba2d0cc8fad15de76699405bf44b7135e5af46165888200000000e274e293d1ecdaebc321d0d14d7e449a6e815f9d65315c8a326a89af0905fabcfc3510173d219dde9eaf18031ea460b8a2da32fe246e0c3557bd9b6cc97cbf833e4d7f6da3c10431031269c8d355eff72ba31996924bb57ed2baa78686268d97ad33251f928e494571f03ccef190f8904b5b9b927b26a4843c0ee569"], 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004804) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 1128.497696][ T1614] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1128.514366][ T1612] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:56:39 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000068) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:56:39 executing program 2: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)) 15:56:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r3) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:56:39 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000002080)=[{&(0x7f0000000000)=0x2, 0x2}, {&(0x7f0000000080)=0x1, 0x2}, {&(0x7f00000000c0), 0x1}, {&(0x7f0000000100)}, {&(0x7f0000000140)=0x1}, {&(0x7f0000000180), 0x2}, {&(0x7f00000001c0)=0x2, 0x2}, {&(0x7f0000000200)=0x2, 0x2}, {&(0x7f0000000240)=0xfff, 0x2}, {&(0x7f0000000280)=0x1, 0x1}, {&(0x7f00000002c0)=0x2}, {&(0x7f0000000300), 0x1}, {&(0x7f0000000380)=0xfd, 0x2}, {&(0x7f00000003c0)=0x2}, {&(0x7f0000000400)=0x1}, {&(0x7f0000000440)=0x2, 0x1}, {&(0x7f0000000480)=0x1, 0x1}, {&(0x7f00000004c0), 0x1}, {&(0x7f0000000500), 0x2}, {&(0x7f0000000540)}, {&(0x7f0000000580)=0x1}, {&(0x7f00000005c0)=0x1}, {&(0x7f0000000600)=0x2}, {&(0x7f0000000640)=0x1, 0x2}, {&(0x7f0000000680)}, {&(0x7f00000006c0), 0x2}, {&(0x7f0000000700)}, {&(0x7f0000000740)=0x2}, {&(0x7f0000000780), 0x2}, {&(0x7f00000007c0)=0x800, 0x1}, {&(0x7f0000000800)=0x2, 0x1}, {&(0x7f0000000840)=0x2, 0x1}, {&(0x7f0000000880), 0x1}, {&(0x7f00000008c0)=0x1, 0x2}, {&(0x7f0000000900)=0x2}, {&(0x7f0000000940)=0x2, 0x2}, {&(0x7f0000000980)=0x1}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)=0x1, 0x2}, {&(0x7f0000000a40)=0x1, 0x2}, {&(0x7f0000000a80), 0x2}, {&(0x7f0000000ac0), 0x1}, {&(0x7f0000000b00), 0x2}, {&(0x7f0000000b40)=0x2, 0x1}, {&(0x7f0000000b80)=0x2, 0x1}, {&(0x7f0000000bc0)=0x2, 0x1}, {&(0x7f0000000c00), 0x1}, {&(0x7f0000000c40), 0x2}, {&(0x7f0000000c80)=0x1}, {&(0x7f0000000cc0), 0x2}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)}, {&(0x7f0000000d80), 0x1}, {&(0x7f0000000dc0)=0x2, 0x1}, {&(0x7f0000000e00)=0x1}, {&(0x7f0000000e40)=0x1}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)=0x1, 0x1}, {&(0x7f0000000f00)=0x1, 0x1}, {&(0x7f0000000f40)=0x1, 0x2}, {&(0x7f0000000f80)=0x2, 0x2}, {&(0x7f0000000fc0)=0x2}, {&(0x7f0000001000)}, {&(0x7f0000001040)}, {&(0x7f0000001080)=0x1, 0x1}, {&(0x7f00000028c0)=0x1}, {&(0x7f0000001100)}, {&(0x7f0000001140), 0x1}, {&(0x7f0000001180), 0x1}, {&(0x7f00000011c0)=0x2, 0x1}, {&(0x7f0000001200), 0x2}, {&(0x7f0000001240), 0x1}, {&(0x7f0000001280)=0x2, 0x1}, {&(0x7f00000012c0)=0x2}, {&(0x7f0000001300)=0x1, 0x1}, {&(0x7f0000001340)=0x1, 0x1}, {&(0x7f0000001380)=0x1, 0x2}, {&(0x7f00000013c0)=0x1, 0x1}, {&(0x7f0000001400), 0x1}, {&(0x7f0000001440), 0x1}, {&(0x7f0000001480)=0xc}, {&(0x7f00000014c0)}, {&(0x7f0000001500), 0x1}, {&(0x7f0000001540)=0x1}, {&(0x7f0000001580)=0x1, 0x1}, {&(0x7f00000015c0), 0x1}, {&(0x7f0000001600)=0x1}, {&(0x7f0000001640)=0x2, 0x1}, {&(0x7f00000010c0)=0x2}, {&(0x7f00000016c0)=0x2, 0x1}, {&(0x7f0000001700)}, {&(0x7f0000001740)=0x2}, {&(0x7f0000001780), 0x2}, {&(0x7f00000017c0)=0x2, 0x1}, {&(0x7f0000001800)=0x1, 0x1}, {&(0x7f0000001840)=0x1, 0x1}, {&(0x7f0000001880)=0x1, 0x2}, {&(0x7f00000018c0)=0xfffffffe}, {&(0x7f0000001900)=0x2, 0x1}, {&(0x7f0000001940), 0x1}, {&(0x7f0000001980)=0x1, 0x2}, {&(0x7f00000019c0)=0x4}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)=0x2}, {&(0x7f0000001a80)=0x2, 0x1}, {&(0x7f0000001ac0), 0x2}, {&(0x7f0000001b00)=0x1, 0x2}, {&(0x7f0000001b40)=0x1, 0x2}, {&(0x7f0000001b80), 0x1}, {&(0x7f0000001bc0)=0x1}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)=0x1, 0x1}, {&(0x7f0000001c80)=0x2, 0x1}, {&(0x7f0000001cc0)=0x2}, {&(0x7f0000001d00)=0x1, 0x1}, {&(0x7f0000001d40)=0x2, 0x1}, {&(0x7f0000001d80)=0x1, 0x2}, {&(0x7f0000001dc0)=0x2}, {&(0x7f0000001e00)=0x1}, {&(0x7f0000001e40)=0x2, 0x1}, {&(0x7f0000001e80)}, {&(0x7f0000001ec0)=0x2}, {&(0x7f0000001f00), 0x1}, {&(0x7f0000001f40)}, {&(0x7f0000001f80)=0x2, 0x1}, {&(0x7f0000001fc0)=0x2, 0x2}, {&(0x7f0000002000)=0x2, 0x2}, {&(0x7f0000002040)=0x1, 0x2}], 0xd, 0x80, &(0x7f0000002880), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$9p(r4, &(0x7f0000002900)="6150ff3c22fcf5f099e17e25140337b104694c1dcd8d66298583b255029e736d72a90fe49d7e8ff766756445595337c850b2f607041964275a698589b2ffba12a39342da67fabcf6284da6c13b50d4092dc36b7cca920c106cd3020bde12e3814c99640e74da01174ae9d62573ffa9e51b0687e21d32ab6aa74dc494d9c3ce460795dca400336b634a296da178407c0fd3145ce49e63b0069bd87e2063c0a8f4f5c91031264d7fab2ae7b5478706be408146dfcecb43dacf7e7c67a52de0a8ac7d37912408faec5fafabe0fd2d31aa9419917a59f9c87cf5095d1feff8dbc9ac79", 0xe1) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 1133.091194][ T1647] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b80444", 0x18, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @mld={0x81, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}}}}, 0x52) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x18102, 0x0) [ 1133.127821][ T1644] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:56:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:40 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000380)={0x14e0, 0x3b, 0x200, 0x70bd25, 0x25dfdbfe, "", [@typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="ed8b2898e6cab5febb7b464bcca191509bd3ef6a54352798ecc273cd41daab38a7c27b83f445ca4e22d5c3903155db6ec498a550734c2da24bae1db7c01629979b97e8930dcd4eb55ec7cde6d0301387d08cece1a46238939500fa5ca56e7b9b3d29601f34c02049b98cbfde4136dddb9cda18732f08a03f7cd6d7aa1f5b0ad586ac41132fab3b07175848d09a64bcc6551c9a67aa03e73752158e153273d7a382013bf7d982965bc8b031cfeae8578d5e93927c5bd15fbe30d145", @generic="1671c27f5a58d8a7fc3688420368f7e9e240f541b716a9424a0d337dc3b77819216fcb867de2d5b777a7d9c87d484882a0ea68c1bf781e77bdada311abbe20bc889b00dc4a49013ce061eca97220b54ca1eb1aa09c1324229ce6199271aa064141894c0398d5d78e673d1c66da7ef600ad6471075ecc625591010d6b69eb2ac8d5c53f0fd999f5a0ccb80bd1459b29ec7615828b83d904847bb8df22ab604fce30ff7d8440b631ab2f25cbc821c97c2a72bc40ef3986e8acb37c2dac76e92f6a5946287c984267eb18cbce63fbf15a551bf3d7a306190a0fe2fae926a78911d27ff7a1404451ef2fe0aa736f9d65", @nested={0x11c0, 0x8b, 0x0, 0x1, [@typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@loopback}, @generic="e683cce11aeda51f08f190a073965bb9e042d7bc36431d1449d1fc1bebc3b6096f7be0a84d33d4bc6afc40b5e08df3106d12da5bd7b56428ea5f3463c7bacbe7f5f6a6f3e1c0e110ae7ac5bf34125ad15c7dd1b4ad9626758545c86e8c31cca3789d94b083dfbc8a10671c54049e1aa2117f71e9ca17885dd07db0e84a02894d166bd7c35e89125a", @typed={0x17, 0x6, 0x0, 0x0, @str='/dev/ocfs2_control\x00'}, @generic="b5a763a1aa246a", @typed={0x8, 0x8e, 0x0, 0x0, @uid}, @generic="42e481ef256038569e08267167cdc131a4420f2498e5888ae914db0d32f569b18a8fa843dfa952d62131aba81b9c95b05b3acee3aed76e92246f2d35c90df50219a7c26f690fd5128dd32606b6a2431307d7edfb47caa1de24e142b7b123a2245b786c9ad61fa9039409a6fe225d0faacae78d68f851c69e9c98cc9d560efcc47a0b77f0f8f2c032b53defb5ffa8348e8c187e6375d597e6a3474ffc7a870e845a12a322f41f8eb33cd44fd0956ccb5b5e39ccb639ab6a2e787cfdc6ac91123663883eb46193ac29242313bbdcdaee9a6aabfd75a007bd7ec8f9ba32696b261600c6fe985a6cae9d68b06d5fc444db377dea6eea1936472c0f", @generic="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"]}, @generic, @nested={0xa6, 0x12, 0x0, 0x1, [@generic="185f142cee085509a91f3bc3b89d443ee59ed1ff487016747a21a9f094b88b7e87cdfb9b609c3d28edbc179baf2266e510d64c99c9c1ec3fb9770afc63b1678fb2a123ee3e2bd7b9b548afb9358c8bbac7593e6b40444e6c22d00a815e9bc0a43946d034a5b913bbafaaa651a9b362061415aa2c4e1172970a077e061c8ad54d3b69a0b9655795d50402a6c3766de7e54b3fadedfd33bcaf0ba95fb5e3f5b17408e8"]}, @generic="6ef69049bb6f52570d01d5c3bc8215feb902fee625d664e323d3660f0d880304c06925ddd2a00aee0aa587fda1f05cd867c5393f44ee9ec411ad39d8e00660f6dda3d75966a2a6412d169ac1568dfa9dc4132a7a90626d1d040f5597b900989e1393e97e9691a4644d87879c95fad04152e4892c13c8c77af2ac230a2c877cfd9377a41a23ee3327f19fedadba236d331bc0566b2b25a1b71c8ae1dc1d0d19a2b1592af7ce3b342a6c09"]}, 0x14e0}, {&(0x7f0000001880)={0x22ac, 0x28, 0x8, 0x70bd25, 0x25dfdbfc, "", [@generic="eda00e7b1fbfd80e0e179b53bbe894b5ceb640f19a942eb68f3ec164a8dfca3ad1eaf63077e25228788be20201f8d45291e4c8125174e5b3f8eb31812aae089df8676b78cc7c30a3dcdd70463bfbb72705821c8a192e5be6efb0a7cd2b82215323", @typed={0x14, 0x86, 0x0, 0x0, @ipv6=@remote}, @typed={0xc, 0x2c, 0x0, 0x0, @u64=0x4800}, @typed={0x8, 0x6c, 0x0, 0x0, @uid}, @generic="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", @nested={0x1208, 0x31, 0x0, 0x1, [@generic="77dde360ba3ee97647e0936eb9810efcec0019464732448cf2809ca534088ba32aba14730c56809c946be8a49b0d240a1f74b7cce40ac8311d35537d87ec11a9c45103f0a970918f8bc580e00ef303383c429059ea8d65e1afcacca7eb6981dac6c9dc9272c6131e1a2059442fdbfebd98154d392a8b394e6e3e5be4352c385bf2b7", @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0xb, 0x0, 0x0, @u32}, @generic="725f7036b30e3d59c3201418730f9a2698e97939767624d5174f14b82ee6754fcb7f86fc16c047db1d240994eeab07de9c1e0cc56ab226f724ff2e6776fc5be997ab3701926e0a59b2addd447ed5c0d11aaa8736ece1d05a14582df50ca9d66797b4a4ef0e88e9d06c7a809e31c16f3bf8a54ad89608e2891ef6", @generic="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", @generic="40d1e91f2c2ddfefa88901b79bc6c541a7148e3cd5492265a6c2e2cb1645b22f854c17211f41296b50d09d15c72bed4db1186734d7cbeee93582da610a626957fa9fb54e27682073923409ab9686ce6cde56270dfb4ff3d9ce99b892b83786e819e84f32b079a7fa1b1ee5041398242016a8723586b7bb6d8077b2d653e89658fb07865d8a3086895b529394ba0f5b1fdf24f8", @typed={0xc, 0x84, 0x0, 0x0, @u64}, @generic="e2f748e4be7af7745c9537e4cc62373a67595051f83679d46f8c36256b5451939dafeb12d736a7510524cb3ea839c6be474db9386771863ea3b8f348cd9ff8734a60079b30601c1018a7871cc650529f7b9c401276", @typed={0x4, 0x24}]}, @typed={0x8, 0x79, 0x0, 0x0, @fd}]}, 0x22ac}], 0x2, &(0x7f0000000180)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r5}}}], 0x40, 0x20000000}, 0x28000) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x0, r6}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 1133.514905][ T1690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x6000200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000b4a13f150205f9c35bd6d31d3ff01999d418a7a991c3d12f35d2f1337a0fb03a18227063b925bd7000ff0000000000000000000000000000000000000000449f1ddb192b33c618878fdea7c40972cce1cb425707dc12411b72325f8450bb2e91ec26f33160b00078d8", @ANYRES64=r6, @ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x200048a1) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) r7 = dup2(0xffffffffffffffff, r3) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 15:56:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1133.855159][ T1717] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:40 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x6080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:56:40 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7fffffff, 0x40000) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x5df, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0x4) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 1134.076984][ T1729] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:56:45 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000069) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:56:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:56:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 15:56:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000080)=0x1) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 1138.822886][ T1755] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:56:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) [ 1138.932496][ T1754] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:56:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 15:56:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) [ 1139.112114][ T1782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b45, 0x100000004) 15:56:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b45, 0x100000004) 15:56:50 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000006a) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:56:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:56:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:50 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b63, 0x100000004) 15:56:50 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b45, 0x100000004) 15:56:50 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) [ 1143.765241][ T1826] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:50 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b63, 0x100000004) [ 1143.828837][ T1821] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:56:50 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 15:56:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:50 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b63, 0x100000004) 15:56:50 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) [ 1144.090604][ T1851] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:50 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:56:53 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000006b) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:56:53 executing program 2: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 15:56:53 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:56:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x17, &(0x7f0000000340)=0x7, 0xffffff79) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f00000038c0), 0x4000000000000a8, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/109, 0x6d}], 0x1, &(0x7f0000000180)=""/152, 0x98}, 0x2140) dup2(0xffffffffffffffff, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'sit0\x00', 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0xd, 0x4, 0x8, 0xf1a, 0x0, 0xffffffffffffffff, 0x1d5}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x8, 0x10}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 15:56:53 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(0xffffffffffffffff, r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)={r5, r8, 0x3}) 15:56:53 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:56:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:53 executing program 2: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 15:56:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000080)={0x28a, "67ec8852433b63586c309974d32c12c042a5663404caf1b1a530f15e68a4841d", 0x4, 0x2c, 0x42d7d0e1, 0x4, 0x1, 0x0, 0xfff, 0x100}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) connect$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @default}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @bcast, @null]}, 0x48) dup2(0xffffffffffffffff, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) shmat(r6, &(0x7f0000000000/0x13000)=nil, 0x6000) shmctl$SHM_STAT_ANY(r6, 0xf, &(0x7f0000000240)=""/138) r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 15:56:54 executing program 3: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:56:54 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/adsp1\x00', 0xfcc42, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x6a40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, 0x0) dup3(r0, r1, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x20400, 0x0) ioctl$VIDIOC_S_EDID(r9, 0xc0285629, &(0x7f0000000140)={0x0, 0x3e, 0x2, [], &(0x7f0000000100)=0x5}) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 1147.575332][ T1906] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1147.891776][ T1912] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:56:56 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000006c) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:56:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:56 executing program 2: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 15:56:56 executing program 3: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:56:56 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x406922, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x1, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffbff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x81}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x20}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x41}, 0x4040) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:56:56 executing program 1: socketpair$unix(0x1, 0x96027c9283b63b79, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 15:56:56 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 15:56:56 executing program 3: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:56:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:56:57 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup3(r0, r1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$caif(r3, &(0x7f0000000000)=@rfm={0x25, 0x7, "93e1c0c07518346468b41e850c685377"}, 0x18) [ 1150.362736][ T1940] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:56:57 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) [ 1150.506827][ T1961] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:56:57 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) [ 1150.722358][ T1940] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:00 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000006d) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:00 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:57:00 executing program 5: pipe(&(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) flistxattr(r0, &(0x7f0000000080)=""/143, 0x8f) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) dup3(r0, r1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x1, 'caif0\x00', {}, 0x1ff}) 15:57:00 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 15:57:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) accept4$llc(r5, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) r6 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) listen(r8, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 1153.471775][ T2007] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1153.528468][ T2005] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:00 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:57:00 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 15:57:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat(r4, &(0x7f0000000080)='./file0\x00', 0xb92dedcaa7d8663, 0x158) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 1153.989682][ T2043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:00 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b45, 0x100000004) 15:57:00 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:57:03 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000006e) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:03 executing program 5: pipe(&(0x7f0000000040)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f00000038c0), 0x4000000000000a8, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f00000038c0), 0x4000000000000a8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) dup3(0xffffffffffffffff, r2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:57:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:03 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b45, 0x100000004) 15:57:03 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b63, 0x100000004) 15:57:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x57f803, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={r6, 0x80, &(0x7f0000000140)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x81f}, @in6={0xa, 0x4e21, 0x81, @empty, 0x7d9}, @in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, [], 0x34}, 0x8}, @in6={0xa, 0x4e20, 0x80, @private2, 0xff}]}, &(0x7f00000000c0)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001ff) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000000)={0xa3, 0x10000000, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'veth1_vlan\x00'}) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x95be0409ae45c266}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x1) 15:57:03 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b63, 0x100000004) 15:57:03 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b45, 0x100000004) [ 1157.075019][ T2095] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:03 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b63, 0x100000004) 15:57:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r3) r4 = dup3(r1, r3, 0x80000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 15:57:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:03 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x0) [ 1157.483361][ T2125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1157.516693][ T2119] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:06 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000006f) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:06 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x0) 15:57:06 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x0) 15:57:06 executing program 5: pipe(&(0x7f0000000040)) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f00000038c0), 0x4000000000000a8, 0x0) dup3(r2, r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r3, &(0x7f0000000180)=@nl, &(0x7f0000000000)=0x80) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:57:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x5}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0xfffc, @local}, {0x2, 0x4e22, @empty}, 0xd0, 0x0, 0x0, 0x0, 0x7fff, &(0x7f00000000c0)='rose0\x00', 0xc90, 0x9, 0x2}) 15:57:06 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x0) [ 1160.107925][ T2157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:06 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x0) 15:57:06 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x0) [ 1160.260840][ T2161] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:07 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 15:57:07 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5437, 0x100000003) [ 1160.524435][ T2196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1162.177610][ T0] NOHZ: local_softirq_pending 08 15:57:09 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000070) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:09 executing program 5 (fault-call:3 fault-nth:0): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:57:09 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 15:57:09 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5437, 0x100000003) 15:57:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) r4 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x9, 0x901) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f00000000c0)={0x3fb0f0ff, "32e260b8133c54d83f48818370e4e947e57b99642041560c15cace89bb33aecb", 0x3, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000180)='syz1\x00') ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'bridge_slave_1\x00', 0x1000}) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f0000000140)) [ 1163.406014][ T2231] FAULT_INJECTION: forcing a failure. [ 1163.406014][ T2231] name failslab, interval 1, probability 0, space 0, times 0 15:57:10 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5437, 0x100000003) [ 1163.451440][ T2237] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1163.530279][ T2231] CPU: 0 PID: 2231 Comm: syz-executor.5 Not tainted 5.8.0-rc2-syzkaller #0 [ 1163.538908][ T2231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1163.548962][ T2231] Call Trace: [ 1163.552264][ T2231] dump_stack+0x18f/0x20d [ 1163.556632][ T2231] should_fail.cold+0x5/0x14 [ 1163.561240][ T2231] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1163.566965][ T2231] should_failslab+0x5/0xf [ 1163.571389][ T2231] __kmalloc+0x27d/0x340 [ 1163.575643][ T2231] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1163.581201][ T2231] tomoyo_realpath_from_path+0xc3/0x620 [ 1163.586754][ T2231] ? tomoyo_profile+0x42/0x50 [ 1163.591445][ T2231] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1163.596908][ T2231] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1163.602553][ T2231] ? tomoyo_execute_permission+0x470/0x470 [ 1163.608406][ T2231] ? selinux_inode_getsecctx+0x90/0x90 [ 1163.613878][ T2231] ? check_preemption_disabled+0x38/0x220 [ 1163.619612][ T2231] ? __fget_files+0x294/0x400 [ 1163.624310][ T2231] security_file_ioctl+0x50/0xb0 [ 1163.629265][ T2231] ksys_ioctl+0x50/0x180 [ 1163.633520][ T2231] __x64_sys_ioctl+0x6f/0xb0 [ 1163.638114][ T2231] do_syscall_64+0x60/0xe0 [ 1163.642535][ T2231] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1163.648428][ T2231] RIP: 0033:0x45cb19 [ 1163.652319][ T2231] Code: Bad RIP value. [ 1163.656389][ T2231] RSP: 002b:00007fbb101b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1163.664802][ T2231] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cb19 [ 1163.672772][ T2231] RDX: 0000000100000004 RSI: 0000000000004b63 RDI: 0000000000000003 15:57:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 15:57:10 executing program 3 (fault-call:3 fault-nth:0): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) [ 1163.680831][ T2231] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1163.688815][ T2231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1163.696788][ T2231] R13: 0000000000000395 R14: 00000000004c637a R15: 00007fbb101b66d4 15:57:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b45, 0x100000002) [ 1163.832969][ T2268] FAULT_INJECTION: forcing a failure. [ 1163.832969][ T2268] name failslab, interval 1, probability 0, space 0, times 0 15:57:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1163.836066][ T2268] CPU: 0 PID: 2268 Comm: syz-executor.3 Not tainted 5.8.0-rc2-syzkaller #0 [ 1163.836077][ T2268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 15:57:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b45, 0x100000002) [ 1163.836083][ T2268] Call Trace: [ 1163.836104][ T2268] dump_stack+0x18f/0x20d [ 1163.836127][ T2268] should_fail.cold+0x5/0x14 [ 1163.836152][ T2268] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1163.836166][ T2268] should_failslab+0x5/0xf [ 1163.836181][ T2268] __kmalloc+0x27d/0x340 [ 1163.836197][ T2268] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1163.836218][ T2268] tomoyo_realpath_from_path+0xc3/0x620 [ 1163.836235][ T2268] ? tomoyo_profile+0x42/0x50 [ 1163.836257][ T2268] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1163.836273][ T2268] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1163.836294][ T2268] ? tomoyo_execute_permission+0x470/0x470 [ 1163.836352][ T2268] ? selinux_inode_getsecctx+0x90/0x90 [ 1163.836377][ T2268] ? check_preemption_disabled+0x38/0x220 [ 1163.836402][ T2268] ? __fget_files+0x294/0x400 [ 1163.836427][ T2268] security_file_ioctl+0x50/0xb0 [ 1163.836448][ T2268] ksys_ioctl+0x50/0x180 [ 1163.836471][ T2268] __x64_sys_ioctl+0x6f/0xb0 [ 1163.836487][ T2268] do_syscall_64+0x60/0xe0 [ 1163.836508][ T2268] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1163.836521][ T2268] RIP: 0033:0x45cb19 [ 1163.836527][ T2268] Code: Bad RIP value. [ 1163.836536][ T2268] RSP: 002b:00007ffad123ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1163.836558][ T2268] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cb19 [ 1163.836568][ T2268] RDX: 0000000100000004 RSI: 0000000000004b45 RDI: 0000000000000003 [ 1163.836578][ T2268] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1163.836588][ T2268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1163.836604][ T2268] R13: 0000000000000395 R14: 00000000004c637a R15: 00007ffad123b6d4 [ 1163.842082][ T2268] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1164.081737][ T2277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1164.276828][ T2231] ERROR: Out of memory at tomoyo_realpath_from_path. 15:57:13 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000071) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=@int=0x7f, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={r6, 0x10000}, &(0x7f0000000180)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 15:57:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b45, 0x100000002) 15:57:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:13 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:57:13 executing program 3 (fault-call:3 fault-nth:1): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) [ 1166.928428][ T2305] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1166.932412][ T2304] FAULT_INJECTION: forcing a failure. [ 1166.932412][ T2304] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1166.950938][ T2304] CPU: 0 PID: 2304 Comm: syz-executor.3 Not tainted 5.8.0-rc2-syzkaller #0 [ 1166.959527][ T2304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1166.969591][ T2304] Call Trace: [ 1166.972888][ T2304] dump_stack+0x18f/0x20d [ 1166.977228][ T2304] should_fail.cold+0x5/0x14 [ 1166.981830][ T2304] __alloc_pages_nodemask+0x1a3/0x930 [ 1166.987214][ T2304] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1166.993999][ T2304] cache_grow_begin+0x8c/0xb20 [ 1166.998768][ T2304] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1167.004242][ T2304] cache_alloc_refill+0x27b/0x340 [ 1167.009280][ T2304] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1167.014999][ T2304] __kmalloc+0x319/0x340 [ 1167.019251][ T2304] tomoyo_realpath_from_path+0xc3/0x620 [ 1167.024803][ T2304] ? tomoyo_profile+0x42/0x50 [ 1167.029488][ T2304] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1167.034945][ T2304] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1167.040588][ T2304] ? tomoyo_execute_permission+0x470/0x470 [ 1167.046558][ T2304] ? selinux_inode_getsecctx+0x90/0x90 [ 1167.052031][ T2304] ? check_preemption_disabled+0x38/0x220 [ 1167.057764][ T2304] ? __fget_files+0x294/0x400 [ 1167.062465][ T2304] security_file_ioctl+0x50/0xb0 [ 1167.067500][ T2304] ksys_ioctl+0x50/0x180 [ 1167.071752][ T2304] __x64_sys_ioctl+0x6f/0xb0 [ 1167.076361][ T2304] do_syscall_64+0x60/0xe0 [ 1167.080881][ T2304] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1167.086772][ T2304] RIP: 0033:0x45cb19 [ 1167.090658][ T2304] Code: Bad RIP value. [ 1167.094723][ T2304] RSP: 002b:00007ffad123ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1167.103131][ T2304] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cb19 [ 1167.111104][ T2304] RDX: 0000000100000004 RSI: 0000000000004b45 RDI: 0000000000000003 [ 1167.119076][ T2304] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 15:57:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) [ 1167.127046][ T2304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1167.135014][ T2304] R13: 0000000000000395 R14: 00000000004c637a R15: 00007ffad123b6d4 15:57:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 15:57:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b63, 0x100000004) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000003480)=0x0, &(0x7f00000034c0)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000003780)={&(0x7f0000000040), 0xc, &(0x7f0000003740)={&(0x7f0000003500)={0x238, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x399a02c5f74c56d2}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x5}, 0x40088c0) 15:57:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:13 executing program 1: ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20002200}, 0xc, &(0x7f0000000540)={&(0x7f0000000a40)={0x44c, 0x9, 0x7, 0x5, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x9}, [@nested={0xd4, 0x56, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @pid}, @generic="2124e4f5bda04f7d57f9b7654db0d0e0cbf71b1ce79e41bc9731e9caa696cacc435f5e6e807a4196b691d768c51c27129a42e81bde25b647b06d53f5e8c7b74912b0b3c4f4125cdf05a122d32bfdd60c82fd48ffdacba8f93e0f4ad4ddb1624b58b0ef157e5ba237490de12b0b0b00075b97feb46c13086dd94b89ef5b1823c879b43c98d12ce26579cc4ddec3718a4e180a38b0acb5f3521b1e962e89770c03bf49f7be693304e81f15245f", @typed={0x4, 0x4e}, @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@local}, @typed={0xd, 0x0, 0x0, 0x0, @str='/dev/kvm\x00'}, @generic]}, @generic="f5d66510d01035618a8d850fd9f33b09bb0c89be149e3223030b2633e59fa4f3", @nested={0x148, 0x1e, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @ipv4=@loopback}, @generic="0f20005bfc1c7a1b519f1aa74376adce7c623b91dd9a52ff7046d0b025c77bdd77ea1aaadae132b0cb506a9515e2644f4ed6b703284b47aea8923afbb7b1a2df5601a5c19ddcc7878e652cdb682b7cf0da6c16400990b41dd8e0a25281d3fb9e98bd9bf7ce72fd1c2582e829b7be9db47e7da8cb941f9a1561d62b80cf311d822db25745904edb1b8b61db4c3063b485b4b68f4eda375ebe7462cda8", @generic="487cccc5fbdbe536584ef07762994bc289546b136f8de783febbae846ee8edfaea262db8ab8c1533da40579b32a6103775e02851de4a668fd9bd0e606b1a712de185585b26bb2704bfbdd9907514977bae609afdd7bb5bd631efb6069befcb668d34d892a082d1852c5765fc0a0ffa99546fd7fdddbb802944f2fe2cfafa4224c47337dc6a1c395a0fb81d1cfccef1b7e3394d93", @typed={0x4, 0x7f}, @typed={0x8, 0x23, 0x0, 0x0, @u32=0xffff}]}, @nested={0x1d3, 0x89, 0x0, 0x1, [@typed={0x8, 0x82, 0x0, 0x0, @u32=0xbc6}, @generic, @typed={0x8, 0x96, 0x0, 0x0, @pid}, @generic="c0a1edfc5bc458e1dfb66a92d1c8bdf7e34582807af01e85db978805b102240c33a61d433798144752d0862c7242ec171ec955d018372ba9457f5d40db7a72195460a4b38d13e5dab14324f887b8ddfe4749234e4ed94581e956dac41a40c65fe757d9aeb3ec6a0fb366d4e6d6de557916f97839b17b716c1b5eab662f3145b9c75b2329aacf01a9f07dc33f6fe7dd672120c8ec3dbccaa6", @typed={0x8, 0x3f, 0x0, 0x0, @pid}, @generic="9002fe1c2df430a1557ba15a39e07720cfa8d1e3dd181f8bf15bb65911cdf9b75ec7dae62ede42db8e56f04e33ae536f0ca7dce24a90519c41b7133d3eb3d7a0b8c141cfb326ab6778c015ae1f26f239e34601b033bfca6a46658d2d8703d990cbf90b8bccd2e69c9e0deaac96f80b7d0189a8e4e644406ef3a7a72c78be067041ac9a", @generic="d76292744f875d32d4a5fa3c6303191e13e59f21c6e69bee1c3fe92f9f6a64eddeb06558cf4a5783c4055823a87e51585c13c2beddcf18", @generic="a47a993224d922a4fdb2ae75a659baf9f4ca7fc05bb09967dae795d4dcd9c370b086ea07d06643311400c127cf5b41dfdd7416826e5044522618ffa4278ed5f63c47b7084d5af1cd4c59e648092d7e032c825cdd74489d15fde028103da34306cefda88cad"]}, @typed={0xf, 0x94, 0x0, 0x0, @str='syzkaller1\x00'}, @typed={0x8, 0x44, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x84, 0x0, 0x0, @u32=0x644}, @typed={0x8, 0x15, 0x0, 0x0, @uid=r2}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4008804}, 0x4000810) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setrlimit(0x7, &(0x7f0000000080)={0x101, 0xfc}) 15:57:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) [ 1167.362758][ T2336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1167.450833][ T2342] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:16 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000072) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:16 executing program 2: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 15:57:16 executing program 3 (fault-call:3 fault-nth:2): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 15:57:16 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000040)={@fixed={[], 0x11}, 0x7fff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000000)={0x2, 0x5}, 0x2) exit_group(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r4, 0x4b63, 0x100000004) 15:57:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4140, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) [ 1170.048577][ T2386] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1170.069610][ T2388] FAULT_INJECTION: forcing a failure. [ 1170.069610][ T2388] name failslab, interval 1, probability 0, space 0, times 0 15:57:16 executing program 2: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) [ 1170.072791][ T2384] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1170.127933][ T2388] CPU: 1 PID: 2388 Comm: syz-executor.3 Not tainted 5.8.0-rc2-syzkaller #0 [ 1170.136641][ T2388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.146692][ T2388] Call Trace: [ 1170.149987][ T2388] dump_stack+0x18f/0x20d [ 1170.154319][ T2388] should_fail.cold+0x5/0x14 [ 1170.158920][ T2388] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1170.164292][ T2388] should_failslab+0x5/0xf [ 1170.168710][ T2388] __kmalloc+0x27d/0x340 15:57:16 executing program 2: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) [ 1170.172957][ T2388] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1170.178697][ T2388] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1170.178714][ T2388] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1170.178734][ T2388] tomoyo_encode+0x28/0x50 15:57:16 executing program 5: clone(0x20002106efc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) [ 1170.178751][ T2388] tomoyo_realpath_from_path+0x186/0x620 [ 1170.178777][ T2388] tomoyo_path_number_perm+0x1cb/0x4d0 15:57:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1170.178791][ T2388] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1170.178810][ T2388] ? tomoyo_execute_permission+0x470/0x470 [ 1170.178862][ T2388] ? selinux_inode_getsecctx+0x90/0x90 15:57:17 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) [ 1170.178886][ T2388] ? check_preemption_disabled+0x38/0x220 15:57:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) [ 1170.178910][ T2388] ? __fget_files+0x294/0x400 [ 1170.178934][ T2388] security_file_ioctl+0x50/0xb0 [ 1170.178955][ T2388] ksys_ioctl+0x50/0x180 [ 1170.178975][ T2388] __x64_sys_ioctl+0x6f/0xb0 [ 1170.178991][ T2388] do_syscall_64+0x60/0xe0 [ 1170.179011][ T2388] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1170.179024][ T2388] RIP: 0033:0x45cb19 [ 1170.179029][ T2388] Code: Bad RIP value. [ 1170.179038][ T2388] RSP: 002b:00007ffad123ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1170.179054][ T2388] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cb19 [ 1170.179063][ T2388] RDX: 0000000100000004 RSI: 0000000000004b45 RDI: 0000000000000003 [ 1170.179072][ T2388] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1170.179081][ T2388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1170.179090][ T2388] R13: 0000000000000395 R14: 00000000004c637a R15: 00007ffad123b6d4 [ 1170.383188][ T2388] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1170.456565][ T2418] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1170.857492][ T2384] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:19 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000073) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:19 executing program 3 (fault-call:3 fault-nth:3): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 15:57:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:19 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 15:57:19 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x1404, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x44050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1406, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0xffffffffffffffee}, 0x1, 0x0, 0x0, 0x4}, 0x44014) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r6}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f00000000c0)=0x7fffffff, 0x4) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e24, 0x7, @local, 0x2}, r6}}, 0x38) 15:57:19 executing program 1: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x282002, 0x0) bind$netrom(r4, &(0x7f0000001980)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x3, 0x1f, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) r5 = dup2(0xffffffffffffffff, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000080)=0xb4, 0x4) socket$inet6(0xa, 0x2, 0x2) 15:57:19 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) [ 1173.113192][ T2460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1173.133381][ T2457] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:19 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 15:57:19 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 15:57:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:20 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:57:20 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b45, 0x100000002) [ 1173.430548][ T2504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:22 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000074) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:22 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x2, 0x100000004) 15:57:22 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b45, 0x100000002) 15:57:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) r4 = dup2(0xffffffffffffffff, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, r6, 0x409, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_FLAGS={0x8, 0xa}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5c}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f00000000c0)=0xe8) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r6, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x891) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 15:57:22 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000000)={{}, {0x4, 0x7f}, 0x1, 0x2, 0x7}) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x1e, &(0x7f00000001c0)=@int=0x3, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)={r6, 0xc, "8f4659949b40f33f67800d09"}, &(0x7f0000000100)=0x14) 15:57:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:22 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b45, 0x100000002) [ 1176.260079][ T2548] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:22 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x10, 0x100000004) 15:57:23 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x0) [ 1176.349440][ T2553] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:23 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1f) syz_open_dev$tty1(0xc, 0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KIOCSOUND(r1, 0x4b63, 0x100000004) 15:57:23 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x0) 15:57:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1176.569085][ T2595] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:25 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000075) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:25 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x2402, 0x100000004) 15:57:25 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x0) 15:57:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x7ff, 0x8, 0x4, 0x4000, 0x0, {0x0, 0xea60}, {0x2, 0x0, 0x3, 0x80, 0x40, 0xc7, "d267c51e"}, 0x9, 0x3, @planes=&(0x7f0000000000)={0x6, 0x0, @userptr=0x400, 0x455f}, 0x6}) 15:57:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$UHID_CREATE(r5, &(0x7f0000000200)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000140)=""/129, 0x81, 0x80, 0x100, 0x4377, 0x8, 0x7}}, 0x120) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 15:57:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0xa20000, 0x1, 0x401, r1, 0x0, &(0x7f0000000040)={0x0, 0xa5c2, [], @p_u16=&(0x7f0000000000)=0x607}}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3f, 0x7, &(0x7f00000000c0)=0x101}) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:57:25 executing program 2 (fault-call:3 fault-nth:0): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) [ 1179.267404][ T2634] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:26 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x100000004) [ 1179.388483][ T2654] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1179.441086][ T2658] FAULT_INJECTION: forcing a failure. [ 1179.441086][ T2658] name failslab, interval 1, probability 0, space 0, times 0 15:57:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1179.498860][ T2658] CPU: 1 PID: 2658 Comm: syz-executor.2 Not tainted 5.8.0-rc2-syzkaller #0 [ 1179.507550][ T2658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1179.517601][ T2658] Call Trace: [ 1179.520903][ T2658] dump_stack+0x18f/0x20d [ 1179.525247][ T2658] should_fail.cold+0x5/0x14 [ 1179.529857][ T2658] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1179.535578][ T2658] should_failslab+0x5/0xf [ 1179.539999][ T2658] __kmalloc+0x27d/0x340 [ 1179.544248][ T2658] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1179.549807][ T2658] tomoyo_realpath_from_path+0xc3/0x620 [ 1179.555359][ T2658] ? tomoyo_profile+0x42/0x50 [ 1179.560050][ T2658] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1179.565514][ T2658] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1179.571155][ T2658] ? tomoyo_execute_permission+0x470/0x470 [ 1179.577010][ T2658] ? selinux_inode_getsecctx+0x90/0x90 [ 1179.582483][ T2658] ? check_preemption_disabled+0x38/0x220 [ 1179.588215][ T2658] ? __fget_files+0x294/0x400 [ 1179.592912][ T2658] security_file_ioctl+0x50/0xb0 [ 1179.597864][ T2658] ksys_ioctl+0x50/0x180 [ 1179.602125][ T2658] __x64_sys_ioctl+0x6f/0xb0 [ 1179.606720][ T2658] do_syscall_64+0x60/0xe0 [ 1179.611142][ T2658] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1179.617030][ T2658] RIP: 0033:0x45cb19 [ 1179.620916][ T2658] Code: Bad RIP value. [ 1179.624980][ T2658] RSP: 002b:00007f81c861fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.633389][ T2658] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cb19 [ 1179.641356][ T2658] RDX: 0000000100000002 RSI: 0000000000004b45 RDI: 0000000000000003 15:57:26 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b30, 0x100000004) [ 1179.649325][ T2658] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1179.657426][ T2658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1179.658570][ T2670] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1179.665403][ T2658] R13: 0000000000000395 R14: 00000000004c637a R15: 00007f81c86206d4 15:57:26 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, r5}, 0xc) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) [ 1179.989308][ T2698] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1180.195572][ T2658] ERROR: Out of memory at tomoyo_realpath_from_path. 15:57:29 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000076) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:29 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b31, 0x100000004) 15:57:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:29 executing program 1: rmdir(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, &(0x7f0000000080)={0x0, 0x7, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 15:57:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair(0x27, 0x5, 0x7, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x100, 0x70bd2c, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40020}, 0x40002) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socket$nl_netfilter(0x10, 0x3, 0xc) 15:57:29 executing program 2 (fault-call:3 fault-nth:1): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) [ 1182.496046][ T2726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1182.540345][ T2731] FAULT_INJECTION: forcing a failure. [ 1182.540345][ T2731] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.576839][ T2729] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1182.609059][ T2731] CPU: 1 PID: 2731 Comm: syz-executor.2 Not tainted 5.8.0-rc2-syzkaller #0 [ 1182.617693][ T2731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1182.627761][ T2731] Call Trace: [ 1182.631069][ T2731] dump_stack+0x18f/0x20d [ 1182.635441][ T2731] should_fail.cold+0x5/0x14 [ 1182.640051][ T2731] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1182.645432][ T2731] should_failslab+0x5/0xf [ 1182.649855][ T2731] __kmalloc+0x27d/0x340 [ 1182.654111][ T2731] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1182.659850][ T2731] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1182.665175][ T2731] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1182.670897][ T2731] tomoyo_encode+0x28/0x50 [ 1182.675302][ T2731] tomoyo_realpath_from_path+0x186/0x620 [ 1182.680926][ T2731] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1182.686366][ T2731] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1182.692071][ T2731] ? tomoyo_execute_permission+0x470/0x470 [ 1182.697891][ T2731] ? selinux_inode_getsecctx+0x90/0x90 [ 1182.703442][ T2731] ? check_preemption_disabled+0x38/0x220 [ 1182.709152][ T2731] ? __fget_files+0x294/0x400 [ 1182.713818][ T2731] security_file_ioctl+0x50/0xb0 [ 1182.718745][ T2731] ksys_ioctl+0x50/0x180 [ 1182.722976][ T2731] __x64_sys_ioctl+0x6f/0xb0 [ 1182.727553][ T2731] do_syscall_64+0x60/0xe0 [ 1182.731957][ T2731] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1182.737844][ T2731] RIP: 0033:0x45cb19 [ 1182.741716][ T2731] Code: Bad RIP value. [ 1182.745762][ T2731] RSP: 002b:00007f81c861fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1182.754154][ T2731] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cb19 [ 1182.762134][ T2731] RDX: 0000000100000002 RSI: 0000000000004b45 RDI: 0000000000000003 [ 1182.770092][ T2731] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1182.778046][ T2731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 15:57:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:29 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b32, 0x100000004) [ 1182.786000][ T2731] R13: 0000000000000395 R14: 00000000004c637a R15: 00007f81c86206d4 15:57:29 executing program 2 (fault-call:3 fault-nth:2): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) [ 1182.859275][ T2731] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1182.875738][ T2751] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x1e, &(0x7f0000000100)=@assoc_value={r4}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000300)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x1f, @rand_addr=' \x01\x00', 0x3f}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)="709778806f9f7c9d4d380a6205b23661578beeee29de69f3fb845dec28e82f29f15eb58c66ad53cf1d2aaec9924cd8616e6260ec44fbe9525430042dab741314e546bf403bb3e39b67b6fb5a7f6957298737bf5a68b492a147d26dcb1b73c9ac678f6274f16dade683ec02848d90a75f3b367dde76f1d032345f1c312382a1a4192e03bde71457937a16d0499307614d106095eed3c81aff2a47163f7167cd5efab597be6b97f9e5a702048b05ace37bd58b31bec46790578eac9065508bedf6b4e2a6490bbadd5c0cbaf42ea08a06ff95c9f65f6b2fa17071c9e40e0c7513f3a8891bfe2057c1ac4fd86dfb34e305e7319785df", 0xf4}, {&(0x7f0000000180)="1dc35e6a62ab161bb303de952380424815061c75096c8051dea2a6ad9b2a02ace7cd698c010005c715e2c022a58ebe088c8fba93", 0x34}, {&(0x7f00000001c0)="7cfca042cb998c49210c922785d38aa9e05b655a9456fafa8841538b954cd5aa32f03d71dd767c4f506e0325d55925f0dab32ed1f49c7333d21c2512a98947ce242900bc7e726bc092cbf113629ca5a2d01e7f9d8447b9439d014c2b6fdb09c4c2f8524f2efb92d169452b9f061b1fd4c4c6ac13d8fe8d085c0092498267551718aceb6f7b62ae3035fe736fb5adf457ef8fd7f0cfedf872294b6e2122a931", 0x9f}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="3000000000fe000084870b0000000000090000000500000006918b2a00"/44, @ANYRES32=0x0], 0x30, 0x4040}, 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x10) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b63, 0x100000000006) 15:57:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:57:29 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b33, 0x100000004) [ 1183.071105][ T2769] FAULT_INJECTION: forcing a failure. [ 1183.071105][ T2769] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.118600][ T2769] CPU: 1 PID: 2769 Comm: syz-executor.2 Not tainted 5.8.0-rc2-syzkaller #0 [ 1183.127307][ T2769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1183.137373][ T2769] Call Trace: [ 1183.140681][ T2769] dump_stack+0x18f/0x20d [ 1183.145041][ T2769] should_fail.cold+0x5/0x14 [ 1183.149649][ T2769] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1183.155027][ T2769] should_failslab+0x5/0xf [ 1183.159448][ T2769] __kmalloc+0x27d/0x340 [ 1183.163700][ T2769] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1183.169436][ T2769] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1183.174644][ T2769] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1183.180520][ T2769] tomoyo_encode+0x28/0x50 [ 1183.184966][ T2769] tomoyo_realpath_from_path+0x186/0x620 [ 1183.190617][ T2769] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1183.196080][ T2769] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1183.201721][ T2769] ? tomoyo_execute_permission+0x470/0x470 [ 1183.207572][ T2769] ? selinux_inode_getsecctx+0x90/0x90 [ 1183.213051][ T2769] ? check_preemption_disabled+0x38/0x220 [ 1183.218785][ T2769] ? __fget_files+0x294/0x400 [ 1183.223497][ T2769] security_file_ioctl+0x50/0xb0 [ 1183.228455][ T2769] ksys_ioctl+0x50/0x180 [ 1183.232713][ T2769] __x64_sys_ioctl+0x6f/0xb0 [ 1183.237316][ T2769] do_syscall_64+0x60/0xe0 [ 1183.241746][ T2769] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1183.247644][ T2769] RIP: 0033:0x45cb19 [ 1183.251533][ T2769] Code: Bad RIP value. [ 1183.255600][ T2769] RSP: 002b:00007f81c861fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1183.264099][ T2769] RAX: ffffffffffffffda RBX: 00000000004e7b40 RCX: 000000000045cb19 [ 1183.272073][ T2769] RDX: 0000000100000002 RSI: 0000000000004b45 RDI: 0000000000000003 [ 1183.280049][ T2769] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1183.288025][ T2769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1183.296089][ T2769] R13: 0000000000000395 R14: 00000000004c637a R15: 00007f81c86206d4 [ 1183.690417][ T2769] ERROR: Out of memory at tomoyo_realpath_from_path. 15:57:32 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000077) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:32 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b34, 0x100000004) 15:57:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r4 = dup(r0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000080)={0x0, 0x20000000000}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:57:32 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1d140000003c66e995769f1c3140a2047fc41da3d3fcda58261815348612b44d29b124da4a89e812a14df1e9554a92333c95dbb669d14d0cec92c54cf2c2f48fc44bed72bb54107be392221b981e4577f42e753083aea4bce3250f8440cbf550fa83a5961cf5d271b456baa3d83e6349bcc1989c20ba8d99c31fa769f6eee28f32a3e52a4dd5632f7b2c1c359f1af876c67e93bb5f85eaee1f41f992d3aa980ecdd5d4f1fba27e68f50646b8c0261d885120c0015e715ffe4661e72c7aa0e144a21d7447ec75840e0cff4363007032d513d05ac5abda80cc1823be30b698b2be7d15b45ad105e56eb1419edc6d6d843f2e95a9ddccf1365c", @ANYRES16=r3, @ANYBLOB="c18f00000000000000004a400000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="182186f4", @ANYRES16=r3, @ANYBLOB="000427bd7000fbdbdf254c0000000400ec00"], 0x18}, 0x1, 0x0, 0x0, 0x4090}, 0x4080) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000019300)={0x30, r5, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x971818}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x1558, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x94}]}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "0279ca3b726235758270ce813d68742b95d5dc4b8515a8"}}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}, @TIPC_NLA_NODE={0x10e4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "43a5760f373128d7f22a9b8e946069b31c951dae1db075f4af20427c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0x77, 0x3, "3fc53c329d4198588c22ed0aee0b7c1fd3b710d2f90c270507bae5a15f51a11762b19431e753110d888aba9223a17c5f56db5acdb40b5e49f10b6015c45a1377a9f415d4cd2c7cc7781614c703b6a1686576876fd9ac59238a1c4878b67ad80ba8166a417be3f54e2b0247c1f8ef1b4042c033"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x254, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb0, 0x3, "26de5959af4a4a34813d1025c5b80cc13560f01cdc7b2d80113b3be4242f6063e7e3aac2ef5c32c648908bc3581d1c53acf850ea6d924204b4342e18d5808192799720771b687bbb74c09782adb3313bd4eea2345f3b796085a87462706ec777c6dd302558714d0d86d0a63342de40d546954cb95c7f08254b6005303f790fb790698e7eed8200721e1ca7d6df079480954782d03ad35cf4eeb00ade4093a732fc7e9bde14417763e25c30a8"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xa7, 0x3, "f88c80bbdb0ed06b2efbd1b62f1e124493d2ac560846ebbbc3f144b2bd0cab58c63fccd6bbecf442e44bcb8344936c9f0f52a4333b0809854e90742c8d700bd7b457ed55ca60bc38399108ddefc5fefaa65f910e37fe03ba68ba5c1ee81c87fcdd7d8ba80dbaaaecac9fd3331f5d462696e5911591a678a39b7725cfccadf6ea3b5a323b53b2b38d71ccc1858d369f6c31b50fec61d10f2336a3c3c6d2095165ca8dd9"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0e8abdd35ea1e6241c528530d835cae1d61ba31c8118aa238cb30444871a2a820033"}}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "ba6ac01d2f6850ad89dd280fa7cf84ae81a5046ed9333d8da4a5f539ac02c9706e8dfe0cd478a0cdbd36a5c76af0564965504eaf3caa4d73fed5d9a2a2a0bb9f142f22a9d0b8956a5b202310d287ee890c3a1b95a2cb5eb2a1357e3f82874097739e99277c669a109ecc35826dd0293e743a223e0f390b4b4e1f5d43295197e66a6f0e2d782b4ade78550fe7205dd3cb780d8a80ea4231fb"}]}]}, 0x1558}}, 0x48080) exit_group(0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r7, 0x4b63, 0x100000004) r8 = open(&(0x7f0000000100)='./file0\x00', 0x224440, 0x164) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 15:57:32 executing program 2 (fault-call:3 fault-nth:3): clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 15:57:32 executing program 5: clone(0x2004a9d3c7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KIOCSOUND(r4, 0x4b63, 0x1000000000000) [ 1186.050711][ T2818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:32 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b35, 0x100000004) [ 1186.091599][ T2816] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 15:57:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:32 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3697, 0x1}}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macvlan1\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040051}, 0x4000) 15:57:32 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b36, 0x100000004) [ 1186.474673][ T2853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1186.579323][ T2857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1186.654973][ T2861] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:57:35 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000078) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:35 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x2, 0x100000002) 15:57:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) recvfrom$netrom(r3, &(0x7f0000000140)=""/126, 0x7e, 0x40000002, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@null, @bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast]}, 0x48) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 15:57:35 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b37, 0x100000004) 15:57:35 executing program 5: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:57:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1189.307794][ T2901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1189.316486][ T2896] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:36 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x15, 0x1}, 0x7) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0xee01}}) msgsnd(r1, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) msgrcv(r1, &(0x7f0000000040)={0x0, ""/128}, 0x88, 0x2, 0x2800) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:57:36 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x10, 0x100000002) 15:57:36 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b3a, 0x100000004) 15:57:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:36 executing program 5: setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v2={0x2000000, [{0x7, 0xe5d}, {0x4, 0x1}]}, 0x14, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000040)={[], 0x77b, 0x20, 0x6, 0x0, 0x2, 0x1000, 0x1, [], 0x1}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000002c0)={0x0, 0x64, 0x87de884, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x99096d, 0x6, [], @ptr=0xe5}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20040, 0x0) ioctl$KIOCSOUND(r4, 0x4b63, 0x100000004) 15:57:36 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x1274, 0x100000002) [ 1189.717449][ T2943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:38 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101002, 0x0) sendmsg$AUDIT_USER(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x3ed, 0x200, 0x70bd29, 0x25dfdbfb, "770a2c02a4e33ea74f6593823427d7bcbaf1d108eed9b07191a117131dc3fb1cf0a7b331d0242b51d29a1168cb411856acce2a5d337a78672c4d956816dd72329e2c550e3535b238a38e07e1467bf5701518854906363669fe36437d09", [""]}, 0x70}}, 0x800) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:57:38 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b3b, 0x100000004) 15:57:38 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000079) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xc040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'xfrm0\x00', 0x200}) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 15:57:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:38 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x100000002) [ 1192.417445][ T2978] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1192.449109][ T2980] Unknown ioctl 20996 [ 1192.496969][ T2999] Unknown ioctl 20996 15:57:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:39 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b30, 0x100000002) 15:57:39 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b3c, 0x100000004) 15:57:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_x25_SIOCDELRT(r8, 0x890c, &(0x7f0000000140)={@remote={[], 0x0}, 0x1, 'veth1_to_batadv\x00'}) 15:57:39 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$security_ima(r2, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0x5, "e66f5043b63f2d85d44f384224fd1067e8"}, 0x13, 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x125280, 0x0) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x5) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x4, 0x7, 0x1, 0xfffff001, 0x8, "009fd9b860c1f0169834ce8575825dd0788bb1"}) [ 1192.705498][ T3011] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:39 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b31, 0x100000002) 15:57:39 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b3d, 0x100000004) [ 1192.832151][ T3023] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1193.009446][ T3045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:42 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000007a) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:42 executing program 5: socketpair(0x28, 0x4, 0x81, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x50, r2, 0xc91add0bf88807dd, 0x0, 0x0, {0xf}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}}, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4c683c1c418f71b2629000000", @ANYRES16=r2, @ANYBLOB="20002dbd7000fedbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b001d4a4a644ffe0548", @ANYRES32=r3, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r5, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0000000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000001}, 0x810) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r6, 0x4b63, 0x100000004) 15:57:42 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b32, 0x100000002) 15:57:42 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b40, 0x100000004) 15:57:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000400)={0x3, 0x0, "1537854dbfedcf1ad15bfb637ed6a15232a8d01852ab7d81960ae10dad7a2f9df4a791c0a6dabe979022723188e40b7cb0bf5e9075e9ed443901200541712e83d680137eced48062430b900403e525b7be715abc8553896f4bb19cac14377caf0846cf6afc05be21b0894f6b47cf045c4900fd6be42b89742a8294b46e67e62689bf7b4c3482048491ff2394d8d056d9120693bbb8f75b1b12ac9ba50f82368282bc732976f2877acff63bc3005826cbc60a233382c5f10a872a47c98236fac4d008121955e280266d89e5de3cbb31b0acd3ab9f9fed748fc95ea66a6058838eee03559358fb"}, 0xee, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r3, 0xc, 0xa}, &(0x7f0000000280)=ANY=[@ANYBLOB="656e633d706b63733120686173683d63fda66d612d6e656f6e000000000000000005000000000000000055010000000000000000000000000000002000000900"/79], &(0x7f0000000300)="309a6f8b53227af5bc9440a4", &(0x7f0000000340)="1b6e67988a57c09a51b3") ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) msgctl$IPC_RMID(0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000003c0)=""/44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCGETX(r6, 0x5432, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 1195.544358][ T3074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:42 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b33, 0x100000002) 15:57:42 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x5, [@null, @bcast, @default, @bcast, @null, @null, @default, @default]}) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) [ 1195.587064][ T3071] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:42 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b41, 0x100000004) 15:57:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:42 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b34, 0x100000002) 15:57:42 executing program 5: socket$pppoe(0x18, 0x1, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) [ 1195.952673][ T3126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:45 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000007b) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b44, 0x100000004) 15:57:45 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KIOCSOUND(r1, 0x4b63, 0x100000001) 15:57:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 15:57:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b35, 0x100000002) 15:57:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b46, 0x100000004) 15:57:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1198.727860][ T3171] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:45 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000080)={0x8000, 0x8a, 0xd85, 0x1, 0x100}) epoll_wait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x6) 15:57:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b36, 0x100000002) 15:57:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b47, 0x100000004) 15:57:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:48 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000007c) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:48 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x1) select(0x40, &(0x7f0000000000)={0x80000000, 0x6, 0x7, 0x0, 0x100, 0x400, 0x8, 0x80}, &(0x7f0000000040)={0x5, 0x9, 0x7, 0x0, 0x8001, 0x80000001, 0x2, 0xffffffff}, &(0x7f0000000080)={0x100000001, 0x1bb0, 0x2, 0x401, 0x5, 0x0, 0x2, 0x3f7}, &(0x7f00000000c0)) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x3, 0x222040) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r1 = msgget$private(0x0, 0x444) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000140)={0xa92c, 0x7}) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000100)=""/28) exit_group(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r4, 0x4b63, 0x100000004) 15:57:48 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b37, 0x100000002) 15:57:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000240)={0x0, 0x6be1, 0x1, 'queue1\x00', 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r6 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r8, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @raw_data=[0x8, 0x80, 0x173, 0x1504, 0x3, 0x100, 0x7ff, 0x9, 0x7fff, 0x0, 0x8, 0x6, 0x4, 0x7f, 0x81, 0x8, 0x7, 0xd45, 0x3, 0x0, 0xffffff0d, 0x5e83, 0xce, 0x1, 0x800, 0x9, 0x9, 0x1, 0x5, 0x8, 0x101, 0xa9]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 15:57:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b48, 0x100000004) 15:57:48 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KIOCSOUND(r1, 0x4b63, 0x100000004) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) 15:57:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1201.733298][ T3256] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b49, 0x100000004) 15:57:48 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b3a, 0x100000002) 15:57:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:51 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000007d) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:51 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x404b80) 15:57:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b4a, 0x100000004) 15:57:51 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b3b, 0x100000002) 15:57:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$negate(0xd, r4, 0x800, 0x0) keyctl$clear(0x7, r4) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x10001) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x78, 0x200, 0x1, 0xfca8, 0x4}}) 15:57:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1204.831283][ T3342] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:51 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b3c, 0x100000002) 15:57:51 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0x800, 0x0) keyctl$set_timeout(0xf, r0, 0x4) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x9, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x7) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r3, 0x4b63, 0x100000004) 15:57:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b4b, 0x100000004) 15:57:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:51 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b3d, 0x100000002) 15:57:54 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000007e) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:54 executing program 5: clone(0x200210cc5fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:57:54 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b4c, 0x100000004) 15:57:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r3) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$negate(0xd, r4, 0x800, 0x0) keyctl$get_security(0x11, r4, &(0x7f0000000080)=""/78, 0x4e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 15:57:54 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b40, 0x100000002) 15:57:54 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) [ 1207.868645][ T3428] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:54 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b4d, 0x100000004) 15:57:54 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b41, 0x100000002) 15:57:54 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b4e, 0x100000004) 15:57:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1208.279896][ T3428] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1208.308694][ T3480] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:57 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000082) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:57:57 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) fallocate(r0, 0x20, 0x80, 0x1f) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b63, 0x100000004) 15:57:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b44, 0x100000002) 15:57:57 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b52, 0x100000004) 15:57:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f00000038c0), 0x4000000000000a8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x2f, 0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) dup2(0xffffffffffffffff, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 15:57:57 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b60, 0x100000004) [ 1210.938597][ T3511] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1211.039634][ T3517] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:57:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b46, 0x100000002) 15:57:57 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$midi(r2, &(0x7f0000000000), 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x4}) 15:57:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:57:57 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b61, 0x100000004) [ 1211.241619][ T3537] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 15:57:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b47, 0x100000002) 15:58:00 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000083) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x9, 0xffff, 0xff00, 0xd82}, 0x8) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 15:58:00 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b62, 0x100000004) 15:58:00 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b48, 0x100000002) 15:58:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf80000040109021200010000000009040000002e5d8b00"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x56, &(0x7f0000000080)=@generic={0x3, 0x0, 0x4e, "cf51cd1d", "999675633f5e2127177de8b49573a650340c47ac04ca5e4341883df1039ebd85a2380d0b004334e9c1022e8258e95012b1e42dadfbdd5d20b6761240ea6b6f79520b00d4dce925fbebf123758ffe"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0xfffffffc, 0x2, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000180)={'raw\x00'}, &(0x7f0000000200)=0x54) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x308, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000040), {[{{@arp={@loopback, @local, 0xff, 0xffffff00, 0x6, 0x1, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xbdce, 0x5, 0x800, 0x3, 0x6, 0x8001, 'veth1_vlan\x00', 'batadv0\x00', {}, {}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @multicast2, 0xf, 0xffffffff}}}, {{@arp={@empty, @private=0xa010102, 0x0, 0xff000000, 0x8, 0x8, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0xfffc, 0x8, 0x3f, 0x3, 0x0, 0x1, 'bond_slave_0\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x84}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x2c}, @mac=@dev={[], 0x19}, @empty, @empty, 0x4}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x440) dup2(0xffffffffffffffff, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 15:58:00 executing program 5: syz_mount_image$afs(&(0x7f0000000040)='afs\x00', &(0x7f0000000080)='./file0\x00', 0x7fff, 0x8, &(0x7f0000000540)=[{&(0x7f00000000c0)="30c1f777de0389972db60204915a80038cd3", 0x12, 0xffffffffffffffff}, {&(0x7f0000000100)="5f398360286a4c64129dbde5cc57d6923663de21e8e788989ad8d4f09f6c15192d2211acdc09c88979865a9dc15c8cad7b60848a37720f4c9de54804be6075f063627a6c587676f7ba2d7e4c8cf169adbeb2372b954963bf8770e32c3d164fe2", 0x60}, {&(0x7f0000000180)="12620c1e54f159b070bd1a9bb2b303a3ba1e27d1b06f7ed49685347880988f6cc8823cde04c3bef9e7ec7d32928306ef99487a7d26fd68e3a4e1fd245592f21b71c59cf73778fecb566e4e6fa02d1fab0c03bac6d9a8be1ecfb90fa4aeb248b214c92e1427e87d5682e001b477ae544a56dcaa8f1635264ac145a1bdf4d61358b5ae99c42cae8fa38f6e74d28f62235724bfbda0f28ac3bc0af6fdba7e", 0x9d}, {&(0x7f0000000240)="e8", 0x1, 0x6}, {&(0x7f0000000280)="b44cade02bc25436e9bfebe9b9c7455feec9fb8a9b03c348836e2f60b0d3d4a28ba7010de3f15b3231c6666ccf7a2146e2690b387fa5887f1f52c392186bc6fb84001e9f0d33186f5868d853950a3a65184901998c0ffd5a9b0f0a6fbd109f5c39496c125ea519b24a80ab2441e9f7b4c1b17c2ee1f9b7afdfde419a287edd541b41a8eb9fefb77d87ec667f6f2eebd341723899fde101e816507f57452d66c0182ee531ea889213cbfab096886bbd0a58db4d02ff6fe1e522f5b6b1064238fc1ec55f73b4f7728a7de37caf4178926eec7f", 0xd2, 0x2}, {&(0x7f0000000380)="d5675cb22f34643fe1c0fe351473c1905e7b2bd27493747f256d6dda26a999f38b2b8ba8c20c71d8f49b8799a1a72e5c365f00a76be4332d07cdfe40bf77b141d8c78398ee2f13395b8396b61254dc07f4983300c2039699038604977a1f12353558c0edd306f41b8b49e88e9a4d91da7fb2fc1579943047e813bc5df3007045ea9f3b31b7f221eeb1e4d96e7dae6a6fb43d2c816aeda925c3c3f26dfc66753ff8fb0ca9cb216ac30d4f6276e6b81825cf41a31595d654ca12fbd66aec7ba8e634ab18b79bc4353701faa87c291f1837f91f02f702ace5311ecbf893f6a7e60424aa2154a20670bd5c7e082126419154a1c94c363abbb895ae", 0xf9}, {&(0x7f0000000480)="3cdc639bbfab24f2f36e92736e59191361b80c3daf5389f632fc32c4d10bab398e2ad19920e433a19fd07a7095ec8242b2a9fa44b766ba2421a7b051c8b6ce16da8ce2e1a9205ce2815224daea", 0x4d, 0xffffffffffffffe1}, {&(0x7f0000000500)="e94db4384550d6818a969727a1759493f8bd5aaac4541b119cf9f262b7ea8e859ec6cf", 0x23, 0x3860}], 0x20, &(0x7f0000000600)={[{@flock_write='flock=write'}, {@flock_openafs='flock=openafs'}, {@flock_openafs='flock=openafs'}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x32, 0x64, 0x38, 0x36, 0x38, 0x61, 0x33], 0x2d, [0x37, 0x61, 0x66, 0x34], 0x2d, [0x7, 0x63, 0x37, 0x61], 0x2d, [0x33, 0x65, 0x1, 0x32], 0x2d, [0x35, 0x34, 0x2, 0xcd576db3d42d9bae, 0x32, 0x64, 0x36, 0x61]}}}, {@seclabel='seclabel'}, {@dont_appraise='dont_appraise'}, {@dont_measure='dont_measure'}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/input/mouse#\x00'}}, {@dont_hash='dont_hash'}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, '})H&%:!@'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xa) 15:58:00 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) [ 1213.955309][ T3587] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:00 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b49, 0x100000002) 15:58:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1214.153802][ T3610] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:00 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b4a, 0x100000002) [ 1214.194399][T10313] usb 2-1: new high-speed USB device number 4 using dummy_hcd 15:58:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1214.372788][ T3625] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1214.633516][T10313] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1214.650457][T10313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 1214.675514][T10313] usb 2-1: SerialNumber: syz [ 1214.688587][T10313] usb 2-1: config 0 descriptor?? [ 1214.953321][T10313] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1215.182592][ T3575] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 1215.493238][T10313] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1215.515599][T10313] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 1215.584360][T10313] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1215.653170][T10313] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1215.678202][T10313] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1215.743737][T10313] asix: probe of 2-1:0.0 failed with error -71 [ 1215.764429][T10313] usb 2-1: USB disconnect, device number 4 [ 1216.442950][T10313] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1216.883036][T10313] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1216.892101][T10313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 1216.903071][T10313] usb 2-1: SerialNumber: syz [ 1216.921294][T10313] usb 2-1: config 0 descriptor?? [ 1217.089001][T10313] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1217.110802][T10313] asix: probe of 2-1:0.0 failed with error -71 [ 1217.133040][T10313] usb 2-1: USB disconnect, device number 5 15:58:04 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000084) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008084}, 0x4800) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffff67, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000810) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x524280) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:58:04 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b64, 0x100000004) 15:58:04 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b4b, 0x100000002) 15:58:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0xbca80, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x4, 0x6, 0x301, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20004880) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) dup2(r4, r7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 15:58:04 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b65, 0x100000004) [ 1217.756002][ T3680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1217.777831][ T3678] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:58:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:04 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b4c, 0x100000002) 15:58:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000041f900"/20], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x50) r3 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x10, @tick=0x8001, 0x20, {0x7f, 0x4}, 0x8, 0x0, 0x80}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000040)={0xa20000, 0x10000, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x98092a, 0x1}}) ioctl$KIOCSOUND(r4, 0x4b63, 0x100000004) 15:58:04 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b66, 0x100000004) 15:58:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:07 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000085) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:07 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b4d, 0x100000002) 15:58:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:07 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000180)={0x3, @bcast, r4}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xffffffffffff0001) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x17, 0x12, 0xf, &(0x7f0000000240)}) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000000)={0x5, 0xff, [0x0, 0x4b, 0x9, 0x7, 0x1ff]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000040)=0x28880, 0x4) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:58:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4138ae84, &(0x7f0000000000)={0x0, 0x0, [0x2000000, 0x0, 0x0, 0x6, 0xfdfdffff]}) r4 = dup2(0xffffffffffffffff, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r9 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 15:58:07 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b67, 0x100000004) [ 1220.790286][ T3753] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:07 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b68, 0x100000004) [ 1220.868472][ T3754] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=2085603429 (266957238912 ns) > initial count (186522199040 ns). Using initial count to start timer. 15:58:07 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b4e, 0x100000002) 15:58:07 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1, r1}) exit_group(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b63, 0x100000004) 15:58:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:07 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b69, 0x100000004) 15:58:07 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) [ 1221.150706][ T3801] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1221.613651][ T3781] kvm: vcpu 130: requested lapic timer restore with starting count register 0x390=2085603429 (266957238912 ns) > initial count (186522199040 ns). Using initial count to start timer. 15:58:10 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000086) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b52, 0x100000002) 15:58:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:10 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b6a, 0x100000004) 15:58:10 executing program 5: clone(0x2001a2d47fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x2) 15:58:10 executing program 1 (fault-call:4 fault-nth:0): unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 15:58:10 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b6b, 0x100000004) [ 1223.835997][ T3848] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b60, 0x100000002) [ 1223.905216][ T3851] FAULT_INJECTION: forcing a failure. [ 1223.905216][ T3851] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.976597][ T3851] CPU: 1 PID: 3851 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 1223.985228][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1223.995298][ T3851] Call Trace: [ 1223.998616][ T3851] dump_stack+0x18f/0x20d [ 1224.002974][ T3851] should_fail.cold+0x5/0x14 [ 1224.007587][ T3851] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1224.013320][ T3851] should_failslab+0x5/0xf [ 1224.017757][ T3851] __kmalloc+0x27d/0x340 [ 1224.022015][ T3851] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1224.027583][ T3851] tomoyo_realpath_from_path+0xc3/0x620 [ 1224.033232][ T3851] ? tomoyo_profile+0x42/0x50 [ 1224.037927][ T3851] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1224.043603][ T3851] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1224.049252][ T3851] ? tomoyo_execute_permission+0x470/0x470 [ 1224.055067][ T3851] ? find_held_lock+0x2d/0x110 [ 1224.059849][ T3851] ? get_pid_task+0x116/0x200 [ 1224.064573][ T3851] ? selinux_inode_getsecctx+0x90/0x90 [ 1224.070060][ T3851] ? check_preemption_disabled+0x38/0x220 [ 1224.075813][ T3851] ? __sb_end_write+0xf8/0x1d0 [ 1224.080595][ T3851] ? vfs_write+0x161/0x5d0 [ 1224.085030][ T3851] security_file_ioctl+0x50/0xb0 [ 1224.089989][ T3851] ksys_ioctl+0x50/0x180 [ 1224.094249][ T3851] __x64_sys_ioctl+0x6f/0xb0 [ 1224.098853][ T3851] do_syscall_64+0x60/0xe0 [ 1224.103288][ T3851] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1224.109187][ T3851] RIP: 0033:0x45cb19 [ 1224.113078][ T3851] Code: Bad RIP value. [ 1224.117143][ T3851] RSP: 002b:00007fb157ec9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1224.125559][ T3851] RAX: ffffffffffffffda RBX: 00000000004f1940 RCX: 000000000045cb19 [ 1224.133542][ T3851] RDX: 0000000020000180 RSI: 000000004008af21 RDI: 0000000000000003 [ 1224.141526][ T3851] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1224.149510][ T3851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1224.157492][ T3851] R13: 000000000000060d R14: 00000000004c8f47 R15: 00007fb157eca6d4 15:58:10 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b6c, 0x100000004) 15:58:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1224.226346][ T3851] ERROR: Out of memory at tomoyo_realpath_from_path. 15:58:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b61, 0x100000002) 15:58:11 executing program 1 (fault-call:4 fault-nth:1): unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) [ 1224.340989][ T3875] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1224.543874][ T3886] FAULT_INJECTION: forcing a failure. [ 1224.543874][ T3886] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.600043][ T3886] CPU: 1 PID: 3886 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 1224.608799][ T3886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1224.618866][ T3886] Call Trace: [ 1224.622180][ T3886] dump_stack+0x18f/0x20d [ 1224.626662][ T3886] should_fail.cold+0x5/0x14 [ 1224.631282][ T3886] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1224.636790][ T3886] should_failslab+0x5/0xf [ 1224.641341][ T3886] __kmalloc+0x27d/0x340 [ 1224.645615][ T3886] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1224.651354][ T3886] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1224.656573][ T3886] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1224.662313][ T3886] tomoyo_encode+0x28/0x50 [ 1224.666764][ T3886] tomoyo_realpath_from_path+0x186/0x620 [ 1224.672427][ T3886] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1224.677903][ T3886] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1224.683553][ T3886] ? tomoyo_execute_permission+0x470/0x470 [ 1224.689371][ T3886] ? find_held_lock+0x2d/0x110 [ 1224.694153][ T3886] ? get_pid_task+0x116/0x200 [ 1224.698878][ T3886] ? selinux_inode_getsecctx+0x90/0x90 [ 1224.704362][ T3886] ? check_preemption_disabled+0x38/0x220 [ 1224.710104][ T3886] ? __sb_end_write+0xf8/0x1d0 [ 1224.714889][ T3886] ? vfs_write+0x161/0x5d0 [ 1224.719332][ T3886] security_file_ioctl+0x50/0xb0 [ 1224.724304][ T3886] ksys_ioctl+0x50/0x180 [ 1224.728568][ T3886] __x64_sys_ioctl+0x6f/0xb0 [ 1224.733175][ T3886] do_syscall_64+0x60/0xe0 [ 1224.737607][ T3886] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1224.743508][ T3886] RIP: 0033:0x45cb19 [ 1224.747399][ T3886] Code: Bad RIP value. [ 1224.751469][ T3886] RSP: 002b:00007fb157ec9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1224.759884][ T3886] RAX: ffffffffffffffda RBX: 00000000004f1940 RCX: 000000000045cb19 [ 1224.767863][ T3886] RDX: 0000000020000180 RSI: 000000004008af21 RDI: 0000000000000003 [ 1224.775844][ T3886] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1224.783837][ T3886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1224.791818][ T3886] R13: 000000000000060d R14: 00000000004c8f47 R15: 00007fb157eca6d4 [ 1225.257787][ T3886] ERROR: Out of memory at tomoyo_realpath_from_path. 15:58:14 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000087) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:14 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b6d, 0x100000004) 15:58:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b62, 0x100000002) 15:58:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:14 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ptrace$getregs(0xc, r0, 0xa547, &(0x7f0000000000)=""/139) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x20000000) inotify_rm_watch(r1, r2) inotify_rm_watch(0xffffffffffffffff, r2) exit_group(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r3, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000000c0)={0x9000000000000000, 0x2, 0x7, 0x2, 0x14}) 15:58:14 executing program 1 (fault-call:4 fault-nth:2): unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) [ 1227.579942][ T3906] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000002) 15:58:14 executing program 5: clone(0x2000b305cfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$KIOCSOUND(r1, 0x4b63, 0x100000004) 15:58:14 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b70, 0x100000004) 15:58:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:14 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) [ 1227.791787][ T3929] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:14 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) 15:58:17 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000088) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:17 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b64, 0x100000002) 15:58:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:17 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b71, 0x100000004) 15:58:17 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x2, &(0x7f0000000180)={0x0, r1}) 15:58:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}}, 0x8000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b63, 0x100000004) 15:58:17 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x10, &(0x7f0000000180)={0x0, r1}) [ 1230.501767][ T3977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:17 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b65, 0x100000002) 15:58:17 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$getregset(0x4204, r1, 0x3, &(0x7f00000000c0)={&(0x7f0000000000)=""/162, 0xa2}) 15:58:17 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b72, 0x100000004) 15:58:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:17 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x1279, &(0x7f0000000180)={0x0, r1}) [ 1230.847022][ T4010] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:21 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000089) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:21 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b66, 0x100000002) 15:58:21 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4bfa, 0x100000004) 15:58:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:21 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4609, &(0x7f0000000180)={0x0, r1}) 15:58:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="d4af7c82f7dcd433fb16109db92fca69024a25e99a20eb373d73d2514adcb4ba633b017fca78fde15bf82f7f2f7c8a245c22c37c765de741a0900ab59628215b7156ffa7ed4a58e16fda40dd231893e0f4ae0c0bb28384879724e9c6e753394b31d19887cc160555e0293ce093e476441eaa69", 0x73, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="473703ffe029ef8bc58b76feb9396f8eb745f23de8ae3b176a4c31894c9da4f72f7d0970d48cf077e2bb8745c4ea20a596adfbd65e8c", 0x36, r5}) 15:58:21 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b67, 0x100000002) [ 1234.979030][ T4046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:21 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x2, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x68}}, 0x4000041) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b63, 0x100000004) 15:58:21 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4bfb, 0x100000004) 15:58:21 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4b47, &(0x7f0000000180)={0x0, r1}) 15:58:21 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b68, 0x100000002) 15:58:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1235.325459][ T4083] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:24 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000008a) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:24 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4b49, &(0x7f0000000180)={0x0, r1}) 15:58:24 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4c00, 0x100000004) 15:58:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b63, 0x100000004) 15:58:24 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b69, 0x100000002) 15:58:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1237.878209][ T4114] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:24 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4b4c, &(0x7f0000000180)={0x0, r1}) 15:58:24 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b6a, 0x100000002) 15:58:24 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4c01, 0x100000004) 15:58:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:24 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x62, 0x5b9, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990afb, 0x5, [], @value=0x3}}) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080)={0x4a}, 0x4) exit_group(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r3, 0x4b63, 0x100000004) 15:58:24 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4c00, &(0x7f0000000180)={0x0, r1}) [ 1238.190861][ T4144] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:27 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000008b) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:27 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b6b, 0x100000002) 15:58:27 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5409, 0x100000004) 15:58:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:27 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000080)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000040)={0x4}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x6, &(0x7f0000000480)=[{&(0x7f0000000140)="a6b70c665d7d2bb2c36b2ac8d6c3ca9dff6cb59d18737f482167689cf698bbabfa0f2f3cdc068f3670e975468700cbf1fdb83ae5a5a8", 0x36, 0x8}, {&(0x7f0000000240)="01e86642859093bd3c3e96113c0837de0cabbc7f2de3a49dbe8ae41e1e739ff0ddacbfe636dcdce6e7038f9ee6fd2b3a54e58fa47e5df8857cf32ca74e142b0aa90b4ca174ec24dbbd14fd6ba70604f6fec962d6184e56505404bc9a379d5f77a756c45adba889c498bd464b067c140dab3de521a0cdf1f4b64eb2b8e82e217c64128c8f81ea1e1653a3cd57486d4972d0f1b69d7acb", 0x96, 0xfffffffffffffff9}, {&(0x7f0000000300)="7e765ca4face1a86e88e2375780ab9c0a4e757049a3efa77a139d2e3153fc1ccc8124183fcfa639571ea8f9ae0320046e18374120e7593c69ca87ed10c2f5992d67408697413bf4c1d1f8111056659c3bf003052a28d8e180be35513694b729228193d5a971daf7ff13e646791b27f760d694e7d44a871f89eb72d0624b5babf3ff544f2af7cdc11bd0a1e6d5b42", 0x8e, 0x1}, {&(0x7f0000000180)="95f5e073ca74735f7c14918de04ec85f8ba4f713a21d1037726f696be89c6bdc5da70df5d5227d47955730a92d9d3a99bf9d", 0x32, 0xffffffff}, {&(0x7f00000003c0)="6fdcd66041f0e647829e684ff2aa4bf07de9d187f7532fde79141ec1c33fdec47709969be3495e918babe8480d9d6c4f421a3fafab3c378e84823393d9e937fe9055e597205c82a528e332df4bf6a3ad5ab096ce4f4d3f49f27e326e9b61bae938c79637698e47e093e9eb8ead1e47d7377602f281f086eac40222381d821d247e97dfb2c8ef8309c565b1ee2636d2d42e91b67550327fe9f42bc0af30568b1b752bdd33dc7fd250b9cde78da20bb5fc952fbf8424fcb4d7561be2e0ca8fe0", 0xbf, 0x1}, {&(0x7f00000001c0)="317929318a668fc2aaa3859adf2d9341c432bd795aaae348f25b18", 0x1b, 0x1f}], 0x100000, &(0x7f0000000540)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c66696c655f756d61736b3d30300000000000000000303030303030303030303030302c66696c655f756d61736b3d303030303030303030303030303030303030303030313103006172743d3078666666666680006666666666666666392c726f6f74636f6e746578743d73797374656d5f752c66756e633d4250524d5f437d45434b2c736d61636b66737472616e736d7574653d2c00"]) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000000)) ioctl$KIOCSOUND(r2, 0x4b63, 0x100000004) 15:58:27 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4c01, &(0x7f0000000180)={0x0, r1}) 15:58:27 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b6c, 0x100000002) [ 1240.763255][ T4177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:27 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x540b, 0x100000004) 15:58:27 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4c05, &(0x7f0000000180)={0x0, r1}) 15:58:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:27 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b6d, 0x100000002) 15:58:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) clone(0x200603041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x2, 0x1, 0x3, "84c9cae3900982d26808bb2be7991ca6550900000000000000aa95ca420200", 0x31384142}) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x61) ioctl$KIOCSOUND(r2, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socket(0xa, 0xa, 0x7fffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040)) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000000)) [ 1241.117020][ T4219] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1241.226330][ T4228] IPVS: ftp: loaded support on port[0] = 21 [ 1241.319391][ T4228] lo speed is unknown, defaulting to 1000 [ 1241.871296][T24739] tipc: TX() has been purged, node left! 15:58:31 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000008c) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:31 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x540c, 0x100000004) 15:58:31 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5411, &(0x7f0000000180)={0x0, r1}) 15:58:31 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b70, 0x100000002) 15:58:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r1, 0x5606, 0x2) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000000)=0x1f) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) statx(r5, &(0x7f0000000080)='./file0\x00', 0x800, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0x3, @bcast, r6}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000038c0), 0x4000000000000a8, 0x0) ioctl(0xffffffffffffffff, 0x6, &(0x7f0000000240)="5bc7b1ff41e6d5553b78f3966b1190e9d66195e9ac3142aed7bb83fa76bb8e62db614b2a8ec5aaafe19b58d2632f027d917e4e634d77288ad9237821e0f8c619a0558dc948928e590b038e42315988c69c424afeba2a4a10f8b0921b00ad832d4d546dd15f76f341a300d26559eeee582ed4bc3b39995891a45704ffa3ce2efad114db6970fc46146e9156f7f6555de01a2eb6831aca95850b1d223321357ce15126c874bcdc0e4a1c86bb7dbb0c846b5808368a16bdab423660109bf09713a05c91f4d88c66204ffd12c7ec050e1e9e4c0f241397902c138896c52dc506f2c6f803174e26d48100b1cb0be2ec372339a1e54a971b05f3f0d3e601dfa76cff090782d60dd59657fb4f4e87b37c55591b922a9f9952ffde4d1658ea43e184ddac5b5f2512202a278346b8f8f9073a4d6b2974bfec8a0a81e3d425ee48e19a3b2630f612fc4bd4692908420969c1677efc408a9ac1866d88b800cee375abe387555c0b7ab0b061d59dcd4309681a4597115bbba8ecef1e1f5750919ca0c27fb560e1dad976ae658c155e624fbbfd0147622b0ac17cce52ec68bc1578a9755748d37511533aed01c76135c4b982929d7276bd314f890b4c4fe491fea4cb05b68893274ce2afd4c0670f9c3c4962b7d8978b80b4847211166015fa82f0d31f2add71b7c215f9edb9ba0008b13516d976a0e409a581234fea0bd7bed6db9ac797e3417dcfde792338802f80c077513664c026f73846b11476b3dadded7bbce167c73771555d936c5cc179270cdff7ec1f538a382c6240b57b6dbb61e58eb0c570748a1360981723a48f835febc7f91b593f3fcd995a3c18a0b402031474cda73df7d9c3f28adba85bc3c431f3644e863ccd5eb6f2f426e2f210ac58513e7f23a8a77272a7e537b199cd01f2a86300cfc4fc46df303d27edd7ef6638d6832fb3c41be7b8b9d40a0f5cacf76c4a57aa02fe1ee515c00f0d653812bf11c8e0b93015cac0ca2b03ae00fe8ef2e46464fdb9f30eb767e3871b482d510c67a13bec31e6d268a05b1ef56e582bcfa65179e7297d0bf8a06e462fc4833ec61d2ae5564b5657f20ad21a3d005d35275e7a5396a64c033b4ab459f536ce7bb690905b68e849051cb8ec10d21835c6b1eda4d980cbff0614479568f423986f4a10ed3aa5fedfe64c8e507a8815377b1e866cc77ae7e9aa156f5df7b41d1694626960cb6e661a6246c2a4a62fd3709c03518ac7f02201588904638bdddb86a8d91c1b3745d364e828bedc0415510a765664504a45ba7114d1e631937041337da126e1f0459a0beb2d3cf12c89fb5700f7a84240449632c15b72527b5a789715acc550c0038d8a537bf08f71c06f3ad5df031a30fbffc727267b7317f2cd1f56de848004267d6f54f09141593681d542b06eb75c39ee7848fe7362d8ec475ac1e7e51ffaef3e7251800af3a933308ce4748ad6ad77f3becc15245a5b25894f41c6260245594d2fdf2a882d632eb69ede17f2d9f313407fd585d13c5e22e9794ac033dd78f9aba971bed65c8f56adde9977fb4503141b9fc3eff10f74c972200e3af562078f11ca2b27e54ed61aec9d461423e1b201d326405a7e0955bba6874a79f0cd47a958ea39cade61f7f8399c00d0e6fc13246427ef2055201dba90bec5d83cf20010b62efb27317f49b614d1b6dc8deddb0b9ed94ab8c6962e452aaf59030c1d0fe8828e0c854efd2d23b63b5c46a02a9f473f5ae90a6de5b653b27fe62d31419a54a4a63999cd61aac98c9a204986e880d3eb7ab53320cf68470d703c7b86f1e70ffe0a5f00b8476ce849f4522e323dc9fded5c57674019010e6b434cf63c6b90dd8dbe7e974127095b241742252a8b00ff4c5be6470d1048ac5b07aa45b82dc625f913e876e1ef31cc7a1449f111acc5a177b6a1112d1c8c54d9eca4b7a2e09b4e6a7391cec20b4c7427a7486db449f9aedb140675dc3f440de86754d6a57f499b4ad843f8468edc6ef06c38381eca4d12a85ffe806047561b91a8e710bd20a111034a737d70cfa832f10cdd4b44046ce8f960446b85293366cda933203d585c4126011f0d5c6dc602b5c7b2aa8ed40e31e9db1711e8d9da08aa5f157862d86f73ab2783a7e772fa085d29d64b7d7c8754c6b87820ca61d1ecfc093c472b772d1bdfd6a7f2254d58649e0e68e5bdc7367d42bf66d25333a1e4805fa0177ef340568841d848f7b1d9704941234f106d668fa4b4e5fa0b5819d67b7af6c7a62fb27d6ea04c78886747c9819eb718fc1467b59d41125bd8badc79273cfc2e100c9c0413c837ab05d650bde0be612f8d4f588f0c3789b5281e31d6c4696e6f70faa246deba3f8ea3406efaacc77f46b099928a1a205e1535a5b0c5e83b2c6c1696c3f9bc191dd5ddef9e04f92a20e355c034bdb1c73a648ce5991b530046d3ae4c937eb325882aba5b43200413be5702ef5a2f68665b9d16b2286c890041a377d67d671c23a6f672dfd213a5aa2ffc7576fcd49a9b48d8c7042c8bc62301123d7e8d3d83c2e0aaa01418e6bdb3e6c9340683ccf42a8f6d8954928313f7127502ccafb90c4e44b4cf80575820dca641421d3b7fb1714c452dad058cef2f6e5490aac20a36de4db25bb621a6719cc47daf27039df824d46d47f1af553abd193e0ae32465bffd42cba244a2266d796b2f6bd90989616b2f78c506e5bc002cb49d9a1e2ce54d8bcfcadd317a55ee078e99fa70faeea2c5014d9eebecc902560c377476be8b9e03963f0467722bda322c3e19db383ab05d2b4bf26a4378f09ee1c3c3f10f9f314296fd70d959c1c29b6dfa1ca7fa6e93b99a656afe692c8858ea64d64b8aa408ac5fa22cf22119d8c1385f6ec5e925c61ba4063ec9fa63bc8cbbed1c1788001f0d18b9a86f371d97a46f4616aa67879ec82d65d4d47be58ff1d423229148a9ce1437ebda4f56484ac6a2a04910fe999523602d8ea98901b735550819b291e7a7341833b728b563b6c57aecd118ff88c2afff18142da31eb0ade3eff4dd42e2749f16f9baa0554d63a3a3d7054161672525cf95ff442823850e91ea23ac3092cb39b3262a9f772efd237bc50b00add0993285da23f708f5d0e4ce35c8acee688fee3d8ab5e6b56d68b96f094cdc2b5cccb05e6efae1e09968d6603d4ab5df4c03e70931214327243652ce6f131c801cd6bbf8bf1ba1b01d2a310bddf5beedd829d2483ea5d8f915f4079f9afe68d6a5c566c19547dcb70954052d4ff632bfa53fe4f081f5dccdf48edd7011ad51d539c85a72a59e428a8b1dde771d92a9281aac27f3e7c118f47ff94e48d6137cc1b11029b24d9d03bcdf498b6a1a77c6771abc3b19d20c60bd2fabe731cb7f16862b82f00ddf38e3b37c86b8d8b86b5e56834aa3599f2d2c1361d1967718f678aa370d030d9f4d4d2368457518a5a3b4fa6db569d99f16569c48ff2b4fd3075e2ce103177ee0d32f2c675e6c780c70cd0be4afe7e5e091459d799294627e5ccc49e68d645c847b643bef2b81f77aed7141eb590f7c01b29d074d12d306cc17543e40b73260cf3707002750ebef688d3f01cea8a585d5f095f79f24b9cb054eefad909d2a1fe72991a1fb6c003f1311bcf374a85ba6c6fcb907913b8144462a2f6d6f036a2fe3eb3955be936fa03302bdf0067c5e57e37ef8034d268bd893c48d18bbd4478c5de62b447cd8e3b21f219e21c95d70ccde3fbf1c95a182ebd8df60ec3e356041579c07c379bc67d44ee20716a6389aaab54f6f014a21f5feee62d2e5f44c78082e73a811a353a6ba99a93e21784c44eee8efa4966d2fe71662b6a24e8f9115976749a057547e553469859845d4161b4a35088993e22dd85849256f55ce93ae00f90d35634d267584565c9faebd86a35e1624d0b19e93cf59fdbb4fd8661029a47b45dbc08c5ba4bd297847e709796a588a6faf35fe4bccb0fb693b109b002d80a9ccf98bc784f3ee93b13c583d7fdab4d4cddeff0ab4dc0a8cf03d19c02507c9a0a8dd5370689cbe8ffb0a7b70570d9b5026135d8b1061dfb35082dac6c2741d72852f152d7f3168ce52b265418e1c853135df403884777eb087f744e6301f0514bbf7c8719bcfd1e20a9e052b2226e237346afc51572c7881a0b741de00aa3f48f7dafa1f28981291988aed921b3f60ca4667280bf19c7cce156bef32a2fe928cebac83dff999018d282ebd0bcaabe8a4c706d0033bb020b37f0cc4c7c423fb8219bc061a9a0591c4a87bf3a071ed4d2d25219635e39d8e7ace07d7bbc19343ac644839f614ab74fdb2b6bd8ed0eac8bad1e224c0b8ab77c587a429ea20f84b2cba9b16936ac3d920c8751fbf82e60e11ee69721d5ce6714a5ffb23e5a1db5f2f3808ce2b8bac56f7fd312872cfa1087c3eaf2a66436e68d5e43a4b32a2b7dcd358273aae7700ca6df35151826c474a0e087cce3ae64a37b6bdff42036bae03aec3d7daac39c38b906d7a6cec41d6e502cec38904f3df15fc11770e0896510ace7089288fc1f7607b3f90bebd3c578dbe40fa2721aa012cd71eb046c1d9a89c46f58be400efa4bb9d6c37344da26eddd24b08412561e571e1ed156cf26b0c0385ab8b808c6a0ffe02bb96b2fc616fd94af21b07271099f3f3968e703f187a1bc1d637c5e9db9e3737b8f07f2300b07c3350fbb568de2a0d2b9f00464ea46752125b2936a315ec15fd5ecc7940066b2e54b64d7e436cc30dfe901e43b26e83df1c4652b69993e13cceea0eb9a989fff28400eaa661fae5aa1247d598399c731c4e58fe3c860a0097e11dcb44c59dfb424b828d25867a27fc34a804ed51afecf116079444522dd4dee8f3153dc1de2082d08dc2e18f89444f7bcd863b91f40b778edf2133f1a1b16e11078ce7661532a231e1ce1539f1a0abb0fe195780325aca12ed5628a75312d07f8984f1d5dd5ed9d22636c468776e554295b01d646ca78299c9147adcf433c77b80f3408e194e4337efa8dcd7b9e3919ebafc74b2a7a1b8d125ed3a30c0232b8c7e83208c7f78446129fe42b785576c4da2a8222222923c68dfd4daaf01dfb836595c0b11f98d0b1a182b2c715336a0950922933d6302ee4810bc671948fe87b57a84bfb4a0bcb0053ddd879a37215b0bd5c1ca7a3dcdab56cc39e0bb0d6fe25cc904646924652eee317dbef43281c61e8647b664bde927fce6982190495448c5a9c8c46f37befedf807ab1a1389f1f3de316fade9d3e50bbd95bee6d3cdf3b4dadf6f90a32fd87b53d0987775f0987534c52bf891df205fa581c7c8c3abb0e9e024f9cc4c87c68d38fbc910ef18ac98d7ecc885d83e10d9ca901e3fd2c03fec3bd029d5e3b52a9505c52196dbc0a2fd8f28efcd7df231cb3c118389ecf195ed12f78b9b0093560f8cc4d0fe431edfa4a3cc545f9341cbf3aec0dfe325b40f5d984d7f5c491ff64887120f93c9473c1a64bc54f771dfc12b7a599b8978152395c2bbb1ff5ad3d4de06317e478b23cf11e43eac4d82ebb7d863c02c663396e5914fc54e4ca2aba00fc5182a2bee51b9a815d105208d076778a176720d4e1477f24ebff87bcd0ec3ddd4965db8e535653d8e4ec7b32f317da453137134582756d0a4c9cc084de8fc250a580bde852e6f283234530967d4f4ce0b47a909278f7eba41e90175d845f3d88887da2f7b436efb6a3efa04cb0b9927067d40fbee3cf73bca2bb8e667e05b29a5f8b906c417b7ecc4af8939169b2e088729044ba1f2b1c3665d9f412098154fe81d651293f7aca5cea86f9eb0bd4484e4ff4f462f7026c84cf2e9a22570deee5") ioctl$KIOCSOUND(r7, 0x4b63, 0x100000004) 15:58:31 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x540d, 0x100000004) [ 1244.936206][ T4280] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:31 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:58:31 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x541b, &(0x7f0000000180)={0x0, r1}) 15:58:31 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b71, 0x100000002) 15:58:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:31 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x541c, &(0x7f0000000180)={0x0, r1}) 15:58:34 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000008d) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:34 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x540e, 0x100000004) 15:58:34 executing program 5: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) ioperm(0x1000, 0x8, 0x8) 15:58:34 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b72, 0x100000002) 15:58:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:34 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5421, &(0x7f0000000180)={0x0, r1}) 15:58:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:34 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x540f, 0x100000004) 15:58:34 executing program 5: clone(0x1000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:58:34 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5450, &(0x7f0000000180)={0x0, r1}) 15:58:34 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4bfa, 0x100000002) 15:58:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:37 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000008e) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:37 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5410, 0x100000004) 15:58:37 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0xa01, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000002400)=ANY=[@ANYBLOB="744200001e00100028bd7000ffdbdf250d000000a49cb57ee306b98de5a66e224c3eb28b305c496831a2b41322ea7efc34a261aa6b5e9f0204d6b316bc5f3c847d4f516a2f48d20cf82c723058e99297c2fcb5ff1f1c210380080008006401010208002500", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x4274}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000001c0), &(0x7f00000023c0)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x40, 0x2, 0x4, 0x0, 0x0, 0x20080, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x2240, 0x1, 0x4, 0x4, 0x400, 0x6, 0xfffb}, r0, 0xe, r3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r6, 0x4b63, 0x100000004) 15:58:37 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4bfb, 0x100000002) 15:58:37 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5451, &(0x7f0000000180)={0x0, r1}) 15:58:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:37 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:58:37 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5412, 0x100000004) 15:58:37 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5452, &(0x7f0000000180)={0x0, r1}) 15:58:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:37 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4c00, 0x100000002) 15:58:37 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5413, 0x100000004) 15:58:40 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000008f) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:40 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5460, &(0x7f0000000180)={0x0, r1}) 15:58:40 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) r1 = socket$inet(0x2, 0x6, 0x5) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fadvise64(r2, 0xc1d, 0x4, 0x2) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000100050040004000050f"], &(0x7f0000000040)=0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x1e, &(0x7f0000000100)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000080)={r7, 0x0, 0x3, [0x95a, 0xfdff, 0xfff]}, 0xe) 15:58:40 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4c01, 0x100000002) 15:58:40 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5414, 0x100000004) [ 1253.533991][ T4474] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:40 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4c80, 0x100000002) 15:58:40 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5501, &(0x7f0000000180)={0x0, r1}) 15:58:40 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5415, 0x100000004) 15:58:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:40 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x188c0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x121000, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000180)={0x7, 0x79, 0x1}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='\x00', 0x0, 0x10}, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$char_usb(r5, &(0x7f0000000240)="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", 0x1000) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000000)={0x718a, 0xffffffff, 0x9, 0x2, 0xdb, "c2b33791442d3432c36a6888f9d1a891c17b4a", 0x80, 0x8}) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) [ 1253.796299][ T4500] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:40 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4c81, 0x100000002) 15:58:43 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000090) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:43 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5509, &(0x7f0000000180)={0x0, r1}) 15:58:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:43 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5416, 0x100000004) 15:58:43 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x9a0000, 0x10000, 0x4, r1, 0x0, &(0x7f0000000040)={0x9a0917, 0x9, [], @p_u8=&(0x7f0000000000)=0x4}}) sendto$isdn(r2, &(0x7f00000000c0)={0x81, 0x8000, "e33361dbde150fe872c473a7a9cb7263307a4bc90752d8fbddd23998d6ae084db2cc4da404a7a805cfbbec6d85378effaa04ea704f36812759a01d6d0aeaeb60690aac4160fbec500b8ec0ee255c9a8d371d2c40661e40d579fa0308bb6e204142d5b4e14eebabbdfe936504a04eb377ee02d09239179aeb2916aaad67535a25d4057827100474"}, 0x8f, 0x4000400, 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:58:43 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5409, 0x100000002) [ 1256.441578][ T4537] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:43 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x550c, &(0x7f0000000180)={0x0, r1}) 15:58:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:43 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x540b, 0x100000002) 15:58:43 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5418, 0x100000004) 15:58:43 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) [ 1256.668382][ T4564] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:43 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x551f, &(0x7f0000000180)={0x0, r1}) 15:58:45 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000091) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x540c, 0x100000002) 15:58:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x541b, 0x100000004) 15:58:45 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000008da665b47a8", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400013ae18e907900", @ANYRES32=r8, @ANYBLOB="00000000f1ffffff000000000b00010008007072696f000004000200"], 0x34}}, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40181640}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@migrate={0x118, 0x21, 0x400, 0x70bd2c, 0x25dfdbfb, {{@in=@remote, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e23, 0x800, 0x4e21, 0x400, 0xa, 0x0, 0x20, 0x0, r1, r4}, 0x0, 0x1}, [@tfcpad={0x8, 0x16, 0x55}, @mark={0xc, 0x15, {0x35075c, 0x6}}, @proto={0x5, 0x19, 0x6c}, @policy={0xac, 0x7, {{@in6=@private1={0xfc, 0x1, [], 0x1}, @in6=@loopback, 0x4e21, 0x400, 0x4e22, 0xd5, 0xa, 0x20, 0x20, 0x2f, r8, r9}, {0x9, 0x1, 0x3, 0x1, 0x6, 0x101, 0x1ff, 0x6}, {0x200, 0x7, 0x5, 0x2}, 0x80, 0x6e6bbc, 0x2, 0x1, 0x1, 0x2}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2100, 0x0) ioctl$KIOCSOUND(r0, 0x4b63, 0x100400004) 15:58:45 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x6364, &(0x7f0000000180)={0x0, r1}) [ 1259.385083][ T4606] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:46 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x540d, 0x100000002) [ 1259.440935][ T4610] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:58:46 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x541c, 0x100000004) 15:58:46 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000180)={0x5, 0x7fff, 0x2, 0x39e, [], [], [], 0x3, 0x6, 0x2, 0x0, "ea5af6935f6c2933c7ea1ece87b3b14e"}) exit_group(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f00000038c0), 0x4000000000000a8, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)=0x9) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r3, 0x4b63, 0x100000004) 15:58:46 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x890b, &(0x7f0000000180)={0x0, r1}) [ 1259.511403][ T4627] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:58:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:46 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x8912, &(0x7f0000000180)={0x0, r1}) [ 1259.713399][ T4650] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:48 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000092) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:48 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x540e, 0x100000002) 15:58:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x541d, 0x100000004) 15:58:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:48 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x8933, &(0x7f0000000180)={0x0, r1}) 15:58:48 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KIOCSOUND(r1, 0x4b63, 0x100000004) [ 1262.322028][ T4679] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:49 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x541e, 0x100000004) 15:58:49 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x8982, &(0x7f0000000180)={0x0, r1}) 15:58:49 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="0300"/16]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_DISCARDURB(r4, 0x550b, &(0x7f0000000000)=0x80000000) 15:58:49 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x540f, 0x100000002) 15:58:49 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x541e, 0x100000004) [ 1262.554476][ T4702] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1264.564647][ T0] NOHZ: local_softirq_pending 08 15:58:51 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000093) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:51 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x89e4, &(0x7f0000000180)={0x0, r1}) 15:58:51 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5410, 0x100000002) 15:58:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5421, 0x100000004) 15:58:52 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000000, 0x0, 0x3, 0x1, 0x0, r0, 0x0}]) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={r1, &(0x7f0000000140)=""/125}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000002c0)={r1, 0x3}) exit_group(0x1201c7af) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$rfkill(r6, &(0x7f0000000280)={0x8, 0x0, 0x2, 0x1, 0x1}, 0x8) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8, @fixed={[], 0x32}, 0x5, 0x2}, 0xffffffffffffffec) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e9001340", @ANYRES16=r7, @ANYBLOB="040b25bd7000fedbdf250b00000008000500030000000400038008000500dc04000024000280060002004e24000006000f006f01000006000b000a00000006000f000500000008000600060000003800038008000500e000000214000600fe8000000000000000000000000000bb08000300040000000800010001000000060004005e0d00002c00018006000100020000000800090051000000060004004e2200000600010002000000080005000200000014000280060002004e240000080006003f0000001400028006000f00ff07000006000f000500000008000400a7000000"], 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) [ 1265.415260][ T4747] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:52 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200400, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x40, 0x8000}, @mss={0x2, 0xc9f}], 0x2) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000180)=0x8) socket$qrtr(0x2a, 0x2, 0x0) exit(0x8001) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b63, 0x100000004) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000100)='net/sco\x00') 15:58:52 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x89e9, &(0x7f0000000180)={0x0, r1}) 15:58:52 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5422, 0x100000004) 15:58:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:52 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5412, 0x100000002) [ 1265.682795][ T4776] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:52 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5423, 0x100000004) 15:58:54 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000094) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:54 executing program 5: clone(0x20003004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000040)=0x50007) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:58:54 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xae01, &(0x7f0000000180)={0x0, r1}) 15:58:54 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5413, 0x100000002) 15:58:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:54 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5424, 0x100000004) 15:58:54 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200040, 0x0) sendto$l2tp6(r1, &(0x7f0000000040), 0x0, 0x80, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, [], 0x32}, 0x1e16, 0x4}, 0x20) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000140)=0x4) bind$netrom(r3, &(0x7f00000000c0)={{0x3, @bcast}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) [ 1268.323643][ T4818] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:55 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5425, 0x100000004) 15:58:55 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xae60, &(0x7f0000000180)={0x0, r1}) 15:58:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5414, 0x100000002) 15:58:55 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xaf01, &(0x7f0000000180)={0x0, r1}) [ 1268.596911][ T4848] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:58 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000095) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:58:58 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5427, 0x100000004) 15:58:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5415, 0x100000002) 15:58:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:58 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x400454ca, &(0x7f0000000180)={0x0, r1}) 15:58:58 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400201) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, 0x0, 0x10000000000443) r6 = creat(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000000, 0x0, 0x3, 0x1, 0x0, r6, 0x0}]) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000580)=""/154, 0xfe0e}, {&(0x7f0000000640)=""/222, 0xde}, {&(0x7f0000000440)=""/38, 0x26}, {&(0x7f0000000740)=""/126, 0x7e}], 0x6, &(0x7f0000000480)=""/39, 0x27}, 0x120) fsetxattr$trusted_overlay_nlink(r7, &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U-', 0x81}, 0x16, 0x2) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, &(0x7f0000000040)={r8, &(0x7f0000000140)=""/125}) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f0000000000)={r8, 0x2}) ioctl$KIOCSOUND(r0, 0x4b63, 0x7000) [ 1271.991779][ T4879] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:58 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4004550a, &(0x7f0000000180)={0x0, r1}) 15:58:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5416, 0x100000002) 15:58:58 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5428, 0x100000004) 15:58:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:58:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fe) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000)={0x4, "3710f4"}, 0x6) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, &(0x7f0000000040)) exit_group(0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r7, 0x4b63, 0x100000004) 15:58:58 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5418, 0x100000002) [ 1272.294450][ T4916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:01 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000096) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:01 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40049409, &(0x7f0000000180)={0x0, r1}) 15:59:01 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:59:01 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5429, 0x100000004) 15:59:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:01 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x541b, 0x100000002) [ 1274.884794][ T4955] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:01 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4004af07, &(0x7f0000000180)={0x0, r1}) 15:59:01 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x541c, 0x100000002) 15:59:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:01 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5437, 0x100000004) 15:59:01 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r4) r5 = getgid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xeb) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r10) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x42000, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',ro000000000100000,user_id=\x00'/42, @ANYRESDEC=r4, @ANYBLOB=',gvoup_id=', @ANYRESDEC=r5, @ANYBLOB=',max_read=0x0000000000000400,allow_other,default_permissions,euid=', @ANYRESDEC=r8, @ANYBLOB=',fowner=', @ANYRESDEC=r10, @ANYBLOB=',uid<', @ANYRESDEC=r11, @ANYBLOB=',\x00']) [ 1275.175746][ T4987] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:01 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4004af61, &(0x7f0000000180)={0x0, r1}) 15:59:04 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000097) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:04 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5441, 0x100000004) 15:59:04 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x541d, 0x100000002) 15:59:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=@routing={0x2b, 0xc, 0x1, 0x4, 0x0, [@empty, @dev={0xfe, 0x80, [], 0x3d}, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0, @dev={0xfe, 0x80, [], 0x18}]}, 0x68) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000080)={0x17, 0x3, 0x20, 0x6, 0x0, 0x2, 0xf, "0aa2384fc80ca9b8e414d59f48383c90b102d9a8", "a78f7d46ae44f8e89a029757d42ba3c816d66c96"}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) dup2(r4, r5) ioctl$KIOCSOUND(r2, 0x4b63, 0x100000004) 15:59:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:04 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40085503, &(0x7f0000000180)={0x0, r1}) [ 1278.035385][ T5030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:04 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40086602, &(0x7f0000000180)={0x0, r1}) 15:59:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000000)=0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b63, 0x100000004) 15:59:04 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x541e, 0x100000002) 15:59:04 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5450, 0x100000004) 15:59:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:05 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40087602, &(0x7f0000000180)={0x0, r1}) [ 1278.364662][ T5076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:07 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000098) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:07 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5451, 0x100000004) 15:59:07 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x541e, 0x100000002) 15:59:07 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0xf95, 0x3, 0x3, "e104d71965fe9f10016574152d8419f2bcc6b79a73de98296ebf4556179476a6", 0x32314d54}) 15:59:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:07 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af00, &(0x7f0000000180)={0x0, r1}) [ 1280.993469][ T5110] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:07 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af03, &(0x7f0000000180)={0x0, r1}) 15:59:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:07 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5452, 0x100000004) 15:59:07 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5421, 0x100000002) 15:59:07 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xd0902, 0x0) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x1, 0x111001) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000480)={0x3, 0x1, 0x7ff}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="cb21dc88cfa51b49761f6a7c8297ee3a", 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) dup(r4) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xa20000, 0xa9, 0x10, r4, 0x0, &(0x7f00000000c0)={0x9b0908, 0x8, [], @string=&(0x7f0000000080)=0x80}}) recvmsg$kcm(r7, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000300)=""/114, 0x72}], 0x2, &(0x7f0000000380)=""/126, 0x7e}, 0x1) [ 1281.228131][ T5135] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:07 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af04, &(0x7f0000000180)={0x0, r1}) 15:59:10 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000099) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:10 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x545d, 0x100000004) 15:59:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5422, 0x100000002) 15:59:10 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x400800, 0x0) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:59:10 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 15:59:10 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0x0, 0x6000, 0x10000, 0x1, 0x13}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b63, 0x100000004) 15:59:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5423, 0x100000002) [ 1283.924820][ T5181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:10 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5460, 0x100000004) 15:59:10 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af12, &(0x7f0000000180)={0x0, r1}) 15:59:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5424, 0x100000002) 15:59:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1284.256281][ T5229] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:13 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000009a) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:13 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$negate(0xd, r1, 0x800, 0x0) keyctl$clear(0x7, r1) 15:59:13 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)={0x0, r1}) 15:59:13 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5600, 0x100000004) 15:59:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5425, 0x100000002) 15:59:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:13 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:59:13 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)={0x0, r1}) [ 1286.880166][ T5259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:13 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5601, 0x100000004) 15:59:13 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5427, 0x100000002) 15:59:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:13 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af20, &(0x7f0000000180)={0x0, r1}) [ 1287.188687][ T5297] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:16 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5602, 0x100000004) 15:59:16 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) r1 = accept(0xffffffffffffffff, &(0x7f00000006c0)=@rc={0x1f, @none}, &(0x7f0000000740)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x114, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xb533251d9b239f61}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x33}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}]}, 0x114}, 0x1, 0x0, 0x0, 0x2008010}, 0x20000000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:59:16 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000009b) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:16 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5428, 0x100000002) 15:59:16 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)={0x0, r1}) 15:59:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1289.711698][ T5332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:16 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5603, 0x100000004) 15:59:16 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af23, &(0x7f0000000180)={0x0, r1}) 15:59:16 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5429, 0x100000002) 15:59:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e22, 0x9, @empty, 0x1}, {0xa, 0x4e21, 0xdd3, @private2, 0x5961c47a}, 0x1, [0x80000001, 0x1, 0x4, 0x1, 0x3, 0x30a6, 0x10001, 0x7]}, 0x5c) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b63, 0x100000004) 15:59:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:16 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)={0x0, r1}) [ 1290.023899][ T5374] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:16 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5437, 0x100000002) 15:59:16 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5605, 0x100000004) 15:59:19 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000009c) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:19 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/udmabuf\x00', 0x2) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, r8, 0xc91add0bf88807dd, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="f8000000", @ANYBLOB="20b7d8ebe62a11da79c64054a93e6dacac4c5a560a002350cffc9495576837b4e14c87892156126d849c9c295ba9f290bd75b1243e8542b8b4b3ce019a5c8071d5d95667f5135e14b19a308a06ef0856aa07218ef6c83f1beb1c069a794d3aee3438572a75e074d36ee38e53d39efa6942b337c04b458a21d8b633b385509b949bf831b54dd39c8e90081cecea96f1aa4fb3a031a91e16b5f6867c72e9df4bb197d0008c32a0c0822b9e4aa47127db64c6dfdf796412627eed45fec73cd94dc402b7ca372d39c7b44120f7a41220b61ba23a9c4bbbe1f8db5448ad0342f34ea95093bdc5", @ANYBLOB="000229bdbfe464b4d4932000c1b969a7257000ffdbdf2509000000080001007063690011000200303030303a30303a31302e30000000000800030002000000080009005a679f9c0f0ebb072107000000080001007063690011000200303030303a25303a000000080003000200000008000900070000000e0001006e657464657673696d0000000f0002006e657464657673694d30000008000300000000000800090008000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000900060000000e0001006e657464657673696d0000006bb39ad6bcce05d8357a450f000200e0ffffff657673696d30000008000300000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 15:59:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:19 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af60, &(0x7f0000000180)={0x0, r1}) 15:59:19 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5441, 0x100000002) 15:59:19 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5606, 0x100000004) 15:59:19 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5450, 0x100000002) 15:59:19 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5607, 0x100000004) [ 1292.929461][ T5425] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:19 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40186366, &(0x7f0000000180)={0x0, r1}) 15:59:19 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5451, 0x100000002) 15:59:19 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={r2, r4, r5}, 0xc) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:59:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1293.200870][ T5460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:22 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000009d) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:22 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x401870c8, &(0x7f0000000180)={0x0, r1}) 15:59:22 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5608, 0x100000004) 15:59:22 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5452, 0x100000002) 15:59:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:22 executing program 5: clone(0x881080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_FPEMU(0xa, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000001532cb980479b694f70ab62de7f3e5dcf89d3cffbc8dea99e9c535dff37529a4fd0aeccdc612b5e682e5ce207451538076136534bded0e95dd920dfdf330947d74803c7e09dc2143bd35a4794699c4ea1cd401b20", @ANYRES16=r4, @ANYBLOB="000426bd7000fbdbdf251200000008003a0009000000050033000000000005003000010000000500330000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4c050) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000340)=0x4) setuid(r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r8) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x10001, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000200)="d637796ba7b209978f19a1061034f83071e4586ca3241ba71228eebc8da0e970b225326c3c03fdc5d9", 0x29, 0x9}, {&(0x7f0000000240)="17016e66f03223b4c07745a55f714cfcba0eb2fa06026e207ceb72b05f01477a8b6efe660d4f2a32c3", 0x29, 0x8}, {&(0x7f0000000280)="57838214e753dc36612d200be56e790cf0aefc", 0x13, 0x200}], 0x4a800, &(0x7f0000000400)=ANY=[@ANYBLOB="6469725f756d6173873d30303030323030303030303030303030303030303030342c71756965742c7569643d", @ANYRESHEX=r6, @ANYBLOB=',dont_measure,uid=', @ANYRESDEC=r8, @ANYBLOB=',smackfshat=/@,fsmagic=0x0000000000000001,func=KEXEC_INITRAMFS_CHECK,audit,dont_measure,pcr=00000000000000000011,\x00']) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) prctl$PR_SET_FPEMU(0xa, 0x2) [ 1295.809836][ T5491] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:22 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x545d, 0x100000002) 15:59:22 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5609, 0x100000004) 15:59:22 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4020940d, &(0x7f0000000180)={0x0, r1}) 15:59:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:22 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000040)={0x3ff, 0x4476}) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x2) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) [ 1296.125478][ T5532] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:22 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4020ae46, &(0x7f0000000180)={0x0, r1}) 15:59:25 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000009e) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:25 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x560a, 0x100000004) 15:59:25 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5460, 0x100000002) 15:59:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e20, 0x21d, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, 0x5c8}, r3}}, 0x38) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KIOCSOUND(r4, 0x4b63, 0x100000004) 15:59:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:25 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4028af11, &(0x7f0000000180)={0x0, r1}) 15:59:25 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x41015500, &(0x7f0000000180)={0x0, r1}) [ 1298.710288][ T5571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:25 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x560b, 0x100000004) 15:59:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:25 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5600, 0x100000002) 15:59:25 executing program 5: clone(0x2b3a1ef296723cb0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setregid(0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r4) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=0x0, @ANYBLOB="040005000000000008000700", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="0800b9fc", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="0800022d", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="10000200000000002000080000000000"], 0x64, 0x1) exit_group(0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KIOCSOUND(r5, 0x4b63, 0x100000004) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x300, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) fstat(r7, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r6, 0x5441, 0x0) [ 1298.955071][ T5596] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:25 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x80085502, &(0x7f0000000180)={0x0, r1}) 15:59:28 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x100000000000009f) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:28 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x560c, 0x100000004) 15:59:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:28 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x1) exit_group(0x105) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b63, 0x100000004) 15:59:28 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5601, 0x100000002) 15:59:28 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x80086301, &(0x7f0000000180)={0x0, r1}) [ 1301.594000][ T5636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:28 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000000)=0x7) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:59:28 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x80086601, &(0x7f0000000180)={0x0, r1}) 15:59:28 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5602, 0x100000002) 15:59:28 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x560d, 0x100000004) 15:59:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1301.872135][ T5679] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:28 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x80087601, &(0x7f0000000180)={0x0, r1}) [ 1304.239033][ T0] NOHZ: local_softirq_pending 08 15:59:31 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000a0) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:31 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, &(0x7f0000000080)={0xff, [0x101, 0x15e, 0x6], [{0x5, 0x4a39, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x7ff, 0x1}, {0x9e7, 0x7, 0x0, 0x0, 0x1}, {0x0, 0x6}, {0xa85, 0x3ff, 0x0, 0x1, 0x0, 0x1}, {0x7fffffff, 0x7ff, 0x0, 0x1, 0x1, 0x1}, {0x40, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0xfffffffb, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x6982, 0x0, 0x1, 0x1, 0x1}, {0x10000, 0x6, 0x0, 0x1}, {0x1, 0x6, 0x1, 0x1, 0x1, 0x1}], 0xffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000000)) 15:59:31 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x560e, 0x100000004) 15:59:31 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5603, 0x100000002) 15:59:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:31 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x8008af00, &(0x7f0000000180)={0x0, r1}) 15:59:31 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = getpgrp(r0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x86000, 0x0) kcmp(r1, r2, 0x1, r4, r5) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r6, 0x4b63, 0x100000004) 15:59:31 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5605, 0x100000002) [ 1304.549124][ T5726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:31 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x8038550a, &(0x7f0000000180)={0x0, r1}) 15:59:31 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x560f, 0x100000004) 15:59:31 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b63, 0x100000004) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f0000000000)=0x800, 0x4) 15:59:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1304.864428][ T5759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:33 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000a1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:33 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5606, 0x100000002) 15:59:33 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x8070ae9f, &(0x7f0000000180)={0x0, r1}) 15:59:33 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x6364, 0x100000004) 15:59:33 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0xee01}}) msgsnd(r1, &(0x7f0000000340)={0x3}, 0x8, 0x800) msgctl$IPC_RMID(r1, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000000)=""/110) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) 15:59:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1307.372460][ T5792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:34 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000a80)={0x9f0000, 0x4, 0x8000, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)={0x990a78, 0x8, [], @p_u16=&(0x7f0000000a00)=0x3f}}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000ac0)=@int=0x800, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RCREATE(r2, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x2, 0x3, 0x3}, 0x7fffffff}}, 0x18) 15:59:34 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x8912, 0x100000004) 15:59:34 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5607, 0x100000002) 15:59:34 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x8208ae63, &(0x7f0000000180)={0x0, r1}) 15:59:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:34 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x800, 0x3, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000100)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) ioctl$KIOCSOUND(r2, 0x4b63, 0x100000004) [ 1307.719376][ T5835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1307.837190][ T5841] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:59:36 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000a2) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:36 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5608, 0x100000002) 15:59:36 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc0045878, &(0x7f0000000180)={0x0, r1}) 15:59:36 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x8914, 0x100000004) 15:59:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:36 executing program 5: clone(0x200838247fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b63, 0x100000001) [ 1310.283697][ T5871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:37 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x5609, 0x100000002) 15:59:37 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc0045878, &(0x7f0000000180)={0x0, r1}) 15:59:37 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)={0x0, r1}) 15:59:37 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x8933, 0x100000004) 15:59:37 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:37 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc0085504, &(0x7f0000000180)={0x0, r1}) [ 1310.620271][ T5908] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:39 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000a3) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:39 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)={0x0, r1}) 15:59:39 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x8934, 0x100000004) 15:59:39 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x560a, 0x100000002) 15:59:39 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)={0x0, r1}) 15:59:39 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1313.168132][ T5938] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:39 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc0104320, &(0x7f0000000180)={0x0, r1}) 15:59:39 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)={0x0, r1}) 15:59:39 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x560b, 0x100000002) 15:59:39 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x89e9, 0x100000004) 15:59:40 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1313.479792][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:40 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc018620b, &(0x7f0000000180)={0x0, r1}) 15:59:42 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000a4) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:42 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)) 15:59:42 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x560c, 0x100000002) 15:59:42 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xae01, 0x100000004) 15:59:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 15:59:42 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc0189436, &(0x7f0000000180)={0x0, r1}) 15:59:42 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xae41, 0x100000004) [ 1316.089426][ T6017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:42 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x560d, 0x100000002) 15:59:42 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)) 15:59:42 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc020660b, &(0x7f0000000180)={0x0, r1}) 15:59:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 15:59:43 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xae80, 0x100000004) [ 1316.392807][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:45 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000a5) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:45 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)) 15:59:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x560e, 0x100000002) 15:59:45 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc0305602, &(0x7f0000000180)={0x0, r1}) 15:59:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 15:59:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xae9a, 0x100000004) 15:59:45 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)) [ 1318.973884][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x40045431, 0x100000004) 15:59:45 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc040563d, &(0x7f0000000180)={0x0, r1}) 15:59:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x560f, 0x100000002) 15:59:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 15:59:45 executing program 5: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af24, &(0x7f0000000180)) [ 1319.331661][ T6124] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:48 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000a6) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:48 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x6364, 0x100000002) 15:59:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x400454ca, 0x100000004) 15:59:48 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc0502100, &(0x7f0000000180)={0x0, r1}) 15:59:48 executing program 5: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af24, &(0x7f0000000180)) 15:59:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 1321.837552][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:48 executing program 5: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af24, &(0x7f0000000180)) 15:59:48 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x8912, 0x100000002) 15:59:48 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc050561a, &(0x7f0000000180)={0x0, r1}) 15:59:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x40049409, 0x100000004) 15:59:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 15:59:48 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x8914, 0x100000002) [ 1322.122268][ T6182] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1323.448677][ T0] NOHZ: local_softirq_pending 08 15:59:51 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000a7) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:51 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)) 15:59:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x40086602, 0x100000004) 15:59:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 15:59:51 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x8933, 0x100000002) 15:59:51 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc100565c, &(0x7f0000000180)={0x0, r1}) [ 1324.833258][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:51 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)) 15:59:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x40087602, 0x100000004) 15:59:51 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x8982, 0x100000002) 15:59:51 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 15:59:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 15:59:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4008ae89, 0x100000004) [ 1325.192183][ T6266] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:54 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000a8) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)) 15:59:54 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x8983, 0x100000002) 15:59:54 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x2, r1}) 15:59:54 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4008ae90, 0x100000004) 15:59:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 1327.703749][ T6301] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:54 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x3, r1}) 15:59:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)) 15:59:54 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x400c4301, 0x100000004) 15:59:54 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x40042408, 0x100000002) 15:59:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)) [ 1328.031469][ T6335] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:57 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000a9) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:59:57 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x4, r1}) 15:59:57 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x400c4807, 0x100000004) 15:59:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x400454ca, 0x100000002) 15:59:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)) 15:59:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 1330.596662][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:59:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)) 15:59:57 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x5, r1}) 15:59:57 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4010ae67, 0x100000004) 15:59:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x40046207, 0x100000002) 15:59:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 15:59:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af24, &(0x7f0000000180)) [ 1330.919042][ T6403] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:00:00 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000aa) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:00 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x6, r1}) 16:00:00 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x40186366, 0x100000004) 16:00:00 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x40049409, 0x100000002) 16:00:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 16:00:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af24, &(0x7f0000000180)) [ 1333.516307][ T6432] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:00:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af24, &(0x7f0000000180)) 16:00:00 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x40086602, 0x100000002) 16:00:00 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x7, r1}) 16:00:00 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4020940d, 0x100000004) 16:00:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 16:00:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, 0x0) [ 1333.841279][ T6475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:00:02 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000ab) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:02 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x40087602, 0x100000002) 16:00:02 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4020ae46, 0x100000004) 16:00:02 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x8, r1}) 16:00:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 16:00:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, 0x0) [ 1336.408050][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:00:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, 0x0) 16:00:03 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x300, r1}) 16:00:03 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4090ae82, 0x100000004) 16:00:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 16:00:03 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x40186366, 0x100000002) [ 1336.640645][ T6532] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:00:03 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x500, r1}) 16:00:05 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000ac) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 16:00:05 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)={0x0, r1}) 16:00:05 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4020940d, 0x100000002) 16:00:05 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4138ae84, 0x100000004) 16:00:05 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x600, r1}) [ 1339.254577][ T6575] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:00:06 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)={0x0, r1}) 16:00:06 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x80045430, 0x100000004) 16:00:06 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4030582a, 0x100000002) 16:00:06 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x700, r1}) 16:00:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 1339.526867][ T6609] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:00:06 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x80045432, 0x100000002) 16:00:08 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000ad) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:08 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x3f00, r1}) 16:00:08 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)={0x0, r1}) 16:00:08 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x80045432, 0x100000004) 16:00:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}}, 0x24}}, 0x0) 16:00:08 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x80045440, 0x100000002) [ 1342.144096][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:00:08 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)) 16:00:08 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x8008563f, 0x100000002) 16:00:08 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0xff00, r1}) 16:00:08 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x80045440, 0x100000004) 16:00:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}}, 0x24}}, 0x0) [ 1342.441069][ T6681] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:00:09 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)) 16:00:11 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000ae) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:11 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x1000000, r1}) 16:00:11 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x80086301, 0x100000002) 16:00:11 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x80086301, 0x100000004) 16:00:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}}}, 0x24}}, 0x0) 16:00:11 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)) [ 1345.007550][ T6732] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 16:00:11 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x2000000, r1}) 16:00:11 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)) 16:00:11 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x80086601, 0x100000004) 16:00:11 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x80086601, 0x100000002) 16:00:11 executing program 0: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)={0x0, r1}) 16:00:11 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x3000000, r1}) 16:00:14 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000af) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:14 executing program 5: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0xc008af12, &(0x7f0000000180)) 16:00:14 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x80087601, 0x100000004) 16:00:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x80087601, 0x100000002) 16:00:14 executing program 0: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)={0x0, r1}) 16:00:14 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x4000000, r1}) 16:00:14 executing program 5: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0xc008af12, &(0x7f0000000180)) 16:00:14 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x5000000, r1}) 16:00:14 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x81007702, 0x100000004) 16:00:14 executing program 0: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)={0x0, r1}) 16:00:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x801c4803, 0x100000002) 16:00:14 executing program 5: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0xc008af12, &(0x7f0000000180)) 16:00:17 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000b0) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:17 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x6000000, r1}) 16:00:17 executing program 0: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)) 16:00:17 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x8138ae83, 0x100000004) 16:00:17 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x80404506, 0x100000002) 16:00:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)) 16:00:17 executing program 0: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)) 16:00:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)) 16:00:17 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x7000000, r1}) 16:00:17 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc004500a, 0x100000004) 16:00:17 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0045540, 0x100000002) 16:00:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)) 16:00:20 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000b1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:20 executing program 0: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)) 16:00:20 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x8000000, r1}) 16:00:20 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0045878, 0x100000002) 16:00:20 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0045878, 0x100000004) 16:00:20 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)) 16:00:20 executing program 0: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)) 16:00:20 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0045878, 0x100000004) 16:00:20 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)) 16:00:20 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0045878, 0x100000002) 16:00:20 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x3f000000, r1}) 16:00:20 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0104320, 0x100000002) 16:00:23 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000b2) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:23 executing program 0: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af22, &(0x7f0000000180)) 16:00:23 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc008561c, 0x100000004) 16:00:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)) 16:00:23 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0xfdfdffff, r1}) 16:00:23 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0189436, 0x100000002) 16:00:23 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0xff000000, r1}) 16:00:23 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc008ae05, 0x100000004) 16:00:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, &(0x7f0000000180)) 16:00:23 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc020660b, 0x100000002) 16:00:23 executing program 0: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af22, &(0x7f0000000180)) 16:00:23 executing program 0: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af22, &(0x7f0000000180)) 16:00:25 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000b3) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:25 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0xc008af12, &(0x7f0000000180)) 16:00:25 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0286405, 0x100000002) 16:00:25 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0xfffffdfd, r1}) 16:00:25 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0189436, 0x100000004) 16:00:25 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)) 16:00:25 executing program 1: unshare(0x20000400) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x7c, r0, 0x700, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') socket$inet6(0xa, 0x3, 0x5) read(r1, &(0x7f0000000380)=""/233, 0xffbe) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000000000)={0x5e5, 0x3, 0x0, 0x8}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r2, 0x11, 0x7, 0x10000) sendfile(r2, 0xffffffffffffffff, 0x0, 0x11f08) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000180)={0x0, r6}) 16:00:25 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0xc008af12, &(0x7f0000000180)) 16:00:25 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0306201, 0x100000002) 16:00:25 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0205649, 0x100000004) 16:00:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)) 16:00:26 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0385650, 0x100000002) [ 1359.458177][ T28] audit: type=1800 audit(1593532826.082:68): pid=7075 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=15912 res=0 [ 1359.585589][ T28] audit: type=1804 audit(1593532826.172:69): pid=7075 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir756290435/syzkaller.x9U6CA/716/file0" dev="sda1" ino=15912 res=1 16:00:28 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000b4) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:28 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)) 16:00:28 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0xc008af12, &(0x7f0000000180)) 16:00:28 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc020660b, 0x100000004) 16:00:28 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc058560f, 0x100000002) 16:00:28 executing program 1: unshare(0x20000400) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x5140, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:00:28 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, 0x0) 16:00:28 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)) 16:00:28 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0a85320, 0x100000004) 16:00:28 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0c85666, 0x100000002) 16:00:28 executing program 1: unshare(0x20000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x8, 0xfeff, 0x2, 0x6, 0xf, "906770f7f22bba13"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000080)=0x9, 0x4) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd2(0x80000000, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000180)={0x0, r5}) 16:00:29 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, 0x0) 16:00:31 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000b5) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:31 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)) 16:00:31 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 16:00:31 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0xc0d05605, 0x100000002) 16:00:31 executing program 1: unshare(0x20000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x12) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468", @ANYBLOB="cdfc4f3dfd4b977013bda558bf813ae020379d27feddc8ea71", @ANYRESOCT], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000024000002000000000000000000400000b11f8211722e73e9d478bde37c4825ccd64a169e7ab386f6e9cd2d8e302a9564b3fb642158928f2103f7ad379206bbab3b3a80bd7e6a90b8657ea4ad450a0f229a9585b7235f97d76fd7646bf83319ef16dd7175595bd81277ca4d5c0025dab3275094dc1e50d1a253439f1f8f79bf6c", @ANYRES32=0x0, @ANYBLOB="09000900f1ffffff0000faff"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@delqdisc={0xa0, 0x25, 0x0, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x9, 0x1}, {0x6, 0x10}, {0xfff1, 0x7}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x24, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_TARGET={0x8, 0x1, 0x4}, @TCA_PIE_BETA={0x8, 0x5, 0x1f}, @TCA_PIE_ECN={0x8, 0x6, 0x1}]}}, @qdisc_kind_options=@q_rr={{0x7, 0x1, 'rr\x00'}, {0x18, 0x2, {0x81, "0d1be72b618ac0577519d6d59c0c0f25"}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x7, 0x617, 0x3, 0x0, 0x5, 0x7c43627d, 0x2}}, {0x8, 0x2, [0x7, 0x6]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}]}, 0xa0}, 0x1, 0x0, 0x0, 0x6c8f25305d6b80e4}, 0x40c0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="33d919c2a5af393af23c4e337f6ec317", 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000180)={0x0, r7}) 16:00:31 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xc008af12, 0x0) 16:00:31 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x4, 0xa, 0xa00, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x51101ec6}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x372}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, 0xbc}}, 0x800) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r2}) 16:00:31 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)) 16:00:31 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000003) 16:00:31 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)={0x0, r1}) 16:00:31 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000003) 16:00:31 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)) 16:00:34 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000b6) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:34 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:00:34 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)={0x0, r1}) 16:00:34 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000005) 16:00:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af22, &(0x7f0000000180)) 16:00:34 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x58, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\\\'(%%.\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x8005}, 0x40010) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r2}) 16:00:34 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)={0x0, r1}) 16:00:34 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1c1803, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:00:34 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000006) 16:00:34 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000005) 16:00:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af22, &(0x7f0000000180)) 16:00:34 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)) 16:00:37 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000b7) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:37 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000007) 16:00:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af22, &(0x7f0000000180)) 16:00:37 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000006) 16:00:37 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r7}, 0x14) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000000)={0x6, 0x4, 0x1}) 16:00:37 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)) 16:00:37 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)) 16:00:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, 0x0) [ 1370.929212][ T7316] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 16:00:37 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000007) 16:00:37 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000008) [ 1371.049440][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 16:00:37 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)) 16:00:37 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040), 0x2) 16:00:40 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000b8) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:40 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, 0x0) 16:00:40 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000008) 16:00:40 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000009) 16:00:40 executing program 5: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) 16:00:40 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001340)={0x3, 0x0, [{0x6000, 0x70, &(0x7f00000000c0)=""/112}, {0x11004, 0x6b, &(0x7f00000002c0)=""/107}, {0x13002, 0x1000, &(0x7f0000000340)=""/4096}]}) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0x8, [0x7, 0x80000001], 0x81}, 0x10) r3 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x90000, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f00000001c0)=0x8, 0x4) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000240), &(0x7f00000013c0)=0x4) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r3}) 16:00:40 executing program 5: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) 16:00:40 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000009) 16:00:40 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, 0x0) 16:00:40 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000010) 16:00:40 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000080)=0x800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000000)=0xfffffc4a) sendmmsg(r2, &(0x7f0000004100)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)="d2f005301a40fb13938a64c6fe65715d2c330a431faaf6835d10aaa8749cc093b01ab3df0b241e73e7bbbcb9f330f83e2c191aa084774d9b1954e3ba34b80e6abe7afecd2fd1ec1801a444d2dfd071bcde1d2c1098551db1448528aacc43576c02518631fe9baddfa229f38c0b8ef00e98a719466bbbf11f359bc2a5f3a825559373a7", 0x83}, {&(0x7f0000000380)="648b4889addf0142b2e02ea0389fb714c7db07791bb8864f4625385bc942fe2c350bf9780e57842366e77fa537fd56498e99acb3fba40b05d0912184ff5a4e0d7b52da96088837354e23", 0x4a}, {&(0x7f0000000140)}, {&(0x7f0000000400)="e8e9c509197d66f11fe00677b1d870517d41b53695263de11d0efb05ca3d3d0287fd33ff6c47f629c9550c3fbfd855b8d306cab288b0a6184a89f7e1f489caa760c3be0a03edaae04409c5444615d58871ca69dbab2330801fc10b0432f3fd0e0e80e38ac64fac5bf1f1f7d2d732359e7b27b0ae67d84c7bbc474f5aae6960fe41b418f63e7a9b5408d98d34ec06718e7b546388cad7cda73ee65bd0c1a763289891dbbe7d5731cef4e3011664334d5635adb10640705abb9b7f8efa255577112fcdbcc0", 0xc4}, {&(0x7f0000000500)="4393e6b16e67b99f7dfb81a9caf244717fcf7286fcb3eb3db9230fdc20f64e788a0c9b781b90236bdfbb6a2338efa99917812eff56841cfb83ae04334556ff84d4a411371d033eb5afd9f89abc846225f598879f408076a9f0732c4edd40108a03a4d29e0441cf468f959ea9d9a318c9", 0x70}, {&(0x7f0000000580)="5e515f1a5d9c052293809225b5447096a8fa4303bc4e02e39a9bc710578c0b8c9b054a6f3d400aec2c5cf1ea8c902d53788f97a463c74a5990b5014b663e974501673b0ef3f10346e4e114dbfcaeff8e38548bc8aa5b12d53e7cbc3ddf0cb2340d98780bb16712d8650e313e738e3aee000fafcdcc829c7f4c987870882a0d20fc1cb7e9aa9bf24e0294c1752869255afa8dc854266329", 0x97}, {&(0x7f00000001c0)="92", 0x1}, {&(0x7f0000000640)="ff7203de7f000ebd2f4007d274bf88c8ecd1c30d2eb286ea99c539cfac01dd6899a5429262fcde5dfff106e5dde251bf6d14a1a7846967600ef68de025574237b5d3b270bdba527c8ae072b6750bb16c1bd1e369827fa2dffc6ca55c35c434f1ea2477d6029819d5294251a47daf1e99ad691b5dacae28d8efe0b89c09c95a03685d1bb031e5c7a438c8edb3182d02776c11034dddbbc0ba81bf23c1822fcbaa9e285842ccd5a6ebc47e58fdfcf8753094a484c04090c6c6f7cef86d91bbf34738f66f2dde55700b1fd1df416a661e2416777853ad4d9323317bb4113162bf935045", 0xe2}], 0x8, &(0x7f00000007c0)=[{0xe0, 0x100, 0x4, "791b04f3d44fed8825c3a3fc6a6c0ef0e4b074b5a8f6285367174127b07b2dd33fbb8da6f0e5f08e8a1293c8d1aa4266c6af48a285b591db1e7b7584b627ddd0d24c9bbca7c5af53140bb0f84755389ded3ffc0fc6fcfc7a962dcbb72d47969ad61d6642192a5d384efe34ab64fbe68a81dea2cd9654bf38c5efd98d9babad4f408c634008f96d78d5404d7a404d17c7a0c8acc0a079a831d6dd22260e9c8d9eff159f7b1feee694a09dd28471153e239bfe0c5184c387ac33e6d09c63d20d32707c3d2d9a1213653c896e58"}, {0x40, 0x0, 0xea, "cce88b4e8b92470064dde0f0b2309ba372eeb96ca752c2f229b0b17dc3c2eb8d9e0f5dd7a5fbbef2ece6c8d58a"}, {0x60, 0x10d, 0x0, "6263bf1d6c2fe242de8b6ba784104669bdef72e9c94071a084653d56bee4ed5b398673c8251ffb9658a16277a1fa101dd0a0b4b05852538113779ec70dfc26af08def248b773906f4b45620d45"}, {0x70, 0x111, 0x80000000, "a3c79fcc49ac7d789a482145c219381a678e06061f2483af7753a2affc49dba9d28b28a9399d8915e8e6cff6a204d8cb77c6463358229fd734b569544409e00840cd6a034c65dec553d2c71039d941631f801088fa7cc7aa3f6ce175d30366"}], 0x1f0}}, {{&(0x7f00000009c0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000240)="2be88e7edb12d6ac3560c126e24fa29203761dada0275755ed4b68c2f9912197f83fdc3bdc6d84d555395f3ab4ff5b7f83a5", 0x32}, {&(0x7f0000000a40)="1f5ad5c76891153e0ba2607f5138a58d903104d37ef60844ddacc0a908d559641515cc3ab0f5e5e117a796e1aca4371c9828", 0x32}, {&(0x7f0000000a80)="50feec1cd36c8fb9891c1788d35ccfb120e6a7e35bff2f5d16f6a8daf520f22923e3e61d066018950ee85e78b1c8ad625237fde17f006e8a77e5ef4f48777fbd3427ef112ab2a8c32dfa57d8b0628a495fc0f527648e24fa25470fded1176d5b6283a276bb5257ecd627bf8e8890c08d1630c43051408377350b84984ae200", 0x7f}, {&(0x7f0000000b00)="15e13a96119061532c7583e1074888e23a78ca933c2b55822d27d87f77478b81d4fc0d9daa0029dbf91b60ee74d5286ee682c94ac4d95340d3aec3e5f3ec60083d1880082b98ddaec04e82c2f8f0386b8c38c3e32bb78cdffa96f1670837e4ce42d91db5c5bbdba6fe8aa7f7189045e8fd28b849ed75f060a8efa85ccc9e8ed6d69447433a549b5da3c4eaea3e352f017cb0debefa2dc9e7f4bd84914ebc97e9bb32bbc1735691a92bb439438356e8414f1500493fa400b66c6fbe1b869cd43b013d522085d4c7cda4d33da3b10630fc4d0f0dc00b4926a49c51e8ce332bfe0f18487be6a19b98ed550c04811f4c4eab3b16062b9d9c4ee36c794b073283d54fb99c4b74a0273ed4d8ce44c85a9afe0400d7fb73b1791e685a4b9906917f9c2b9236c1a63d0eb77d2c67c46295602e5a777600e56821c76f0e513e00c5a88a91c32b8caa5204a7be431f14a2aa47bf281876f2c16b4a19ed36bacb4a6d385c1ae1603c294ad458180cccbef86626ccd9e2710c499e543ab6b9d437dc57dab727389fbbbbc00b229188ff4496a734608867f82b3f82168f77cb28993f249d70e301d72f62630a8bfc074f924bf9dfd1d6f45e923a13acfb1e3a5cb80dc1795e2c1efbd5a95115fd65cb823cf8cc7b82b653a9d433cc290be465cc1e492301041c18207c9d7a95663d2d6faeb87f5412a5f37347aa43b89241c84b2cf7aa432f34c842771fc0ab85ad5b1e42f86984bbd330399dbaff180d2d242145c4858ec2ee152a8aa336de7475400bad2350f0409153f6c4e6a06256c75cfd7e32bdf7e4d0d033c958d23e4986fe97e2ff8ddbd94fc2146b102188102c568e0214578d02d409530d0451cd9e4562ba9cd393f61a9693acf378559f57863fe44b363ff1a7a1d5ef0fb74ac73033d11ac3abb17f489daa01ea8095134bf6404be53883083c9ea0e70057d860c44fc64deb92305d09fc1cc4bb5a1af0e98592f8b69b83deae13af121358f6ee53f9a9e153d19d07625c55d645c31e4275a65574df08965a52584a9aec0e876887afa850b75c7e530380ccf7df76ca437d5afab201fc74173dced8ae35bb00d561bdf5018eaf4e93847e4ac88bb6c3c161f21d1a39c8943ec0bd10835a228fc7e5b10161c5f6cab68b0ffd23eb95ed5d8311c728dae14f4e0058dacedd66823950acd3607e9d7e0ca220e7d75f66f52122b6ff499f1482632b92ec0e880c375f5ce9fa9b575daf569102ab05c7be7d7035f891fbc12d532f21accd555330870c1d84ed0347e0966d4b1f18d6d477d811373f85101b88533b110bc837ab3c853cd28f1654ee90804231551493a96ca2f14dfb0a919858ca8c78eb5d58ed052f7308f55151f11dc150b79085bc5bb2ad30a40dcee0bdabac542f9bfc119205ce41d3fda59a0a873cf7e2b95175da6f2417df52d74290dcf9ee370458fc5a4380554084a98dfefadc45ed322c6be94968fbf49b19ae0e5029adc0a2791f72ddcbc1272d755912064317f41366e5b6274c9bab4b7e1faae9f8cfd3a43079c0652a539ab18075e15a3561f4f3cc2178211e147a18f7005829e0ad416a625ef61f117ace7ed4414108983e365bcc89c88824458d800b405fddec7244a72d35a8fe9cf2e676043f1f111d93c174a3913bf393ddd479826b3505d77b3e1c52e12ea7b6229836d7670fa9642c8ad3203447cdc49569291e1869461d82173ba92197fb3a4037b0b5a6642b4ee5230b9850d143a587fa47da9d87300e68f18d7f9473a57ade637628918b6e2af4f2d99de6912719193813498bd28d90799583a152cdb3cfe866a5a0c2d4c03a03eb53c8135775336adbd37d602982d98b599d4440c4df37bcf59d7c6d7fac578c0a1579bee2902041677ca15461a96095703fae53f33e8fd34b549c357b283cfb50a09c10f08ba9a7ae9563817255717230cca102dd78f680d16f1a86afa6bc642b8b33ee14bae1736dec980e0ad64759fb47de27ac584f0af68fe1d1372a94778241ca18cb965b2003ad9ede206e601eeb9b4281f8bd2de389a7da0109b311799b25f3b14723c8d9d8987f767b920c8fbf77e1a9407e2d217f64c47576189caf85c34070e0156b7039c8ab76d4b75b6f91f061eb815850c20ce74b217d1e9e59870963540c4cb7b21de8864319dfaa3c00bb1148231664eba84e68381b52d0c1cfaa164bbe6fa51de47137381b9e4db2ee48acb61987e83b5f2d246e7dead2901bdf59a0f3710fdccac37d3a182c01862706270bc4b0d2f33f0d16abdb9ea0434fc1b589c217556f2622962c12751773ffa89cf65371e1ea2b5723617c4f9b5ea45c388b4b4674ea1beb1d29d7d9547d06a5aaa5cce07b08a0e246ab144eee3b6c612c954ef8f4fb5574ae8cba2ff9671cb2bb8b7ef5e9f6d18423803855d05411b8bdbaa216d2a7fb81a7332ae96153e4fe83ead1599e9757addac17f14d043ea8c00aa3165c3baa28aa52353628ae056b2f9e96f7d0752e63d07cb88f14a1ce335819ddf1436243c8e5380265499dd76daea92fbc26e4fe8f54f96ec7d0c350f20ef5816e8accd14c667d17e39d5e7fc78ccae46f9afdccd99189b64698370be87997df9be0ee2833acaac9f8c53c31d9b73cc466d4f7352f25508a94220f360c5edb832ddca0b078998e9386b1836c6f113823c9200bc14c6e56aed4c7902c7c8bcf36b87dbbcbda8b84ce356daf5fce99dfc6a83026a8898589dd52e665e927f648d36ec21e3854136a85575e35e7b1ab41fd3decc3f4ff2aa2ab5f62a4907b8c3ab16289d978b340695d6aac70121b3ba9b339997a417160757dae74d8dde17ed98a5b2cc0b83f0bce498c66dcb8ac9b3ad03806fba4a845bdc4ee7da0c2221cac47fca9d0b00851c273ae81036b826b67a5a0cf7c0cc17905c3438ce3402698b32b5c39c47e7686bcb28f90dccacf0c930d743092b32d83cddea1ae85aab3ce9acc3b269e9a47910ec53c0d815601f721ad649811bcace5b47cb3de6dbcc81f08018fd1f6d5bd9366fe8537e21ae710d11ce97c9725970c1b43c092de7e0dd3dd2f2e1b0e42d4cff00093aff684b737ed67b54c33be9e2173636b5e7f5d45589906e7a5fcc2e05d370c9d7b58e65ba8b293e08e061f09ced1246f5b8332030a37736284df262e61fbca0cc6929f2a4ae161df712c8efaf9683e471086c5d5a3e06e1a784b38f353fde312e64543389bcb97920bb6dedc99cd1328602da2db75f02a6f77bc52ef810160c474ff6bfdeac49ba69c16e8f2305547d0a3d21ee75e059912db3f341744abb46968bb23386545c8c535bf3f4c129ebe0f83cf858ad9bfb959bfdabb6d7fc8f4075fb3f0ca4255829cb045026ac4599de9edcbc4ae2bc512e0d6ebeaa1e4f829c641b5cb5b713ec43874d0862ab7023edf4898e429eca24f97a65de39c1413fee11f0295fac8b84cca2bd7d7d45e764698cabbdefe4f1789589364675b38eb6c28a7905914821d0fdbeedb2bf830e7cb3eaca16535372be070814e8ea8986267e5f2c7f2534b2e00936e462b947510c0919ce31f2af981a9ef9b4d071a7fb79d9be670456fb56a989e4110c4ce8d2150d978cf7d49716f3a69b0441ae2371f14616e57df5e1d632e07236cbb7d923c50c369157ae828ac27157004ca395b8dbfe440c5fd5a91014f328d1cb0949cc24a293236aca201ff90f585fdee4b1a6c2b14dc4c7c10c5a9e7b0555482f12b44a771a821e60d769a523c7d705d543d47f82eed595e3015c175d26cd3ad53a7b83bb6b991ec641e9c9b0dfce3570ce77981cfac0357f0ccfa16703a697b7759f2c59d76b9b6548594f36358b62f78e323b2442a20cdd61fec8c216a50115d1fb59f4a965468681c83ace1d2b488cf6f2f6d0320c798861644055d17b6d58ab3ec22fab460c5c6206a4c1b91a12aeb8475a47088219a47085136e61349db289de322fc0b43b5ae08bc523e9b13f121f599cecc325f2b15fc155fc86fcf5dd9b36b8e7ff4a06ad98590d5b2d6599b2d695c391766084fb5d99a7b98420effb39199d4d07b169ba13aff2bb77db60004928fd5207e756f386d9991acbc54ca88082d848b428f17e200e0095f7ca84403f28c092c61041fc0d20230ee4366728db97518abf10c40ac45bed4411190fae1ff5c11a461dcca41a9d761d0bd3c2f79ab9579159f218e21a07653d65ae5d6fb405dfa1551678408ba1821b3b86b20e3c2710da01ffedee9ab32dd530d54f1f645398be0f051afd9a6d0bc11b268ef4fc19dfeb59c14e1852855ebbbbafb42f9aea2cd31fd4a6b9e8e6d3467f379858961cb1e7f3c571fe96e91a9da5a8a951413fa1bca9c546837cb08983109c71c3219c0d87b6d97845231dc85e106fe77f63c1b417137f6f3a607963443f8f1ee003e39edd60a75233937738a06d559297f7b3f25cb50c076410bd39d7cd842748d25e3695dfffbcee0a7a80341e0c74701a71c9ee2e311dd35453ef73ccc3825d640535f7231dbfc486cf927b0e30d9fde1b79696961fe56d1bd84e1616dc23597a4498553db1e7edc413adce7ce9b7739d5c6ba55520b4253db8836a92adde6f23ff7cf924737750a930c44af2405cf5e2bca9ffaf96e2ee4bb11153a36aaa899ae80e03582dcb5be7631eeb8f51965c6b9536daab8f405ae7f4ec616153672acec644043fbb3aee12381d08d2e12f278ad140f48affa3d3fc5eab3142a6be7b4d9b344a21ef4cc74cb67ea6ae592867b5186c3f933061daaa647399d97ec792bd26f1605e20dbd241053a1d5f513dd6285e2ba7607a4cc3b9a7e599d50b081b7629e3b211f067e7f0d6e022880d9747a16f4af9bbd1b01baf6076073113ea10a7d259c83834dfb62c62ae1cd8657659f32897ab57a8191c5e2e89179bfe2c13167e059e4700d9f91d0e93c6f176dd6c8178969f3d94a46ec65d2d7894c99238f675a51fcd469ed5333e4e7b3517ed1e98e491430a66708471cd3ea8805969378d3346690f74a1a64939f6236db319ca7f5b02552125d2e5f95d8029be52483016c22690ccc4725b614d315110bec21b2fae689a1bb8fcc58f9553598f84f06c4e9aac41f477ed3d872934db0691c522cee55a43503bede63558779acc3c4d25809503c601e148b45f08202e498ead627deafa113504dac4b9144cba54f8a9d4f3da461e6cd178e2acd4448a427f5d495b17e58c785774e3987959f1bef9d0b9e3aef601d23416d43977be867618924ed25cea6c47a86f402f8fa7eeacf7467a3d9105f752aadbad9396cff76c2d9623c708dbbaab4f65eab656e5614b19bfafcab70d759ff982afe847924c840939acaabf63d351ea1af32822b21b3eb7755123cddbb560c92af75403484dd959564aef23c9dc89f4e2bc7f984f0c00900c940e17b14006081296f9a72cfd1376c6e58c82677cb080e9af13e5b8c4feee2ee61aaba88d0d9208a6f654df469aeb79d328f8995cd7d76539ef987dd746b11b5f0bdde8b2711b97d549534307eb6399b8bab76fae55413c30a84b6a8281b0b87c29c1ee3acd6ff3ecfcd71d1e9b841f34a533ced01e10a575415806873100faaae58f62067cc41fc0991620084be76186d14fee8a32340ec039ac1097043daa5074c3bc498d237ab0456aac063feacd6ed8693865729f6e95547930a40374490d4caabbecaa123755c097796e6ee260611f15b1c8475014320f5f4ec3606f19e17f03889c0831a04656d73f8b80b5116879bb79335d7ae58925dd1be44c066d6cc9f4c211dd63eeffcb125e4183ddfc8e0ca5b7eed4ab77d9f4", 0x1000}, {&(0x7f0000001b00)="c6a5aebc5a31a235c34f551dee6260eddcec0dc7caacefb2f37d17797435fd5fa0042306066e62a9d0787eaf73e6bbea8a5f7c9abb0e3309d843019133ca7d015a3394b07be1473c73c79c9e7eda9c7a4144cce72a915b0af2c93583825031aca28bf06ecf5275c3480c4d2c9e75330c19f623c9903fd3b24269aa551811b0ed44990de21bd416ef6c7be86dc95adb5926b2a0273b6ed4f14d67e834c4912401fee9bec1491f88a537eb811b699904732360bea425323633441ff5cfce1a893868", 0xc1}, {&(0x7f0000001c00)="10161783fc5e254ea9cde6c4dbf3bdeb3d6a70cf447771cfd6fdc5eb82c72f4efa7fb3cbde39277920f4d48712e32a3475a5ae6d60424ea456b174a95a438dc746191b", 0x43}, {&(0x7f0000001c80)="5a60208673a4ca0051597cbe05f41fdd437e40a07d9fa5513e3194a561507b1e746b7dbd83d7b9f64e122ad04bec9eb235fd47c2f3bb7a97f48ab16c4e3912eadafa3860c7907720182132e35ef8bc5c77b083369e9a69", 0x57}], 0x7, &(0x7f0000001d80)=[{0x30, 0x1, 0x8170, "5e186769ae4d9aae453dc51c4d7abe34562fa679f244ceda3ff4a85c"}, {0xb8, 0x10e, 0xfff, "ac91b833dc5d0ade2ec9e92aa9a1614053e50be1b0bf851e1e64f518f0a6b6dd60c2736f2035731d0ba3348738b2f763e08fe5ef22d41fc9c56d93fea049b70a1e5efaba65ea02864331aef9b3fdf3bf27b73a820405d6503608b733e5256b4cce7cf25099d8fc5bf077de3091597f98970e3cd01fe38cbba4acddf7e262a6fc896abf6e49d313e4e1d15d045b0d25c02499557f2bfe54b6b9b8ec0dd8beca61a79a4998a1cfdd27"}, {0x18, 0x10e, 0x3, "10"}, {0x1010, 0x102, 0xce, "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"}, {0xc8, 0x119, 0x0, "11f90e16c212c4006cfe4b8765107f40e53d7e41c8810b1c3a6b4e04c74086ba8c7e7b0c5579300dc8afb84c1aa01f8385e15d09b6b89c9652c00a56d1e7a6c9f19c5adb2d9df8f66286639c822173231c285d59dc78035cdc942ac67a359e13672a61831048ede4264c810e897a820b112ef39c08296d2c3bee87a08b5f12fd2d52bf898aaa97bf16f94d01c06daf59a2a0ad95d46b28e3b817efd04249d1377bf673ffad98d41def4a42fc3cef34bc303dc71c37"}, {0x18, 0x102, 0x9, "4d2604df"}, {0x1010, 0x112, 0x4, "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"}], 0x2200}}, {{&(0x7f0000003f80)=@ipx={0x4, 0x8, 0x9, "641461dd6866", 0x5}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000004000)="81cc46b495784deb38808db5b059d2e1b5a2cdcb9ab39fe3d11b81747f002059f7493b78c7fc43de4f1d67e09e320c9cf4405573bb2e7e7a0568dad251efe028c92ea16a0f62427585946b5c2d3ebfb209c2bdeef43f56fd98cab3fd19499778d52034e3140590409e0b6ea98636228324f65eeb1cd0eaa111ff9cf4a08aeaa87dcbfe5cf9d951ccf46f27e60fb4fe4704c9", 0x92}], 0x1}}], 0x3, 0x10020) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000280)={0x0, r7}) 16:00:40 executing program 5: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) 16:00:43 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000b9) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:43 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000010) 16:00:43 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000012) 16:00:43 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000080)={0xf9c0000, 0x5, 0x9, r3, 0x0, &(0x7f0000000040)={0x990a6d, 0x1000, [], @p_u32=&(0x7f0000000000)=0x4}}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r5}) 16:00:43 executing program 0: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)={0x0, r1}) 16:00:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)) 16:00:43 executing program 0: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)={0x0, r1}) 16:00:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)) 16:00:43 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) sysinfo(&(0x7f0000000080)=""/70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0xfc00, 0x0, 0x9c, 0x1, 0x3}, 0xc) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r3}) 16:00:43 executing program 3: clone(0x2000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x39}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @multicast1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}]}, 0x74}, 0x1, 0x0, 0x0, 0x44000}, 0x80) 16:00:43 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100010004) 16:00:43 executing program 0: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)={0x0, r1}) 16:00:46 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000ba) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)) 16:00:46 executing program 1: unshare(0x62010b00) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:00:46 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000240)={0x8, {"08df0b42c436c835ffbb331ddf1b6b1de0fd3b25f53c29358480877ad8248e7512a7af40dec45569ba118cfd32fa1011d6a3cd9b11d50ee8d10223e8c8f52b52845ed7695cc1c97edf553bfc40a79cceb63892c265e93950f2411f764191898becc5a98177694f99cbc9f1798bba8d6e7ac0a106e741fb4b70cec84f445295ddd40501cfbcd6c620d4f37a7356c9a2c070eabaec0c74672ba7de7e0c520078ae3104eb9ab6cfabcf97c215de93a645d49ab9a0c3dcacc2da9c56e1734e9e4dfbedebfbf183b092ce99910933c530077c34896c14361323e47f9a3c00805bed185344bcf452b29a52c523b68b4cd8fbf31859bb1fda486e412af7e5875bd43d5c34c12c513a49ee7b47dc3f7c758c94b3b82c5064c3c2efb1fafba3d6750a8039a4675f6d216bb987dc8834d6960ea13fa5b0cf8b2374c920a20c4316fec09971e908ee4774ca4c4820c026afd3e1705e6eda07aa7d0644fda8127738ae3841d9d676446ed31977668d8a0056eb5e9a0a5fec5ad757f72039278f7d955793f4058be273819b33d06bbb76e3e9fea2f5a137f58989524ebe8ac9d49808b062e5a15fa7de57065160a9078cc6b755ffa1f3f9a0330f2e318f8549aa44340ee982a20878d0e4ff73694131f5b40aa7e81d2902d2c71b23158003b638562e3bfe0446d43bac77deb11a4836b46e52f278ed3205e8d4ed990a683266beb9725ccbe6e704e7df091380f311bad44b609b0f48f74c50734f7f0c378ecb4009c74f71875ae291b6bc6d842427fb4867c45c2cadeef615d3244806044be3e9eb381798a31c2c0e0cbb6c9683eeb15deb8bfa5c43e1f01bf41c04374150c4a5b733fce4d5793d791ccce1453c43b8dc2f57531a5621d6129c3aabfd4ffce71404d87a79d3acb20f2d399bad61da4ab38cb09067a5caa8597e8556aa1ca26dde5fabdf2af47a000e5fe64b1bcd9ee004d1d9b04d319bd9f16a444040a252eb26020749de8a8db9a322ab797dcb5a4e3a23d0ef9b58fc62aa7eb726fbbed90ff945f95d3dc6f22f03a184f2ea3554f631acacf7ddbe74318f28b8ec46dcc127b4c0c0536b261e36f0838bbd44d9fff47b9d4d19a19f81a1a4abbcb6d55b8f689b479affe80a35e34841f70012dbd01fd473cef856edbbe34ea5edcf9069a4c23748e81f4a440132b30926d6e359c96e99743810128bbc75e82de604dbd8ade697e4476037b978a21c6d2e65f3b2882c03212dbf91978da58ddee08fd0f7363f5bb3a462d453fb893580bea565842b851beb9be71cb9795d819b50ae64cd04e68ec98b7029d98fd396a1f250a3f23c62938e328d4f88625408b9dcec8f1875b0583c8011f12608111e603e5eb8a72fddeb7ded65e3e9ea7a147a79a399b6f2e9cccf7b64e4a0e3dfd62b19ebf6677a4ff3e3449b52dffde7b98df4d3b174fe298e3a5d0fdc7e1d1c10e62f0a4cefe34ded6c16c0f45f20be6a00b1bd4cc922aa39b0ab369b44a8f97189ab2f1f168c851ca6ef821d120d08ab63640c801592097603afcdfc9cc2f790c6849eead89f58308a3b600d7d4ae906a1a2303f16bf88280bd103f7fa8fa355f24167f7ed928231f88056a82f05c8166cec3b9d817ec936ca709e46eb791e5c4a4b64b4f7f27ea6200fd10fc249105c5ac9c5a9b06715715302338b38e687693d08e732537f62d21ac3e8b40acaaac7b3a52a91f4b6e11ac78b1662c8c6dc71d49a2228d3d152e0af909a6813fd1aae580c3badb58e43e1c4f86739909cf9a74e1626057401a5767c5fe209ae483d5d5b82c30799d458af9ec26e90ccdf0c469fd810a04f5403fa67eaaa4078580e8654266fad9fda0a50f5b5f54a8218c4e116792e88a7175cce09a0468e98a7527728b0a6eef82685ca15032c480f4110a930564e42d50cc3b523fa8d8b71cd511f48b2ca7bab005419f1dda7862bb43b6c925ee6093f0a3b25752473a3789c344e11a816c287552ecacbf76861de134e0a0d6cff166da1533d04c3c68c02cec8c4491adcce58b92ac78e3f5a1611f5fd1a8331ac1e731f008aa96415be47aecfb55041e3bfe03a16461a7afaa12cade617f61998dc1921ba0347861caef06e54bb51636b195f132d05851265ed639c329b6cfe71bfd93aa92e7cab1421b2ee1d95f8fc7af30a5b8f6e01ed88bc9981dfde50ab26b644fb68e7e12b11f7f320e7c5238c68291500ad407a79dcd0498a776fc4b3df16dc7cc6873e5a99de34fc2d3e5ab913e57a91e32b496d84e772777d7e9114a70d684819680fb1550b46f7fb9e9e0307c341ff9afd1332d70ca98ddd374e53feba5ef9edc02fb1d106a6ea1e3b1e4fabaf2cea44ecd0acc0b74b720dbefa40c72d4e0d72d5b94e147a6ee6beb26e19ed15a8761756ecd2bf634ff95e8e48e804b46db1eab402ef4cd760fafc9ebcb370c2defb480c5bad5b0f4eeb03c1f6b739d052626b0fc7712329a7f4c3530431b61a5ae3578573e6cd07280eca9e06b618620bddb94d155622283774f98d6431a72226eeabfc31b0364c073a585b9ddf2fce726c2daa31e9a19386434992847a3c1b6c26152f72f88edabed092bc6045b53cfa68e15cd014e1efcd6438cf7bff6094a4205e8a80a594297a2ea47c5480be87e71f07608b2c77322fafd5d801551c40e2c1f7b82b7d4222eb523d9b76aea3561844f902e8bd735064b713325ebe009e956949e27624fb531f6bcb34b54dd752c788b84d8c173a585f9de9366ea02fbf54d3d788d8e69724bc7f90ee08bd5cc3216c2c3a517a5d3031a019a7411363b0b4c1cadb91a975788b9c678efda3bdb0cd1920be30cf50d4ac823a15690d7ac126812c37062fd2013cf5fed0c0044823bbad205b483a73d0d6f0d314b9e284701c36a4488d6f6d331d348e7cbe104f1b4227785560466f7efbd6f0a89c809f0f0889b348242c8bcd406d5b3fab1d57563c27295db68ea67e48128be320cb5f144f286d666f3602458b00ffa5cdecbf39cf4d4fdb3594c6471898c49c79cf74c8e2778d094d14e810b40f8e2584270b603b4aa8d9e43c753542d3186027dfd7b957c584747bc48ebcdbdc27d8e63dd4dd1b5bf1873d0f03304f4ca926eec83351e3abb402bb11feaccfdd1b7b4a15ae97086d3ce73a2ef2dd1bb81d2ff20f819dc2bc6a406d298606bd0fd868fa40cdc1a9a282fa8c63b01c63aad786dda953e99a1105f16af0879b46ba413455303ac8ce9956e6861baa41e8fba76deaae19f09ad3040d2e079dc2ca347f1bfcbd97f22106eba737d947ce2e1ad34a2f2fd32e168b33d302bc56bd69fe97e760d651f27174997ab9485632c104c060716237b23993ac9d438495ce8d13b1929a382d6bf1097683bd915f39b9858e64d7750fe6277a4a808b6ce1ce8270f4617ca89ee7341021bff3efa76e54fda212a0c1437887517a1ad172173306d48f78a6dc1cd221382155895db35c2014aca2d846d278fd79e6712dd2397e5ff4c9fea7ac4f1a70eb0b402e33432e5ca5b51cd067559158ff2667647d50dd2f595394dd956699e1bcbe52fde079ebbed1423626fbde632bf385f81e88b6cf872ede8dd3b4fb1a72535f9209a549e6392ff0afd584f08e9ca6222fcc1d3f67c079eab02b46713b5cc70e55878b38ce62e3dcc12f5f6d4cb3ece17c51ad52d36a96a8d0eeede0a047374a64a352900240a41300f4da9777739eac9fa98c4a9328c0d58165b985f36059eff5d8b6546bbf60276a751ea94aa1965103f22ac47c6e47014c742791510da0d0abc6fbebdca4721890e21bb7a671e75846eb7ebce8dbb03d4e2ff7177fa0b1ae30a878f1604691b8af4305f16bfa8f9f918c8ca23f5d20b9798f9880a2c64d551c05f4195117239042ce1b753291fef459541744f83deaca3a44dcc791db01d80aa4dab393b047ba7b74b54ebe5e66313a168c9d54c7e5aa2874fbd8f9bf1c7bc20722b8061c3155cc550606dfc626561aa3075219c355ab3bc4841cf8fcd98d5c5ebefb5b20dea8dcbface434f7c6077c7e0e92f6dd3b4cd701fd2117ef36e66ee001cab57d421c857a41d67bb24d29b4552aeed6bc81d869312ea36511ca8532bb54cd328ed02ebf2f7eaa20c764671dfd76791fa03f7c23280c11ca508c3e89dd3af8f2964192317c4855a7dd4174d2671db854db3c5a7967330d291b0a62118e41b17eec9c10aeb067aa51124d4ff2b53e467e73f82352e77170e27470125d22ebc55cc4eb8491ef9e7ea81c11cde188e7c29bc10b840cea6c03aa42b3bde748fb8698f6dffd6afb87554fe2561baa7cbc0eb96840c06058908770f680bcbb97cae8be697388826e4673d673a58da89441a118fae530fc79a42177cbd266854de736aebe79727ca2191575f72241f2daaf9c2bb4737286722645c6f1b519055df8f950c81f7173d2df604c0a742e05f696d152e45bcfef3a755c48cf11e0325a9e102806ad30aeee21bc400c33fa5150fbbb8eac79805906a1ba07e7d6baeea83544dc037d00ac839659c4b7320990362f0d63883f12801e5de89cdf27a51725f81ff9f9ee3d4e54ffab81c7c7aa0b9dd8d4d93fc11d7667355a0aab014227a90aaa06df9b62987191bb1279c6740588e66833a4c638f9b880f08c48edbc94dc73c4670eda9c6628a21374929af9a86605e36249342d2d621207f5009186c4226d1c544a21ef036649fb82ff951149473a0946de23ed171befe83a23c8c1939dae92b83b8b27fe18efd6b275c02bbb9c91e0739988b3b7586aabf176d02de6cc8d424c736eefe63bc0e4a32d23ef2f91fa4dc1367248e56eaad9206986373628af9ded83392824f64055226f252b8439acb7d47eb1e8f5320b19b919999059104b56db6c54554005ebd6b1cdef5238fd3b2c22174f5401a9a5ad48fb9ea1e99200e58aa5a5c48cc1f4d89bea08dcfa4114cedb7bd1586e7df764bc4c4cfa65606b0b62a96d814cf51255226f121f3f9d22294b455bbf8ba5825c0c9eb84f513f81d9ff7436f7b5410d28cdcdbcbf24b194c89fa36953039a36cb2e7ef4ac87ea1783d0fe5ae2dd950c641a424f843c0268ec8f4c6e74d774d72c70f311f333340c97ce3163b4ddb59997054bf1a94a7b5f4a54c3c097116b1b9a196633a874b6232ad65397f3af3fadb98d47927aa9a2db46ab8c33ce4776c231db24eade87f97ab9b635bef5b62ce1814cc5f62ecc77c9c798d2b336a2c917b720f4d6aa796b705a764df02d8b0f478011db5b8b6a08ac770a4fdedac7664bb1c766e7f4af31f68bf44288c226e10af1b8bc29a398806352c9e67494ff021d3da7acca3a3699513cd588ac8047903a3870f0479e4b601cf9b7dc2ac688eeaf193df82901c875e2ff2cc846074221ff47133fa84885814ce4623e87b615122aaa08f473d3e41cd18ec18ee1b7a70245b793f628004960bef1c3911cd04a13ef170f1c84772e46ad6fcb2baf07e56830e9a63667167b1a9d403b946a5c6c5ea626e0f2078685be3fc6592e6027bfb37e902db35fdb0e7a9a85730b81c456c246a2ba1fce569c17be2f91cc7c36359172453071353325c203c097d923d510a6151ba415868acc7a0a820323f9b24e91a0ca2de12091460b4be3f4ff01a786f6ba38f7e2084157f74bf9ea783fc516884befdeea561786aa7eb8c2678a6e30d1bb2a5a3ef460cc471d50d6030e998b40583fadccd84e74e25025ba8671a1b252aaf3510a80a0ae97b6f8650c316acc73c460e72c4a62fe03a104167c1c47b1e7ce4743b1e091da8666d789070313780aeac59510d16e15f8ebac0993e6", 0x1000}}, 0x1006) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000000)) 16:00:46 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x801ffffffd) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KIOCSOUND(r1, 0x4b45, 0x100000002) 16:00:46 executing program 0: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:00:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)) 16:00:46 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:00:46 executing program 0: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:00:46 executing program 3: clone(0x20002104ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:00:46 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xfffffffe, 0x3}) 16:00:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)) 16:00:48 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCNOTTY(r4, 0x5422) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c010000130010002dbd7000fedbdf25180205024e244e220900000028b48f60ff7f0000ff7f0000000800003f000000ffffff7f09000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4845}, 0x4010) r5 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VT_WAITACTIVE(r7, 0x5607) 16:00:48 executing program 0: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:00:48 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000bb) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x9, 0x8, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:00:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)) 16:00:48 executing program 2: clone(0x20000012e7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 16:00:49 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000080)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:00:49 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 16:00:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)) 16:00:49 executing program 0: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:00:49 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8a180, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b45, 0x100000004) 16:00:49 executing program 0: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af13, &(0x7f0000000180)) 16:00:49 executing program 1: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000180)={0x0, r0}) 16:00:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) 16:00:49 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000040)={0x23}) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xb0, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x13f333d2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x932}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x762}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4f}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2004c000}, 0x240400a0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8}, {r2, 0x11}, {0xffffffffffffffff, 0x752}], 0x3, 0x80000001) syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r7, 0x4b45, 0x100000002) [ 1384.870738][ T0] NOHZ: local_softirq_pending 08 16:00:51 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000bc) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:51 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r2}) 16:00:51 executing program 0: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af13, &(0x7f0000000180)) 16:00:51 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KIOCSOUND(r3, 0x4b45, 0x9) 16:00:51 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) 16:00:51 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 16:00:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) 16:00:52 executing program 0: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af13, &(0x7f0000000180)) 16:00:52 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x100) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x1a4, 0x15, 0x100, 0x70bd29, 0x25dfdbfb, {0x1e, 0x20}, [@INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "b24476d95c1e0e622df09d5a20ff6c56d073486871db"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "3c154b09b0c2750ef7b0a1a0e38cb1b26882a6e897c2f7818cb9b7ab06b77b3eb01e62df382afa6d1c222817972f306e8cf1d917fd2f97fd6c37609966d4d7cf94e4c55da6c48b02e5807d020acfeaff8282ddc48b1bb494ae777766d483680492be5b9a9b5d45c029ce9920934ab18ca8ffd48eaf6fe21a7b557056320f6f0b7667a5d45007c81baf7d895ed43311334ca891041d03c14e"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "c48950503a0f7697262977468c09270d67bb8902e6f5303945ec4052b8303ab14f216062b9dffc10198d5b4845561b3f46b04b8782584b45b1b923053b3093f6aace87ae55445258591f6d3b7cef4b64d4b0562d581d7648de1bfc96f0dae543ac371dae4037eff160573a2aaec190c5dbd22590ab6235abc8e734af1aeff790ff84af087e2ac38957ebb4abe0662ced490ec8beb3ed0cf35ae7537b428aefeb442f35800719f6184d873c05f213ebe824aadcb9a80f84e5dbab8faa498abd75d0ef1d6c5dfe1e28239b6ec0ad4008d7c4b7ad63"}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'veth1\x00'}}, 0x1e) ioctl$KIOCSOUND(r0, 0x4b45, 0x3) 16:00:52 executing program 1: unshare(0x20000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x8, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000180)={0x0, r3}) 16:00:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:00:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, 0x0) 16:00:56 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000bd) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:56 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9020400}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000080)={0xd, 0x5}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r5, 0x4b45, 0x100000004) 16:00:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:00:56 executing program 1: unshare(0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:00:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, 0x0) 16:00:56 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x741c83, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x80000001, 0x72e8, 0x37a0, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000000c0)={r3}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000280)=0xfffffde0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x1e, &(0x7f0000000100)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e24, 0x70, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x9, 0x9}) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 16:00:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:00:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, 0x0) 16:00:56 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x66, "68b42c9d58a1fdb8df7c00526f862c4f386e00cedbe6e55837aadadb4dd8d69dc020a6b69391e1b63b36cf632054db1ad0070471dc049e813787e77b301512bd4400a7263110b3cf67bc9b47b92115cee11abd354f5c116d27af1f0ae72b631c7ca9bae8941c"}, &(0x7f00000000c0)=0x6e) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000100)={r5, 0x1000, "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"}, &(0x7f0000001140)=0x1008) 16:00:56 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETXW(r3, 0x5435, &(0x7f0000000100)={0x73e, 0x7f, [0x7ff, 0x101, 0xc65, 0x1, 0x8], 0x1c7f}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x198, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2e}}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40c0}, 0x4080) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:00:56 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080), 0x0) ioctl$KIOCSOUND(r4, 0x4b45, 0x100000002) 16:00:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:00:59 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000be) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:00:59 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:00:59 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:00:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:00:59 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xfffffff, 0x1, 0x0, r2, 0x0, &(0x7f0000000040)={0x9909d9, 0xfff, [], @p_u8=&(0x7f0000000000)=0x9}}) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0x0, 0x3}) 16:00:59 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bind$rds(r8, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x801) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000000)={0x0, r2}) 16:00:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:00:59 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:00:59 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000000)={0x2, 0x20}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b45, 0x100000004) 16:00:59 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x165002, 0x100, 0x1}, 0x18) write$P9_RLOCK(r2, &(0x7f0000000080)={0x8, 0x35, 0x2, 0x1}, 0x8) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:00:59 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) 16:00:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:01:02 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000bf) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:02 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000100)={0x9, 0x4, 0x1, 'queue0\x00', 0x10001}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd2(0x1f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000080)={0xa00000, 0x2, 0x3f, r3, 0x0, &(0x7f0000000040)={0x9c0905, 0x4, [], @string=&(0x7f0000000000)=0x20}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f00000000c0)=r9, 0x1) 16:01:02 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x40080) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r3, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800065ca9d2134703622eb7d2184489dd001000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) ioctl$KIOCSOUND(r1, 0x4b45, 0x100000002) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x20400, 0x140) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0xbb, 0x2, 0x8000, 0x0, 0x2}}) 16:01:02 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r5}) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000003b000000b455b37ec2178e0eca8c1f9cdfbcf2eb54368bf2f7c5aae0dd95bf6fc68f6f91178cd979960f5c74f494d605f832937414f885ce29e1cef1a517f6"], &(0x7f0000000080)=0x5f) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:01:02 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:01:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af13, &(0x7f0000000180)) 16:01:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af13, &(0x7f0000000180)) 16:01:02 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0xa40, 0x8) getsockopt$inet_int(r1, 0x0, 0x34, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @mcast1, 0x6}}, 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000080)={0x2, 0x8}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x401, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0xf, &(0x7f00000002c0)="ba2bc831f077ecc6396f8f3f5574d4d3ac4bd027820cc3615e33411f9469a10666d54c005677a197ba1fd1ada7861a1054b28af1f5bb36b42fe8deca0d5e5c720c7a2d8d534282eddfeee93b5d6da165288bd87802d3d2c234fa39b241f19290e16cdf7ec72e6170a69fb74b6779aca9288ac33c7629976933bbc1d5098cb3de8fa74adbaae13dff8946061f80d2fd04c804c180527c3a2d69a4d142799c0bc43c5a0c8f8678c331619aa12680de344608d6ebd78d92524b89e9b57ffc4635ef7936a06ca153239db828280f1ce2e3e94939c648", 0xd4) write$6lowpan_enable(r4, &(0x7f00000001c0)='1', 0x1) r5 = eventfd2(0x0, 0x80000) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r5}) 16:01:02 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)) 16:01:02 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x8000000) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0x800, 0x0) keyctl$read(0xb, r0, &(0x7f0000000040)=""/141, 0x8d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x10001}) ioctl$KIOCSOUND(r1, 0x4b45, 0x9) 16:01:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af13, &(0x7f0000000180)) 16:01:02 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)) 16:01:05 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000c0) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:05 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x204002, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000000c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) unshare(0x20000400) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000180)={0x0, r2}) 16:01:05 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0xd9, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="170940000000000000000100060005000700000000000800090000000000060002000100000008000a0000000000080018003f000000080019007f000001"], 0x44}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8b}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x2080) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000038c0), 0x4000000000000a8, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000300)=""/66, 0x7}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 16:01:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, 0x0) 16:01:05 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 16:01:05 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)) 16:01:05 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 16:01:05 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:01:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, 0x0) 16:01:05 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x40002) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:01:05 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x40140, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x50, r0, 0xd36b000) exit_group(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) set_tid_address(&(0x7f0000000080)) ioctl$KIOCSOUND(r1, 0x4b45, 0x100000002) 16:01:05 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:01:08 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000c1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:08 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000)=0x6, 0x4) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:01:08 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, 0x0) 16:01:08 executing program 1: unshare(0x20000400) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x103800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000001c0)={r3, r5, 0x194, 0xdb, &(0x7f0000000040)="1ba7228d0f6ab3d7d7607aa79420122d8b18b23309220db231954a51585c61500895e28b1b42d1a1b70c7571af9f7b08739ac296f6271b01e6b71bd4e130c0ed7de2edefcfd58a8e8b0f4efb8ba621ba11f0e01eb0aa0f0ec751480a11ff35ef3a0e12ac70f22653c7c1bcec14b3a38014d79c293cb5986999b82390764520558cc2e4aad0b961278443ced12cf6331b84e6c7dd4de8190bee1869b9bc6b8d436e9e3896e620ef4a494fff370ca1ef7f53c6a2e8d6eb7cb91d4ce95b3b4cd77884a3f126203c548c3d41601aeedc50655def41b5dd30f7e4b8579e", 0x9, 0x34, 0x4, 0x8, 0x7, 0x3, 0x9, 'syz0\x00'}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r6 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r9, 0x2}}, 0x18) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r6}) 16:01:08 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x8000000000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200000, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)=0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 16:01:08 executing program 5: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:01:08 executing program 0 (fault-call:2 fault-nth:0): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:01:08 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5600000045d7f9dcb47039ce458e1f352fc26b2f0485a964b81ca446b0b679c3d243975ec54e43350762088b19e73e0f1c0f006d7b74049e62bebe336f70f7e480aba596a53db935b39dd1c56eaee0c87a81a072ddce096434f2871196b63e45ae96f1c375c740b4b296518ce2ab774101", @ANYRES16=r2, @ANYBLOB="000427bd7000fcdbdf254c0000000c009900ff030000040000000500f600040000000800dc00060000000800770005000000060098000180000004008480"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) exit_group(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KIOCSOUND(r3, 0x4b45, 0x100000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000000)=0x8, 0x4) 16:01:08 executing program 5: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af10, &(0x7f0000000180)={0x0, r0}) 16:01:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$isdn(r1, &(0x7f00000001c0)={0x22, 0x3f, 0x5, 0x8, 0xd7}, 0x6) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000280)='./file0\x00', 0xc000, 0xc4b9) exit_group(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b45, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x180000, @private0={0xfc, 0x0, [], 0x1}, 0x6}, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x10000}, @in6={0xa, 0x4e23, 0xfff, @private2={0xfc, 0x2, [], 0x1}, 0x6}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0xc5d, @empty, 0x228}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @broadcast}], 0xa0) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000040)={0x0, @qipcrtr={0x2a, 0x0, 0x7ffe}, @nfc={0x27, 0x1, 0x1, 0x5}, @phonet={0x23, 0x8, 0x5, 0x7}, 0xffff, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='veth0_to_bridge\x00', 0x8, 0x1, 0x3}) [ 1402.003572][ T7947] FAULT_INJECTION: forcing a failure. [ 1402.003572][ T7947] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.039770][ T7947] CPU: 0 PID: 7947 Comm: syz-executor.0 Not tainted 5.8.0-rc2-syzkaller #0 [ 1402.048660][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1402.058732][ T7947] Call Trace: [ 1402.062048][ T7947] dump_stack+0x18f/0x20d [ 1402.066404][ T7947] should_fail.cold+0x5/0x14 [ 1402.071019][ T7947] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1402.076749][ T7947] should_failslab+0x5/0xf [ 1402.081272][ T7947] __kmalloc+0x27d/0x340 [ 1402.085531][ T7947] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1402.091100][ T7947] tomoyo_realpath_from_path+0xc3/0x620 [ 1402.096664][ T7947] ? tomoyo_profile+0x42/0x50 [ 1402.101371][ T7947] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1402.106847][ T7947] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1402.112502][ T7947] ? tomoyo_execute_permission+0x470/0x470 [ 1402.118499][ T7947] ? selinux_inode_getsecctx+0x90/0x90 [ 1402.123988][ T7947] ? check_preemption_disabled+0x38/0x220 [ 1402.129747][ T7947] ? __fget_files+0x294/0x400 [ 1402.134448][ T7947] security_file_ioctl+0x50/0xb0 [ 1402.139414][ T7947] ksys_ioctl+0x50/0x180 [ 1402.143682][ T7947] __x64_sys_ioctl+0x6f/0xb0 [ 1402.148377][ T7947] do_syscall_64+0x60/0xe0 [ 1402.152819][ T7947] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1402.158724][ T7947] RIP: 0033:0x45cb19 [ 1402.162619][ T7947] Code: Bad RIP value. [ 1402.166689][ T7947] RSP: 002b:00007fd0e36b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1402.175115][ T7947] RAX: ffffffffffffffda RBX: 00000000004f1940 RCX: 000000000045cb19 [ 1402.183099][ T7947] RDX: 0000000020000180 RSI: 000000004008af13 RDI: 0000000000000003 [ 1402.191085][ T7947] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 16:01:08 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x1, r2}) 16:01:08 executing program 5: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af10, &(0x7f0000000180)={0x0, r0}) [ 1402.199072][ T7947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1402.207060][ T7947] R13: 000000000000060d R14: 00000000004c8f47 R15: 00007fd0e36b66d4 [ 1402.703550][ T7947] ERROR: Out of memory at tomoyo_realpath_from_path. 16:01:12 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000c2) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:12 executing program 5: unshare(0x20000400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af10, &(0x7f0000000180)={0x0, r0}) 16:01:12 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7fffffff, 0x2) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:01:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x1e, &(0x7f0000000100)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000600)=@assoc_value={r7, 0xba0}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000680)={r8, 0x20}, &(0x7f00000006c0)=0x8) r9 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000240)={r5, 0x1, 0x5e, "95d65930051d73c248ee92595509d44f7b032d2cc5c8143a962787c6633c64f2d588586ab38ac36805e02b3757c60f0e9ef597bb2e9a0a29efbc2454fe22646d3d2dd9059b7d78c951a49abaeb97e79af4d1f0fe05e9671386f4e3cba0f4"}, 0x66) ioctl$KIOCSOUND(r2, 0x4b45, 0x100000002) 16:01:12 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0xfffffffb) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000240)={0x0, 0x1000, 0xff, &(0x7f00000001c0)=0x56}) eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCGPROP(r7, 0x80404509, &(0x7f00000000c0)=""/181) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x39680, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)) 16:01:12 executing program 0 (fault-call:2 fault-nth:1): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:01:12 executing program 3: clone(0x200320dcd7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) fchdir(r1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:01:12 executing program 2: exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000000)={0xb8, "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"}) 16:01:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) [ 1405.468448][ T7995] FAULT_INJECTION: forcing a failure. [ 1405.468448][ T7995] name failslab, interval 1, probability 0, space 0, times 0 [ 1405.545197][ T7995] CPU: 0 PID: 7995 Comm: syz-executor.0 Not tainted 5.8.0-rc2-syzkaller #0 [ 1405.553953][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1405.564021][ T7995] Call Trace: [ 1405.567333][ T7995] dump_stack+0x18f/0x20d [ 1405.571688][ T7995] should_fail.cold+0x5/0x14 [ 1405.576304][ T7995] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1405.581692][ T7995] should_failslab+0x5/0xf [ 1405.586119][ T7995] __kmalloc+0x27d/0x340 [ 1405.590376][ T7995] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1405.596116][ T7995] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1405.601331][ T7995] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1405.607067][ T7995] tomoyo_encode+0x28/0x50 [ 1405.611504][ T7995] tomoyo_realpath_from_path+0x186/0x620 [ 1405.617162][ T7995] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1405.622639][ T7995] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1405.628288][ T7995] ? tomoyo_execute_permission+0x470/0x470 [ 1405.634155][ T7995] ? selinux_inode_getsecctx+0x90/0x90 [ 1405.639637][ T7995] ? check_preemption_disabled+0x38/0x220 [ 1405.645382][ T7995] ? __fget_files+0x294/0x400 [ 1405.650088][ T7995] security_file_ioctl+0x50/0xb0 [ 1405.655050][ T7995] ksys_ioctl+0x50/0x180 [ 1405.659315][ T7995] __x64_sys_ioctl+0x6f/0xb0 [ 1405.663919][ T7995] do_syscall_64+0x60/0xe0 [ 1405.668353][ T7995] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1405.674256][ T7995] RIP: 0033:0x45cb19 [ 1405.678152][ T7995] Code: Bad RIP value. [ 1405.682221][ T7995] RSP: 002b:00007fd0e36b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:01:12 executing program 2: clone(0x200000c03fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) [ 1405.690651][ T7995] RAX: ffffffffffffffda RBX: 00000000004f1940 RCX: 000000000045cb19 [ 1405.698634][ T7995] RDX: 0000000020000180 RSI: 000000004008af13 RDI: 0000000000000003 [ 1405.706619][ T7995] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1405.714604][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1405.722590][ T7995] R13: 000000000000060d R14: 00000000004c8f47 R15: 00007fd0e36b66d4 16:01:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:01:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_WIE_ON(r1, 0x700f) unshare(0x20000400) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000180)={0x0, r3}) [ 1406.062177][ T7995] ERROR: Out of memory at tomoyo_realpath_from_path. 16:01:16 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000c3) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:16 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x17d) ioctl$VT_WAITACTIVE(r1, 0x5607) 16:01:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:01:16 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:01:16 executing program 0 (fault-call:2 fault-nth:2): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:01:16 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000100)={r4}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) ioctl$KIOCSOUND(r5, 0x4b45, 0x100000004) 16:01:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) [ 1409.934089][ T8048] FAULT_INJECTION: forcing a failure. [ 1409.934089][ T8048] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.980230][ T8048] CPU: 0 PID: 8048 Comm: syz-executor.0 Not tainted 5.8.0-rc2-syzkaller #0 [ 1409.988863][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.998934][ T8048] Call Trace: [ 1410.002253][ T8048] dump_stack+0x18f/0x20d [ 1410.006620][ T8048] should_fail.cold+0x5/0x14 [ 1410.011237][ T8048] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1410.016629][ T8048] should_failslab+0x5/0xf [ 1410.021062][ T8048] __kmalloc+0x27d/0x340 [ 1410.025331][ T8048] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1410.031078][ T8048] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1410.036303][ T8048] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1410.042039][ T8048] tomoyo_encode+0x28/0x50 [ 1410.046468][ T8048] tomoyo_realpath_from_path+0x186/0x620 [ 1410.052135][ T8048] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1410.057610][ T8048] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1410.063313][ T8048] ? tomoyo_execute_permission+0x470/0x470 [ 1410.069176][ T8048] ? selinux_inode_getsecctx+0x90/0x90 [ 1410.074658][ T8048] ? check_preemption_disabled+0x38/0x220 [ 1410.080388][ T8048] ? __fget_files+0x294/0x400 [ 1410.085073][ T8048] security_file_ioctl+0x50/0xb0 [ 1410.090028][ T8048] ksys_ioctl+0x50/0x180 [ 1410.094289][ T8048] __x64_sys_ioctl+0x6f/0xb0 [ 1410.098919][ T8048] do_syscall_64+0x60/0xe0 [ 1410.098942][ T8048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1410.109239][ T8048] RIP: 0033:0x45cb19 [ 1410.113133][ T8048] Code: Bad RIP value. [ 1410.117199][ T8048] RSP: 002b:00007fd0e36b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:01:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:01:16 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x0, r2}) r3 = eventfd2(0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x18640, 0x52) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x802, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00') r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xff25) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000f31000ffffff00"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="20002cbd7000ffdbdf250300000008000200040000002400018008000600010000000500020081000000050002004500000008000700", @ANYRES32=r10, @ANYBLOB="28000180050002000000000014000400fe800000000000000000000000000021060001000a000000080002000400000008000200000000007a8afaad3900087ced1a7687209333b47d7f462583fc9552478042e915d1c5ef88c3daac413ad52895822a34596960a5d1823f9326c12e22e3f65f1af61272a8eacdb9b86e40c684f2b7aa01ec79cc6aead3b669481bd00997da972fa3de2dee5960a81da6496ddfc37ee9d3804e25873ccfbba7aefee97b6e47afbe580cb1570ee8e02a93c4999376db1432ba1461af6e4720d3b6d8fbec0113087cb2c22f"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x50) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000000)={0x0, r3}) [ 1410.125710][ T8048] RAX: ffffffffffffffda RBX: 00000000004f1940 RCX: 000000000045cb19 [ 1410.133692][ T8048] RDX: 0000000020000180 RSI: 000000004008af13 RDI: 0000000000000003 [ 1410.141685][ T8048] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1410.149670][ T8048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1410.157654][ T8048] R13: 000000000000060d R14: 00000000004c8f47 R15: 00007fd0e36b66d4 16:01:16 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup=r1, r3, 0x14, 0x7}, 0x14) exit_group(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r4, 0x4b45, 0x100000004) 16:01:16 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}]}, &(0x7f0000000180)=0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x1410, 0xb0c, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x24000805) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000002c0)=0xbc) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=@assoc_value={r2}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x9001, 0x2, 0x3, 0x2, 0x0, 0x85, 0xa83f, 0x4, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={r3, 0x404c, 0x0, 0x13, 0x9, 0x2}, &(0x7f00000001c0)=0x14) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)=@bcast) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1410.294166][ T8048] ERROR: Out of memory at tomoyo_realpath_from_path. 16:01:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:01:19 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000c4) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:19 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x200, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x20800, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x4, r4, 0x1d, r5}, 0x10) exit_group(0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r6, 0x4b45, 0x100000002) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x100) 16:01:19 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x1, 0x0, "9513da78f1a6eb8151c9f4b7e4e149850bfbf8f9befe1ae23f4e8b65419acc323bb997fe6544302905d2c41b61c173331c92fbe5f5721ea18569abfa37d14539080bf880e0465c0ef6a8b8194c1844367a5f941ec09a6974ca1f528b89205b272541e8498bab14310b7e8ca0aae84fca7bc51f6cb61b04ca62039bbcdfabf7373d821da90cdde0d1553e584e33dc49d17be72f720e5eb3b40b054da2b70a58a8491d06daa40e44de01899215fa564361b08f9859280f303a34bb2742b29282a2e8dd5ebab832f1f479fc1c0aea"}, 0xd5, 0xfffffffffffffff9) keyctl$describe(0x6, r1, &(0x7f0000000180)=""/87, 0x57) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:01:19 executing program 0 (fault-call:2 fault-nth:3): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) 16:01:19 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f00000038c0), 0x4000000000000a8, 0x0) sendmsg$sock(r3, &(0x7f00000001c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000100)="11d6dc966b60b9c7c0b670bd1d767131a595d3d3d89e74b6c0e10b77eefb55151ad87ce4fa6181dcd4b21cfe64ee83fbfc0eb261c85c9e7991507161b6272b71a8b3335327de84dd89c3c23cc4fc5663b2bd1cc0a9e1929cd7", 0x59}], 0x2}, 0x80) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000002c0)={0x2, "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"}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=""/57, &(0x7f0000001500)=""/254, &(0x7f0000001600)=""/121, 0x4000}) 16:01:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) [ 1412.876773][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 16:01:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:01:19 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f0000000180)) [ 1412.985886][ T8116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 16:01:19 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0x800, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r0, 0x3, r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b45, 0x100000004) 16:01:19 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x8000) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 16:01:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:01:19 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x2, &(0x7f0000000180)) 16:01:23 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000c5) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x44}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b45, 0x100000004) 16:01:23 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$can_j1939(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r7, 0x0, {0x1, 0xff}, 0xff}, 0x18, &(0x7f0000000100)={&(0x7f0000000040)="7be00c03e43ca716a736dfc1f9e815ea66ef900606b482d58afbf54c86612aa7e16b8be3b8eff70ea4acc14854af9f9f0c9e7bf613636c36472e985a7231777402050b0fcae63d09d343cb063e3d7b741ee57b46bb48c97e87e3044adbe37cdebe493e7c113c0f0117472f712ace12bf1505580701f5a87f5c5415eb9d6527ca3c4049dc8d5e2234a03ddb0380028ad7", 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x40000) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:01:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:01:23 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x10, &(0x7f0000000180)) 16:01:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000240)="fb2d4e1eb739eda983bc1ecb9110a6cf425a659baecad7881d2ed0d384ecb0b044897fc1788a3ad3621d43bf3b546e31242ed72a6f42a783b5f4e6a0a3cecf265a6119c35fe13f97d04e09d2d1d8aa086bdd8ed7dff1bda9dc285572d538b46ce4f479e2e93e458932a6564aa221370bfdb387bb7258dc3bc57aecbe627ca528e90460282285bc3b5628e5a5c487af32eaa0b5b60af4273d0647a956c990b3d6c2dc5bb6d5b12604c8f2e00fa09815db2f1548f4a2915e60dba2", 0xba, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000080)="86d8ecb69acab2ecaca87fc0e75dcd73cc4084e26186d26dfe98aafa3b8632665ff271dda86202d1f6b3170aab344126ad86e516077d85284ce2505ded1c9744181f27e4301b4bdf450dde9c031e5a6cd8ef6c1688b6ad2f37b2a9ba9bd820eeaa9fc3dec3ad27e5139f184578a8aee1c1288a894e39d1bd71c05d6207777612a182ed831b8b1037d31bba7a933f8b3bd4d6974624ab5fdae36e411ded2b443229f3d1e0eb8d066aeb04361500484740ee3b00e40913530a0d8a96e5bc9fd2b879ae0cb9d077c4d47d4388d1abb88628378aa83b19115e61ca2fe41a4cc09ccbabc49e247fb9c9", 0xe7, r3}) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f0000000000)) ioctl$TIOCSIG(r4, 0x40045436, 0x3b) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KIOCSOUND(r5, 0x4b45, 0x100000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DELAY(r7, 0x80084121, &(0x7f0000000040)) 16:01:24 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x200000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000000)={0x18, "0a67b995d3524b1bc04b0bf00ee4eccbe78f1ac55384c90b5689f893c21060f9c8763653a0bdf9b3ab8e8e25a0afbe70fd28d101db32b2ef960bd9d765c536ae1004f4d7ae51ca5179c368ee8693e29ff9f404b65c89922849e48a51a1dd526c1e6a81a48d85595edddf8d11e29c9fce44949ca1f3d1debb043eedaff0346add"}) 16:01:24 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, 0x0) [ 1417.444863][ T8177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 16:01:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x1261, &(0x7f0000000180)) [ 1417.561804][ T8191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 16:01:24 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, 0x0) 16:01:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4b47, &(0x7f0000000180)) 16:01:24 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000000)={0x8, 0x0, 0xe4}) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r3}) 16:01:28 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000c6) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:28 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, 0x0) 16:01:28 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4b49, &(0x7f0000000180)) 16:01:28 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x50800) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000040)={0x52, 0x3, 0x100, 0x3a, "9623d12669a0a90f6ba03659a8dcf6aa1661896957c629eb906dde3df5c5be5272f6c482a35c79c57b8d9d065aa61fca24e6bb39bd54145e56d5"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f00000038c0), 0x4000000000000a8, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r6, 0x10000000) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:01:28 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2400, 0x0) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000040)={0x37, "d434d34e6f4deea24174eacf7e539198327e7fd67707ca25e323436793016402a9d59654207adaa2ffb9152878ad1f112db8d287d5ec886d103e8d27b43c64f89fda2c7072991bef71a828b286dae5b04949859197ec68f2cae00a210c2786a2db5db4b1826717285dc381791322e9eea19aba4d38fdb16ffbc4ee1834fc6146"}) 16:01:29 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)) 16:01:29 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4c00, &(0x7f0000000180)) 16:01:29 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000080)=0x1) r3 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TCGETS(r7, 0x5401, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r3}) 16:01:29 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)) 16:01:29 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4c01, &(0x7f0000000180)) 16:01:29 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000040)=0x6, 0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KIOCSOUND(r6, 0x4b45, 0xffff) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 16:01:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x7) unshare(0x20000400) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000180)={0x0, r3}) 16:01:32 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000c7) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:32 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)) 16:01:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x540f, &(0x7f0000000180)) 16:01:32 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x404000, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x0, 0xffffffff}}) fdatasync(0xffffffffffffffff) exit_group(0x800000000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b45, 0x100000004) 16:01:32 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="b121cb35a24ac8e89c6d96eb312ea96510653eedae2805365e3c75637f55a0e89596f8b4b92809bb2d8ee0f2e0cc029c99b5e31a03f70026ee4c9f72c961c667bf216effd56eca55f3f0a69ad33c73cc443c4930c985e4cce886c3ad3fac556af9efb73bff6606037003e959b798412d90b0b6e315e7e1ed4ff47ea5ed9b4201828f9ada19d11f2df2c57ccc867a6783e205a32f0c6128aca8f22f46b6a4729a0e8637e6866e086440939bbdb497b1de6ee937", 0xb3, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000280)={r1, 0xb5, &(0x7f00000001c0)=""/181}) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x145100) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x610a40, 0x0) ioctl$KIOCSOUND(r3, 0x4b45, 0x100000005) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0x5b, 0x87, &(0x7f00000002c0)="c0158d7cbacea700530015aff12e188e43aa9604ad9607b0bf69205f60a48e0b8ea2d598464526e8f4c2b96eaded81cb995c7b4b588731c6b2b659f40136a09c0dd5cf49185f587183d63c39f92edc8ae196611af8fb6624086b32", &(0x7f0000000340)=""/135, 0x1, 0x0, 0x1, 0x53, &(0x7f0000000400)="ee", &(0x7f0000000440)="8e6194c9212aac9f65ee9317541553d6d908b42936383ec3465465c57f9b6dea8a05afd36cdddfe67775df6f98fc3b35c87fed33c6c2b122facaadf0f0a972b6800b837d9e67be130eed93ed4ba885dc904a24"}, 0x40) 16:01:32 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x3, 0x80800) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) io_submit(0x0, 0x6, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x3, 0xffffffffffffffff, &(0x7f0000000040)="5d5c21d943fb444fc864b24887d08b6d99c0fa2c34fcf56af3bc6e2d37b007f4a3ff743470cad435114c5b1b735764a89d52cb96", 0x34, 0x2, 0x0, 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x26a6, 0xffffffffffffffff, &(0x7f00000002c0)="502b9103db262a109c5e1ad601cb831eebd135970f00d7870d112c1029e0154d4505295d3f1f2e9a8bc841cc3dbd35a4214c761622029a5c45d2a41b5b09a986319b47140882ea8ac2550e081f443e0f9ba45ffb7aac3583ee67d1b9407071859abaeb5749e731e9783f604aeb7070b96f833d324988b46ecc1e4cf1a82c2e959bc57a54b8c35ee5b877707145b62ce763b33150efd89b05cfe1bfe60cad4ac7b741fc393baaa800ac88aa3b3059a9653f0878c4d0d3f681d7b20d545be498ef4811e9f442962b97a425742ab9659453f0", 0xd1, 0x6b, 0x0, 0x2, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x9, 0xffffffffffffffff, &(0x7f00000001c0)="221be470427c7a615e244bb2366ef52070c932e6954492c1a1b3aaa2c29753ce930e50e6c8f5a079455b1448e57a3cfab495aa51e3adf30ffcbda33488631b8fc3075299436edd769410cb3e229f23c98f209f6a9560ec87b358e246965604ce483f390b9f74352a302276", 0x6b, 0x101, 0x0, 0x3, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x3ff, r4, &(0x7f00000003c0)="ac373b343a35f712204d5541591b78992771ad320bb3d6b74ccd16194f5d70463a38ab553c7f7ad36119602cf09d7380b4485b9be241eba98ef31168a88f22acc312ce86ed", 0x45, 0xd4, 0x0, 0x0, r6}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000440)="453433f3fa544f2ac5dcb27ea0c28e16f66b367a4947e042e8218a937fe6102f69fd1fefb5647468ea990775a244e71b711ef102550d943a7de02a97ad4a15b86132d5d99e8c72d5c58c42775b9df211344d66c540447588cc6789a96cd8a42a557d274461d2e26507d9e442790bceb3ba52f10cd9b37aefb1dc69d13c44d4ce907cc3e8798cf802c7cbd306ad0954e56e66d72e00ec6e992abc7c8eeb0f99ef514ce1434863d2b515e908ee1dae8f2c35b5332a083bbbd6f5cdd2be867bccc7d44d090a8056", 0xc6, 0x7f, 0x0, 0x2, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x6, r8, &(0x7f0000000580)="375ea3337bd26a", 0x7, 0x1000, 0x0, 0x2, r10}]) 16:01:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x28, 0x4, 0x0, {0x1}}, 0x28) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 16:01:32 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000004c0)={0x1, 0x8, 0xc6d, 0x6b6, 0xb7}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x1, 0x405, 0x71, &(0x7f0000000080)}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x170775116d1bd3cc, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x4) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:01:32 executing program 5 (fault-call:3 fault-nth:0): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:01:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x541b, &(0x7f0000000180)) 16:01:32 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ptrace$getsig(0x4202, r4, 0x80, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 16:01:32 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x111100, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000140)={0x3f, 0x2}) clone(0x200f6f19bfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) unlink(&(0x7f0000000100)='./file0\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x10000, 0x3, 0x0, 0x4, 0x1b, 0x8, "03c1053fe1b2913541e91b6a4bee15fda32f0b6c4951e17dcd9801b8b35ea0edcdefc11b6e3b15b7ad2f0786391f52bb4723ce07f756cea76ef10e6d391f6bab", "5732d284a131d8dfa5aa45b648a1f6ad9b46c9ccad11dcf30e0804d7ebd770e3ecd79620849442b2c33f2cac22c8a9272be8b743398e193482c6828a7d8d5170", "01b9640e69369b4a414661d0a005468864cf491921f429f5e8f3424512a392fc", [0x6b97, 0x3f]}) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000340)=""/178, 0xb2, 0x2, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f00000001c0)={0x401, 0x1, &(0x7f0000000040)=[0x6], &(0x7f0000000080), &(0x7f00000004c0)=[0x1ff, 0x101, 0x2, 0xffff]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) vmsplice(r5, &(0x7f00000001c0), 0x0, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) [ 1425.853654][ T8351] FAULT_INJECTION: forcing a failure. [ 1425.853654][ T8351] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.939400][ T8351] CPU: 0 PID: 8351 Comm: syz-executor.5 Not tainted 5.8.0-rc2-syzkaller #0 [ 1425.948113][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1425.958184][ T8351] Call Trace: [ 1425.961502][ T8351] dump_stack+0x18f/0x20d [ 1425.965860][ T8351] should_fail.cold+0x5/0x14 [ 1425.970474][ T8351] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1425.976212][ T8351] should_failslab+0x5/0xf [ 1425.980647][ T8351] __kmalloc+0x27d/0x340 [ 1425.984908][ T8351] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1425.990482][ T8351] tomoyo_realpath_from_path+0xc3/0x620 [ 1425.996049][ T8351] ? tomoyo_profile+0x42/0x50 [ 1426.000746][ T8351] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1426.006218][ T8351] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1426.011870][ T8351] ? tomoyo_execute_permission+0x470/0x470 [ 1426.017729][ T8351] ? selinux_inode_getsecctx+0x90/0x90 [ 1426.023211][ T8351] ? check_preemption_disabled+0x38/0x220 [ 1426.028952][ T8351] ? __fget_files+0x294/0x400 [ 1426.033652][ T8351] security_file_ioctl+0x50/0xb0 [ 1426.038610][ T8351] ksys_ioctl+0x50/0x180 [ 1426.042887][ T8351] __x64_sys_ioctl+0x6f/0xb0 [ 1426.047490][ T8351] do_syscall_64+0x60/0xe0 [ 1426.051924][ T8351] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1426.057820][ T8351] RIP: 0033:0x45cb19 [ 1426.061711][ T8351] Code: Bad RIP value. [ 1426.065779][ T8351] RSP: 002b:00007fbb101b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1426.074194][ T8351] RAX: ffffffffffffffda RBX: 00000000004f1940 RCX: 000000000045cb19 [ 1426.082177][ T8351] RDX: 0000000020000180 RSI: 000000004008af10 RDI: 0000000000000003 [ 1426.090165][ T8351] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1426.098188][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1426.106171][ T8351] R13: 000000000000060d R14: 00000000004c8f47 R15: 00007fbb101b66d4 [ 1426.369808][ T8351] ERROR: Out of memory at tomoyo_realpath_from_path. 16:01:35 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000c8) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:35 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) recvmsg(r0, &(0x7f0000001600)={&(0x7f0000000180)=@rc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f00000003c0)=""/192, 0xc0}, {&(0x7f0000000480)=""/15, 0xf}, {&(0x7f00000004c0)=""/146, 0x92}], 0x5, &(0x7f0000000600)=""/4096, 0x1000}, 0x60) exit_group(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b45, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x4, [0x3, 0x3f], 0x1b}, 0x10) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f0000000000)=""/14, &(0x7f0000000040)=0xe) 16:01:35 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000100)=0x1000, 0x1c7) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/237) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r4, 0x4b45, 0x100000002) 16:01:35 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xffff, 0x4, 0x7fff, 0x8, 0xfffffff8}) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r2}) 16:01:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5421, &(0x7f0000000180)) 16:01:35 executing program 5 (fault-call:3 fault-nth:1): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:01:35 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) [ 1428.731162][ T8387] FAULT_INJECTION: forcing a failure. [ 1428.731162][ T8387] name failslab, interval 1, probability 0, space 0, times 0 16:01:35 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) [ 1428.822323][ T8387] CPU: 1 PID: 8387 Comm: syz-executor.5 Not tainted 5.8.0-rc2-syzkaller #0 [ 1428.830950][ T8387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1428.841054][ T8387] Call Trace: [ 1428.844369][ T8387] dump_stack+0x18f/0x20d [ 1428.848726][ T8387] should_fail.cold+0x5/0x14 [ 1428.853343][ T8387] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1428.858728][ T8387] should_failslab+0x5/0xf [ 1428.863160][ T8387] __kmalloc+0x27d/0x340 16:01:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5450, &(0x7f0000000180)) [ 1428.867421][ T8387] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1428.873164][ T8387] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1428.878383][ T8387] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1428.884127][ T8387] tomoyo_encode+0x28/0x50 [ 1428.888569][ T8387] tomoyo_realpath_from_path+0x186/0x620 [ 1428.894233][ T8387] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1428.899715][ T8387] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1428.905366][ T8387] ? tomoyo_execute_permission+0x470/0x470 [ 1428.911226][ T8387] ? selinux_inode_getsecctx+0x90/0x90 [ 1428.916815][ T8387] ? check_preemption_disabled+0x38/0x220 [ 1428.922555][ T8387] ? __fget_files+0x294/0x400 [ 1428.927256][ T8387] security_file_ioctl+0x50/0xb0 [ 1428.932299][ T8387] ksys_ioctl+0x50/0x180 [ 1428.936562][ T8387] __x64_sys_ioctl+0x6f/0xb0 [ 1428.941164][ T8387] do_syscall_64+0x60/0xe0 [ 1428.945597][ T8387] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1428.951498][ T8387] RIP: 0033:0x45cb19 [ 1428.955392][ T8387] Code: Bad RIP value. [ 1428.959473][ T8387] RSP: 002b:00007fbb101b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:01:35 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x83, 0x1c4a, 0xe3d7}) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xa00000, 0x9, 0x0, r1, 0x0, &(0x7f0000000080)={0x9a0919, 0x8, [], @p_u8=&(0x7f0000000040)=0x3}}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x2000}, 0x4) [ 1428.968049][ T8387] RAX: ffffffffffffffda RBX: 00000000004f1940 RCX: 000000000045cb19 [ 1428.976030][ T8387] RDX: 0000000020000180 RSI: 000000004008af10 RDI: 0000000000000003 [ 1428.984009][ T8387] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1428.991993][ T8387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1428.999978][ T8387] R13: 000000000000060d R14: 00000000004c8f47 R15: 00007fbb101b66d4 16:01:35 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000000)={0x7, 0x9, 0x4, 0x100000, 0x1000, {}, {0x0, 0x2, 0x1, 0xff, 0x8, 0x80, "80e5fe38"}, 0xb82, 0x4, @fd=0xffffffffffffffff, 0x8}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:01:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCCONS(r2, 0x541d) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000000)={0x0, 0x2}, 0x2) clone(0x200060ac17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000600)={0x3, 0x32314752, 0x1, @stepwise={0x80000001, 0x80000001, 0x5, 0x80, 0x800, 0x9}}) r7 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$rds(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/71, 0x47}, {&(0x7f0000000100)=""/207, 0xcf}, {&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/128, 0x80}], 0x6, &(0x7f00000004c0), 0x0, 0x400c000}, 0xc880) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r8, 0x4b45, 0x100000002) [ 1429.429944][ T8387] ERROR: Out of memory at tomoyo_realpath_from_path. 16:01:38 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000c9) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:38 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) ioctl$KIOCSOUND(r1, 0x4b45, 0x0) 16:01:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5451, &(0x7f0000000180)) 16:01:38 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000240)="09f89cc914ee988178e8e1d73e95ed13e549a7c870d8842d8b37de4d10c5c22b76695022b69af105c626ef86cf449e2f6edaea7b70e49ae527bc5a8bea64891679583cf5789014735509be3f33c4a37e97ca86dd92a59093b2909e9429c037c5c407d77f84ba58152f84f5d7e1ad705c63248f874ecc95f50cb4b4b28bd22d19861aa77f8e838ca955c8ad77d30064430657e502637148a67827700da71ca551690a7ce29b5879d5e9d2808146cc9def9350693c74", 0xb5) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x1, r8, 0x70, 0x1, @ib={0x1b, 0xec18, 0x200, {"d7fd9a8ffd0714f181de2eca890e1edc"}, 0x5, 0x200, 0x4}}}, 0xa0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000300)={{0x0, 0x0, @reserved="7049360c5d286ff6d34993236baee02822140c10a6f3b27136621cd8f2f49337"}}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b45, 0xb) 16:01:38 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x34400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r3, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x58, r3, 0x12, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x870f}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, [@NL80211_TXRATE_HT={0x1c, 0x2, "5e8928d1881c9e89d213b7ab6e6a02eff795c7786a1bf64e"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc009}, 0x8000) r5 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r5}) 16:01:38 executing program 5 (fault-call:3 fault-nth:2): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) [ 1431.722342][ T8447] FAULT_INJECTION: forcing a failure. [ 1431.722342][ T8447] name failslab, interval 1, probability 0, space 0, times 0 [ 1431.775445][ T8447] CPU: 0 PID: 8447 Comm: syz-executor.5 Not tainted 5.8.0-rc2-syzkaller #0 [ 1431.784077][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1431.794142][ T8447] Call Trace: [ 1431.797448][ T8447] dump_stack+0x18f/0x20d [ 1431.801799][ T8447] should_fail.cold+0x5/0x14 [ 1431.806408][ T8447] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1431.811796][ T8447] should_failslab+0x5/0xf [ 1431.816221][ T8447] __kmalloc+0x27d/0x340 [ 1431.820609][ T8447] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1431.826349][ T8447] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1431.831645][ T8447] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1431.837386][ T8447] tomoyo_encode+0x28/0x50 [ 1431.841825][ T8447] tomoyo_realpath_from_path+0x186/0x620 [ 1431.847626][ T8447] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1431.853104][ T8447] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1431.858756][ T8447] ? tomoyo_execute_permission+0x470/0x470 [ 1431.864611][ T8447] ? selinux_inode_getsecctx+0x90/0x90 [ 1431.870092][ T8447] ? check_preemption_disabled+0x38/0x220 [ 1431.875831][ T8447] ? __fget_files+0x294/0x400 [ 1431.880537][ T8447] security_file_ioctl+0x50/0xb0 [ 1431.885490][ T8447] ksys_ioctl+0x50/0x180 [ 1431.889747][ T8447] __x64_sys_ioctl+0x6f/0xb0 [ 1431.894348][ T8447] do_syscall_64+0x60/0xe0 [ 1431.898778][ T8447] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1431.904675][ T8447] RIP: 0033:0x45cb19 [ 1431.908565][ T8447] Code: Bad RIP value. [ 1431.912660][ T8447] RSP: 002b:00007fbb101b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:01:38 executing program 1: unshare(0x18070080) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x9, 0x80800) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:01:38 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) 16:01:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5452, &(0x7f0000000180)) 16:01:38 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = msgget$private(0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = gettid() ptrace$setopts(0x4200, r4, 0x0, 0x0) tkill(r4, 0x34) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000240)="88cf08231f551d59914b6bfd65f5d37b037a398ef5efbf0b5327f6352976f8df49a09631f7c593207f9384aaa896dd644455467d03b7e89cf26ed8624ba9e691bf0d86e4904d4acffce7c692ac715133762ed5089fd27cd78910c224bf4d38828e642866e19effd82244591a686b28f528089c66774e21660a2efd16293776cf89c9ec6c4b043bebf57aa04da126f20e5bee705ef73b77693ad059f4982ba1fbe85a2ed6b3789f6c60f19207aadac05dd666882710263c183800"/195) ptrace$cont(0x7, r4, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x21}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, r4}) msgsnd(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="d6e715e03832e71a"], 0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000040)=""/250) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCNXCL(r1, 0x540d) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r5, 0x4b45, 0x100000002) pipe2$9p(&(0x7f0000000000), 0x80000) [ 1431.921079][ T8447] RAX: ffffffffffffffda RBX: 00000000004f1940 RCX: 000000000045cb19 [ 1431.929061][ T8447] RDX: 0000000020000180 RSI: 000000004008af10 RDI: 0000000000000003 [ 1431.937041][ T8447] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1431.945026][ T8447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1431.953008][ T8447] R13: 000000000000060d R14: 00000000004c8f47 R15: 00007fbb101b66d4 16:01:38 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KIOCSOUND(r0, 0x4b45, 0xd) 16:01:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5460, &(0x7f0000000180)) [ 1432.503282][ T8447] ERROR: Out of memory at tomoyo_realpath_from_path. 16:01:41 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000ca) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:41 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) socket$caif_stream(0x25, 0x1, 0x2) 16:01:41 executing program 3: clone(0x200643cdbfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x301c00, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$KIOCSOUND(r4, 0x4b45, 0x24) 16:01:41 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RESET(r3, 0x5514) 16:01:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x6364, &(0x7f0000000180)) 16:01:41 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)={0x0, r1}) 16:01:41 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000040)={0x3, [0x9, 0x1, 0x8a8], [{0xfffffe00, 0x8, 0x1, 0x0, 0x1, 0x1}, {0x3f, 0x38e, 0x0, 0x1, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xfffffffc, 0x1, 0x0, 0x1}, {0x0, 0x3, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2f17, 0x2, 0x0, 0x1}, {0x9, 0x101, 0x1, 0x0, 0x1}, {0x6, 0x400, 0x1, 0x1}, {0xfffffffc, 0xfffffff9, 0x1, 0x1, 0x1, 0x1}, {0x8c74, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x7, 0xff, 0x0, 0x0, 0x1, 0x1}], 0x42}) 16:01:41 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @private=0xa010101}}) exit_group(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b45, 0x100000004) 16:01:41 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x2, &(0x7f0000000180)={0x0, r1}) 16:01:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x6609, &(0x7f0000000180)) 16:01:41 executing program 2: clone(0x4101a200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpeername$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 16:01:41 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x10, &(0x7f0000000180)={0x0, r1}) 16:01:44 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000cb) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:44 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x6}, 0x6, 0x4, &(0x7f0000000240)="88348eac3f01c2f01ffd14f04828e4665c40244f484e93328b4a", 0x1a, 0x80000000, 0x10000, 0x2, 0x3, 0x9, &(0x7f0000000280)="390748be7e035c1341512be1e711bc8888f0b8d6b65ba80e5dcbdf6b6c7d498a99f8cc3228eb055a2ac95154211c86b7484f3c68304cc870b8d9b6e407afeb3e0e1b9e3dfd06d407ad42d9fb2033afd9e63ed0ea371e919dfaf68a50375b276b2bca6d3352ae4a5c0b5d1b36db70d4595acf88a5a160007d226f25f976682b641ac1158d6b661392fd27738c4153c040b3aa80ed4150f33c4242463aadf48c6074419856d7ce5285a6f63cf7625d55c976842663cbea3da076b82fb16f69fc22286a226fabd8959eb7cd7a3063fd338b788592f8398a947fd11ad049dd0de56e0569926e121daa530ebf"}) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$vhost_msg(r3, &(0x7f0000000140)={0x1, {&(0x7f0000000000)=""/45, 0x2d, &(0x7f0000000040)=""/254, 0x1, 0x2}}, 0x48) pipe2$9p(&(0x7f00000001c0), 0x800) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r4, 0x4b45, 0x100000004) ioctl$UI_DEV_CREATE(r3, 0x5501) 16:01:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x8912, &(0x7f0000000180)) 16:01:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0x800, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="97a5b8ba099546f764e54b8b0f1f73f7fb", 0x11, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$link(0x8, r1, r2) exit_group(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$KIOCSOUND(r3, 0x4b45, 0x100000002) 16:01:44 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) io_setup(0x4, &(0x7f00000004c0)=0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) sendmmsg(0xffffffffffffffff, &(0x7f00000038c0), 0x4000000000000a8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xfffffdb1) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x3, 0x47a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000640], 0x0, &(0x7f0000000240), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x5, 0x40, 0x6002, 'ip_vti0\x00', 'gretap0\x00', 'veth1_macvtap\x00', 'veth1_to_bridge\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="d3a76783062a", [0xff, 0xff, 0xff, 0x0, 0xff], 0xae, 0x126, 0x156, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x6}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x8e, 0x7, 0x0, 0x0, "9c37485f8518d7f31ab547eda1ba24af3610da92f8d709b4c5e6662ee531f4175d001410acc6cc3549d731a65041520bd95122347350ebbcf48f5ee4cab4609e"}}}], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}, {0x11, 0x1, 0x4, 'veth0_to_bridge\x00', 'veth0_virt_wifi\x00', 'ip6gretap0\x00', 'tunl0\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0xff], @dev={[], 0x20}, [0x0, 0xff, 0xff, 0x0, 0xff], 0xfe, 0x136, 0x186, [@helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'snmp\x00'}}}, @connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x788}, {0x2}], 0x2, 0x1}}}], [@common=@dnat={'dnat\x00', 0x10, {{@multicast, 0x8000000000000011}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x5, {0x2}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x5, 0x20, 0x805, 'wg1\x00', 'syzkaller0\x00', 'gre0\x00', 'bridge0\x00', @random="2f15829924d2", [0xff, 0xab00fbcb00d9b542, 0xff, 0x6bcf16f95108ae9e, 0xff, 0xff], @random="badbf8d560c3", [0x0, 0xff], 0xae, 0xae, 0xde, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, r6, r8, 0x2, 0x2}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3}]}, 0x4f2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0)={[0x81]}, &(0x7f00000002c0), &(0x7f00000001c0)={r9, r10+60000000}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_cancel(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x5, r0, &(0x7f0000000000)="fbd5fb5c833c82c60aaf824d", 0xc, 0x1, 0x0, 0x1, r5}, &(0x7f0000000080)) 16:01:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x2405, &(0x7f0000000180)={0x0, r1}) 16:01:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4610, &(0x7f0000000180)={0x0, r1}) 16:01:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x8933, &(0x7f0000000180)) 16:01:44 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0xa4100) 16:01:44 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd000, 0x0, &(0x7f0000ff1000/0xd000)=nil) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:01:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4b47, &(0x7f0000000180)={0x0, r1}) 16:01:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x89f1, &(0x7f0000000180)) 16:01:47 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000cc) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:47 executing program 2: clone(0x20045224bfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 16:01:47 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x10, 0x803, 0x2) r0 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x1, r2}) prlimit64(r2, 0x9, &(0x7f0000000040)={0x6, 0x3}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r4, r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa04, {{0x6000000, 0x0, 0x0, @private0={0xfc, 0x0, [0x7]}}, {0xa, 0x0, 0x0, @dev}, r5}}, 0x48) 16:01:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4b49, &(0x7f0000000180)={0x0, r1}) 16:01:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x89fc, &(0x7f0000000180)) 16:01:47 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0xfffffff, 0xfffff801, 0x1, r2, 0x0, &(0x7f0000000040)={0x990a70, 0x3f, [], @string=&(0x7f0000000000)=0x1}}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:01:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xae01, &(0x7f0000000180)) 16:01:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4c00, &(0x7f0000000180)={0x0, r1}) 16:01:47 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r2, &(0x7f0000000500)=[{0x3f, 0x6, 0x4a, 0x81, @time={0x9, 0x1}, {0x7, 0x5}, {0x2, 0x3f}, @note={0x3, 0x7, 0x81, 0x9, 0x7}}, {0x6, 0x6, 0x40, 0x9, @tick=0x10001, {0x1f, 0x20}, {0x55, 0xde}, @time=@time={0x80, 0xe6}}, {0x7f, 0x9, 0xff, 0x0, @tick, {0x3a}, {0x40, 0x53}, @raw32={[0x7, 0x0, 0x8000]}}, {0x9, 0x80, 0xe0, 0x1, @time={0x8, 0x4}, {0x1f, 0x5}, {0x8, 0x80}, @raw8={"a88338a41cfde91fed386426"}}, {0x0, 0x6, 0x3f, 0x40, @time={0x4b8, 0xfffff4cd}, {0x8, 0xf6}, {0xa, 0xe0}, @raw8={"d5a07fc82d705679c28fc34c"}}, {0x1, 0x0, 0x5, 0x5d, @tick=0x200, {0x8, 0x2}, {0x3d, 0x2e}, @time=@tick=0x5d0}, {0xbf, 0x9, 0x9, 0x4, @time={0x40, 0x3}, {0x3, 0x80}, {0x20, 0x1}, @quote={{0x2, 0xfe}, 0x2, &(0x7f0000000240)={0x8, 0x1, 0x69, 0x4, @tick=0x20, {0x2, 0x7}, {0x52, 0x1}, @time=@time={0x496, 0x6}}}}, {0xc8, 0x0, 0x3, 0x51, @time={0xfff, 0x2}, {0xf7}, {0x4, 0x6}, @control={0x8, 0x0, 0x40}}, {0x9, 0x3, 0x7f, 0x1, @tick=0x6, {0x1, 0x80}, {0x3f, 0x80}, @raw8={"8cd7a38c2588e0e0ba861615"}}, {0x2, 0x7, 0x0, 0xb2, @tick=0x5, {0x9, 0x8d}, {0x1f, 0x6}, @quote={{0x0, 0xb}, 0x1, &(0x7f00000004c0)={0x5f, 0x5, 0x81, 0xe9, @time={0x4, 0x9}, {0x2c, 0x1}, {0x1f, 0x81}, @addr={0x7, 0x3}}}}], 0x118) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x12000) r3 = eventfd2(0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000002900)='/dev/zero\x00', 0x400000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000029c0)={0xa20000, 0x3, 0x8, r4, 0x0, &(0x7f0000002980)={0x9b0970, 0x7, [], @p_u16=&(0x7f0000002940)=0x4}}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r3}) ioctl$SOUND_MIXER_INFO(r5, 0x805c4d65, &(0x7f0000000680)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f0000000640), 0x4) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x4, &(0x7f0000000440)=[{&(0x7f00000002c0)="c37d23e06913cbb94efd981d171676318131a2cc7e0aa0f21c16fbec13780a5ba9c6b4c27c51a2fcf244ba0cfa7547aa4d5cdb3f7239aac7c9c2b37d949de9ec464a21dd372bc5a6a40903aac6cd8a302d27b7c5f9f6c9ef56f90ce59a0ddf85229f03d9541c3d4f0a84caf2cb05f8072f70c9a13a588dbeefbf49444debbe2f53ab81d49650c56aa45c1767d1e9a5de0f238543d0989d5da35de45a052ecdadaa14a19584ea44864615d97a299dc7107933cd28350be6b2b152c32bc2805ccb9495ef2d9b6b9627d8353d1d37c94dfca7da9e501ca02b9ad7f95b98a0c6eaca3b77866a9cb2794f01460f0d275fff64e148ba4fc15244b3ce34908ecd", 0xfd, 0x401}, {&(0x7f00000000c0)="1630f657f675dfa1faabca0b764a9091977081af93a11ab8bcb695a098c79b28aee62bc23361034ec1e735ac1f4b841a2dcce9b434dbb8ced72cbcdd7ee1661e952f78b8fc8587c10308dab5ec1dad0384d05fd1092b6e70fa5b31b36949cf58016062", 0x63, 0x401}, {&(0x7f00000003c0)="f262f6a2352f9caceb13e4f710c43a338e0c437d9ae72078083e00fc4d3d1ebab5cf75d7b0d9bbe961dad05671d06fd791f63663bdf3077cf93241d1788505eba8df6b5a8881", 0x46, 0xffffffffffffff18}, {&(0x7f0000000140)="937a546c46ff0e1ab856f7b26b7c2f0629ea4330a21990f28095b327cffacfc74e016a5b4c56946951002f9a66a06d4018b8076f4604582129861713", 0x3c, 0xffff}], 0x10000, &(0x7f00000001c0)='}-\x00') 16:01:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4c01, &(0x7f0000000180)={0x0, r1}) 16:01:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xae41, &(0x7f0000000180)) [ 1441.422318][ T8702] CIFS: Attempting to mount /dev/loop1 [ 1441.459754][ T8702] CIFS: VFS: Malformed UNC in devname 16:01:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x541b, &(0x7f0000000180)={0x0, r1}) 16:01:52 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000cd) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xae60, &(0x7f0000000180)) 16:01:52 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x58, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x58}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x114, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @broadcast}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c801) 16:01:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x541e, &(0x7f0000000180)={0x0, r1}) 16:01:52 executing program 2: clone(0x20000004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x7bc0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat2(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40000, 0xa}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000440)={0x0, 0x0, 0x8, &(0x7f0000000400)=0x6}) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9eec004688cfce1d3da0ca3c90b09f19c9fabeb60811135e884a19", @ANYRES16=r7, @ANYBLOB="000426bd7000fbdbdf25050000002f00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f696e697472635f657865635f743a73300000080005000a01010108000500ffffffff14000200fe8000000000000000000000000000301400020000000000000000000000ffff0a01010214000200fe88000000000000000000000000010108000500e000000214000300fe80000000000000000000000000000d"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, r7, 0x104, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8080}, 0x68800) 16:01:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5421, &(0x7f0000000180)={0x0, r1}) 16:01:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xaf01, &(0x7f0000000180)) 16:01:53 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:01:53 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x2, 0x4, {r2}, {0xffffffffffffffff}, 0x16b, 0x9}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x20, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) statx(r8, &(0x7f0000000280)='./file0\x00', 0x1000, 0x7ff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{0x2, 0x7}, {0x2, 0x4, r1}, {0x2, 0x6, r3}], {0x4, 0x3}, [{0x8, 0x1, r5}, {}, {0x8, 0x3, r6}, {0x8, 0x2, r9}], {0x10, 0x5}, {0x20, 0x5}}, 0x5c, 0x2) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 16:01:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5423, &(0x7f0000000180)={0x0, r1}) 16:01:53 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 16:01:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xb702, &(0x7f0000000180)) 16:01:57 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000ce) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:01:57 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0xd9d, 0x3831354f, 0x1, @discrete={0x7fff, 0x6}}) r1 = eventfd2(0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:01:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5433, &(0x7f0000000180)={0x0, r1}) 16:01:57 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x739, 0x80080) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xb98) ioctl$KIOCSOUND(r1, 0x4b45, 0x4000000000000000) 16:01:57 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x400454ca, &(0x7f0000000180)) 16:01:57 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4a0a00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0xaa61, 0x0, 0x3, 0x7}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)={0xfffffffffffffc21, r3, 0x0, 0x5}) clone(0x2001383c7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r4, 0x4b45, 0x100000004) 16:01:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5450, &(0x7f0000000180)={0x0, r1}) 16:01:57 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0x400, 0x3131354f, 0x4c7, 0xfffffffe, 0x2, @discrete={0x4, 0x1}}) 16:01:57 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x400454d0, &(0x7f0000000180)) 16:01:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001500)={0x0, 0x0}, &(0x7f00000014c0)=0xc) setuid(r1) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x6, &(0x7f0000001400)=[{&(0x7f0000000080)="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", 0x1000, 0x101}, {&(0x7f0000001080)="aebd6fabb5063a413b3e16ee341849b7bddbe3e9c346d24d29e10fb7c138fc4361ab5c03ef58d71489887bedcf87808d3ba9c05cc063728f339719b68f57230b94b16e319ed289a851153397ae151bc133a930b32d56ac9abfac4dd3fc2aac27e431ee43118a82ef28ef9c59e583afa64ae1331f1cbe1cf359dce9c630348331c8d47190e6881fce10a6d84865ff23d26a47b394ac006f21364749af4dbfd86503e34a5e9aaa10594c90b514530086a3b2bbede5b0cea2189cdab258d9b0b08225b7f58cf06cc52e8380817512615c3db4c63fb97bb9c681a8e412f70c92aefd7d8446e3ffac0d3bc3afcacfe159ac51f2", 0xf1, 0x1ff}, {&(0x7f0000001180)="385ca0f2438f35aa305bf11a9a46a4833da524b95976ba1d43ba2d11940975eb21b0bed5db6c86f5721dbabe9531d2dd0f2b885e43a4eaeb0354da20d54ad0da8541802df437a45c6abd616a4124ca2e059c8c82e35084eeaf56df140211cca1ff1a1a9e62bdd41efdd37098298c7400615305e3", 0x74, 0x7}, {&(0x7f0000001200)="db8fb53bc51a4c42dfc4ec53901f3cec7126cc00991b9442b889b59ae2d112ef7ca904501e943651825bbbdbbb16f6db7864ef71b8ecdcedf53866636fc05cbb942582b35735adff957765d7bd081267d34174ce21caa74f7c0d81ba11fb452004ba5dbaadbd832c69873c19ab2ae0596bd488c8a5611dfad5d2896c11e08ae10bf65581d116cb670e", 0x89, 0x81}, {&(0x7f00000012c0)="c99f1b3db3abdfc262e8ac50253bc978e15e78b0673b844c163fd37c85f660261831655529000b9bcdb4d33e7846c8e68f0bb2c7abe4abea030e7d2e04cbad0604", 0x41, 0x3}, {&(0x7f0000001340)="51905f475d75ff0d4a604c535f11fe74920ef49a645c19553e50e38f343264561f99b808c11a43e6526d83b7238b0126b2724f55b6a561f0193db6b2ead3c36cff9614ede09f5e005a641a4faaec65c41e6709146fe57825fb1983b5424b6d438e640c6f444c8813239cbe8ce807991d1c9851b3d1e63e834e7250b11a30ae3cc1460bdd24d184c69b50b8e7fbdcd3add5562ca2e1ce40d3cb0392f62283503cf284cd3f", 0xa4, 0x5}], 0x209a000, &(0x7f0000001540)={[{@min_batch_time={'min_batch_time', 0x3d, 0x6}}], [{@dont_measure='dont_measure'}, {@seclabel='seclabel'}, {@euid_gt={'euid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, ']'}}, {@smackfshat={'smackfshat', 0x3d, '+,'}}, {@seclabel='seclabel'}]}) clone(0x200002f4efc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b45, 0x100000002) 16:01:57 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f00000001c0)=0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x0, 0x5, 0x80000001}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x1e, &(0x7f0000000100)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r6, 0x3ff}, &(0x7f0000000180)=0x8) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000000)={{{@in=@broadcast, @in6=@remote}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) 16:01:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5451, &(0x7f0000000180)={0x0, r1}) 16:02:00 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000cf) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:02:00 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r3}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 16:02:00 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:02:00 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x7e) 16:02:00 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40049409, &(0x7f0000000180)) 16:02:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5452, &(0x7f0000000180)={0x0, r1}) 16:02:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5460, &(0x7f0000000180)={0x0, r1}) 16:02:00 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4004af07, &(0x7f0000000180)) 16:02:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xf006496a873df185, 0x0) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x9cea, 0x0, 0xff, 0x0, 0xf85, 0x8}, 0x20) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r3, 0x4b45, 0x100000002) 16:02:00 executing program 3: exit_group(0xfffffffffffffffd) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/90, 0xfffffcb5) 16:02:00 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x121880, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x1, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000100)=[{{r2, r3/1000+10000}, 0x1, 0x1f, 0xff}, {{r4, r5/1000+10000}, 0x11, 0x80, 0x7}, {{r6, r7/1000+10000}, 0x12, 0x0, 0x10040}], 0x48) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x622080, 0x0) r9 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r9}) connect$qrtr(r8, &(0x7f0000000200)={0x2a, 0x2, 0x7fff}, 0xc) 16:02:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x5501, &(0x7f0000000180)={0x0, r1}) 16:02:03 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000d0) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:02:03 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000000)) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/123) 16:02:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4004af61, &(0x7f0000000180)) 16:02:03 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x58, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x58}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6639af7e", @ANYRES16=r6, @ANYBLOB="10002dbd7000ffdbdf250a000000440003800800010002000000060007004e220000140002006e657464657673696d3000000000000014000600fe8000000000000000000000000000bb080003000100000008000600c606000008000600000000000800040009000000"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1) 16:02:03 executing program 1: unshare(0x20000400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000038c0), 0x4000000000000a8, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@dev, @in=@local}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000640)=0xe8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x2480, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x810) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000680)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) sendmsg$inet6(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x4, 0x0}, 0x2}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="88dda4312249130af0b838144c3dd20f4dab85754900210145f69787550f0e6dafda3975c8fe0facd663e4d470567fe4159f74f76493335d3a08774e5ee5734efb9ffedaba52e0dc22c0ae4da12122ef2ba6d96e88ecdb27710311ccf96edfa7723d810a401eeaaa583914a01d8117a80da620a715c45f18c5176cc2beeacabcfa5eacca474b3e6ce2d827a00ba8bb1bda9e1b4351f3c025149b1434b4c9e0e459e922eb0a409482b0b35284b4cd77088cabe8992e6a70dade331308779a7717a9be3cdb604927159a4bd7e87cdca220434e83accc53e9", 0xd7}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x130}, 0x20000041) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhost-vsock\x00', 0x2, 0x0) 16:02:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x6364, &(0x7f0000000180)={0x0, r1}) 16:02:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x8912, &(0x7f0000000180)={0x0, r1}) 16:02:03 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c085) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x4}}]}, 0x34}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x2b}, r7}, 0x14) 16:02:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40086602, &(0x7f0000000180)) 16:02:03 executing program 1: unshare(0x42020280) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x448000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x4) r5 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r5}) [ 1456.821080][ T8977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 16:02:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x8933, &(0x7f0000000180)={0x0, r1}) [ 1456.882617][ T8982] IPVS: ftp: loaded support on port[0] = 21 16:02:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40087602, &(0x7f0000000180)) [ 1456.947162][ T8991] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1457.015687][ T8982] lo speed is unknown, defaulting to 1000 [ 1457.616422][ T8986] IPVS: ftp: loaded support on port[0] = 21 [ 1457.752509][T24735] tipc: TX() has been purged, node left! 16:02:08 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000d1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:02:08 executing program 2: clone(0x20022004dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000008) 16:02:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x89e0, &(0x7f0000000180)={0x0, r1}) 16:02:08 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af00, &(0x7f0000000180)) 16:02:08 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$pppoe(0x18, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f00000002c0), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES16=r2, @ANYRESOCT], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="50200000000062f6e9a5d02bf5de58aeef00"/28, @ANYRES16=r2, @ANYBLOB="01002ebdf927bd7000fbdbdf2501000000080001000300000008000200010000000cc90b800504030005000000080002000200000008000200"], 0x3}, 0x1, 0x0, 0x0, 0x8c054}, 0x48080) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6a19119ba4295bc2b02a0b00dc73b8fe70da3f", @ANYRES16=r2, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0061a9002200f4f071e690521d79ec2df20a1921292b81a9ff0700001853f6caa7bee88f97c39fa1a81e3bdd3b2a22728650938e7081aa8a", @ANYRES16=r2, @ANYBLOB="00032dbd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2044011) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="b00100ff", @ANYRES16=r2, @ANYBLOB="00002bbd7000ffdbdf650100000004000c802c0004800500030006000000050003000100000005000300080000000500030006000000050003000700000008010c8014000b800800090012bae65b08000a00c228000024000b800800090035a5b71b08000900bccfaf4608000a0012f8000008000a0098ac000014000b8008000a00f9aa000008000a0004c000001c000b8008000a00c551000108000900d811e136080009008a14551c0c000b8008000900248953271c000b8008000a00178b000008000900d1e1d74f08000900f7b8f96f24000b800800090035fc9d170800090061a4947f08000900ccb23b6f08000a0065ce000004000b804c000b80080009004911722708000a00dc32000008000a005fe3000008000a006fa5000008000a001602000008000900647ba42408000a00310d000008000a0009510000080009005ba5002d0800020001000000240004800500030002000000050003000500000005000300020000000500030000000000300008802c000780080006001000000008000500877e572808000500e77a94210800060078000000080005000bac245608000100ffffffff"], 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4241}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x24044040}, 0x6004) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000c674ad4f8cf84155cbf7a11cbec15b1ddccbf3f0ef01672520d8936516e364f8", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf25020000000780080006003300000008000500320e107908000600dc00000008000500a912193608000100000000007bd3000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x100, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6993}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22e3ba41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ed0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11e1b413}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13333b93}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfdf3ce5}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d122c64}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1488}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c86cd8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e9596fc}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfeda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad71}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24ef7905}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d687e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7566}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeec3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c4e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51af5404}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd8830e2}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x182b1e8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe937}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37649c2f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fec95ec}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6000}, 0x20000945) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x240, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x180213c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x483750b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x614fa1d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ed6}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c230474}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46eb1cca}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bd50632}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe88}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3101f4c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e0397d1}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1298d8c2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c6b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51c57545}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79a92194}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36b1c63b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e34a20d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a1b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3890}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd618}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x94ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27f52e9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a5c79d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xafa6}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cd8239b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3762243f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd816}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7291d942}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc499}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6949ee2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c0cf321}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc310}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99ba}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b91ba5a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28278d38}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaffc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21f316f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f81}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15434942}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e92b793}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x431605bd}]}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:02:08 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$llc(r3, &(0x7f0000000140), &(0x7f0000000080)=0x10, 0x180800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x1e, &(0x7f0000000100)=@assoc_value={r8}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYBLOB="ff00060001040200060000000000000016f8a4b853d8fa0c89e72033a55e76188cfee91eb0b831d3804d992de44b63fe2f4366b00800000000000000df39e44f759e80d21e28e369370fa6e1e955c22c1eff07000000000000b9d6eae99fc9ab127c7476d9000000000000febbb9b6b3d173fd2f5b2af1375a195372a22c0328606a1ac684386840f77280aa2dfc6f5c"], 0x14) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) [ 1462.017970][ T9050] device lo entered promiscuous mode 16:02:08 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af03, &(0x7f0000000180)) 16:02:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x89f0, &(0x7f0000000180)={0x0, r1}) 16:02:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x1e, &(0x7f0000000100)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB="90000000a09f04db0d8a0d0467f182e4c973398f86dd0d977801b72ba95ed2b7dd3a5d3e4ccbb3298657164625abc04bcdf51e11c1268b32a1399345c8cc54c6ec31542c461dd5786ebe2ed0dbcf1672b3e19bcf2a0b0ed643940ec3223e1f45e7a9c7336364472bfe102b2dbfbb9bf88d3eccc1f5a0e73eb95a2e338b9a8806cdc5441686e3dcbf1185ac51f9fdd3c299f5f43da17d76edde14fe5b316ef39f3f849bc345d483e3373249e7d31a3def"], &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r6, 0xff4a, 0x1}, &(0x7f0000000140)=0x8) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) ioctl$KIOCSOUND(r7, 0x4b45, 0x100000002) 16:02:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xae01, &(0x7f0000000180)={0x0, r1}) 16:02:09 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af04, &(0x7f0000000180)) 16:02:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xae41, &(0x7f0000000180)={0x0, r1}) [ 1462.565986][ T9064] Y4`Ҙ: renamed from lo 16:02:12 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000d2) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:02:12 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af10, &(0x7f0000000180)) 16:02:12 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x28, 0x1, @tid=r3}) 16:02:12 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = semget(0x3, 0x0, 0x80) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000002340)=""/4096) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000040)=""/32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b45, 0x100000004) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r2) 16:02:12 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000040)="bd4b659f9ad971b3d0d492cdf1cbb815992e9af83f2bdf8caa842cddca4e2a520340a7fbe5d5ead14f2db913b5c7729f501319ad73540c17001b59e4805698976b443246d5135c21dcb1327862db3b19409baad6545e71d8eb9ea52a8c48c0d93bd54e7dc6d1111555eaac1e150a8ce2c223e069062fc45b71", 0x79) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1) socket$bt_rfcomm(0x1f, 0x3, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r8 = eventfd2(0x0, 0x2) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r8}) 16:02:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xae45, &(0x7f0000000180)={0x0, r1}) 16:02:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xae80, &(0x7f0000000180)={0x0, r1}) 16:02:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x4, 0x5, 0x0, "b8091c26b3aab8dee602f6d513ea8fd3f7f516503a6585c8450cd9f8c43a42c6aff7ef4c4130d96dfeee66ed2345f597513f40a4aa62fdbc52f7347d83733d24", "0b534712b976b105bc91d17e81edcb134a268b3a8ee73caf530d2f3ee20e25bc2d075d5a4bbe9ec9a11e08f642884a0a6db5e660607ae8ed0cf32aa0c645e424", "a4ba1b012630bf229a8e25435019f803b58eaac5e1b2a4fcf021b07c301f0d02", [0xfff, 0xff]}) unshare(0x20000400) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000180)={0x0, r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x5, 0xff, 0x1d, 0x0, 0x2}) 16:02:12 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af12, &(0x7f0000000180)) 16:02:12 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KIOCSOUND(r5, 0x4b45, 0x5) 16:02:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xaf01, &(0x7f0000000180)={0x0, r1}) 16:02:12 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af14, &(0x7f0000000180)) 16:02:15 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000d3) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:02:15 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) select(0x40, &(0x7f0000000000)={0x40, 0x100, 0x5, 0xfffffffffffffffb, 0x1ff, 0x0, 0x7ff, 0x8}, &(0x7f0000000040)={0x0, 0x0, 0x3285, 0x100, 0x5da, 0x9, 0x7, 0x3}, &(0x7f0000000080)={0x2, 0x1ff, 0x5, 0x3, 0xffffffff, 0x9, 0x3, 0x3b4d}, &(0x7f00000000c0)) socket$pppoe(0x18, 0x1, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000200)={{0x3, 0x0, 0x80, {0x0, 0x108004, 0xda2fa21989398b45}}, "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", "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"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000002340)={0xd60004, 0x0, 0x35, r4, 0x0, &(0x7f0000000180)={0xa10906, 0x9a8, [], @value64=0x4}}) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000140)) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) futex(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) exit_group(0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000002280)={{0x7, 0x5}, 'port0\x00', 0x30, 0x8, 0x1, 0x3, 0x7fffffff, 0x9, 0x50000000, 0x0, 0x0, 0x7f}) ioctl$KIOCSOUND(r5, 0x4b45, 0x100000002) 16:02:15 executing program 1: unshare(0x24000180) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0f0000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="05003500000000180800320000000000"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r6, 0x300, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40010) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$hidraw(r9, &(0x7f0000000040)="3f87fba2796e4576008b08927bfb42fdcef1ddbd9d152b00b54c74f3c1fbb2790da5f77f3c0f757a08a3a22d47f6ae50bc66e41e25adea1efcd1b0ff23795ef00df762c25bd460f6fd2d709459090e064bc4fdb9627a2abaa74e0997df", 0x5d) ioctl$IMSETDEVNAME(r7, 0x80184947, &(0x7f0000000000)={0x10, 'syz1\x00'}) socket$rxrpc(0x21, 0x2, 0x2) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:02:15 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0xaf02, &(0x7f0000000180)={0x0, r1}) 16:02:15 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af20, &(0x7f0000000180)) 16:02:15 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "5f1889881f4d4902f9e444af17ef38f65d5a1899"}, 0x15, 0xefd7e4cc5717c333) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4009c0, 0x0) ioctl$KIOCSOUND(r0, 0x4b45, 0xfffffffc) 16:02:15 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:02:15 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40042408, &(0x7f0000000180)={0x0, r1}) 16:02:15 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)) 16:02:15 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) 16:02:15 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = getpgrp(r0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup(r4, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) clone3(&(0x7f0000000380)={0x3000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2}, &(0x7f00000000c0)=""/191, 0xbf, &(0x7f0000000180)=""/208, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, r2], 0x7, {r5}}, 0x58) exit_group(0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r6, 0x4b45, 0x100000002) 16:02:16 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000000)="ee2400f8d1967de9b4d823b2e24a23990c87788228d0dc10e2387d681e358cfeb3160c9ef501a99b5f6c35fb4cdc22a513e254f230411e112a429cb2ba5bd3d3db4cbeb0857d2d8a642d4703880105ed53fc73725ba332c438e726bb1d601d42f5b87c1248167cef071b2d08104208968999b69051333aa46f02ef3b2af5e8b244e90dd546e7b1c6955eaaf2964c1b01b8", 0x91) 16:02:18 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000d4) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:02:18 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x400445a0, &(0x7f0000000180)={0x0, r1}) 16:02:18 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000180)) 16:02:18 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f00000002c0)={{0x3, 0x200, 0x0, 0x7, 0x3f, 0x8}, 0x105, [0x400, 0x9, 0x3, 0xb32b, 0x1, 0x0, 0x7fff, 0x4f73, 0x10001, 0x8, 0x2, 0x7fff, 0x10001, 0x1, 0x21e2, 0xffff, 0x7, 0x0, 0xe7, 0xffffffff, 0x2, 0x101, 0xffff, 0x2, 0xff, 0x0, 0x7, 0x400, 0x42d1, 0x1, 0x3, 0x1000, 0x400, 0x8, 0x401, 0x5, 0x7, 0x8000, 0x8, 0x9, 0x401, 0x81, 0x8, 0x3, 0x10000, 0x0, 0xb8, 0x7f, 0xffff, 0x1, 0x2, 0xe728, 0x6, 0xe86, 0x0, 0xcc84, 0x2, 0x1000000, 0x2, 0xaa, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x2, 0x3, 0x50, 0x8, 0x6, 0xff, 0x8cf3, 0x8, 0x0, 0x4e5b, 0x81, 0x4, 0x7fff, 0x8, 0x7f, 0x9191, 0x1f, 0x9, 0x1000, 0x1, 0x0, 0x4, 0x5, 0x63, 0x0, 0x7, 0x9, 0x7e5c, 0x800, 0x9, 0x0, 0xbc, 0x6, 0x323, 0x6, 0x1c7, 0x80000000, 0x4, 0x0, 0x8, 0x1f, 0x0, 0x800, 0x1, 0x101, 0x6, 0x6, 0x3, 0x2, 0x800, 0xb49, 0x7f, 0x80000001, 0x400, 0x4, 0x6, 0x2, 0x3, 0xffffffff, 0x1, 0x1, 0xfc000000, 0x2, 0xffff3a4d, 0x8000, 0x2, 0x2673, 0x6, 0xdd, 0x81, 0x0, 0x9, 0x5, 0xff, 0x7ff, 0x7, 0xfff, 0x555, 0x6d, 0x1, 0x7, 0x5, 0x200, 0xd6d9e20, 0x9, 0x101, 0xb52, 0xffffffff, 0x2, 0x80000001, 0x81bc, 0x0, 0x3ff, 0x2, 0x9, 0x40, 0x80000000, 0x800, 0xfffffff7, 0x401, 0x4, 0x5, 0xd93c, 0x0, 0x8, 0x7, 0x1, 0x5, 0x5, 0xfff, 0x3, 0x38c, 0x8, 0x8, 0x7ff, 0x101, 0x401, 0x3, 0x3, 0x3, 0x9, 0x9, 0x1, 0x7, 0xf76, 0x800, 0xfffffc00, 0x80000000, 0x5, 0x0, 0x4, 0x1, 0xcb4, 0x20, 0x4, 0xc99, 0x0, 0x0, 0xdaad, 0x80000001, 0x3, 0x7fff, 0x0, 0x3, 0x8, 0x575b5d37, 0x4, 0x2, 0x0, 0x9, 0x81, 0x400, 0x2, 0x9, 0xd4d, 0x8, 0x1, 0xf03d, 0x9, 0x3, 0x5, 0x4, 0x452e, 0xffff0000, 0x5, 0x2, 0x1000, 0x7fffffff, 0x7, 0x3c1, 0xfffffff8, 0x1, 0x1ff, 0x10000, 0xff, 0x0, 0x4, 0x2, 0x1, 0x0, 0x2908afe6, 0xfffffffa, 0x2, 0x5, 0x7, 0x80000001, 0x8, 0x5, 0xef, 0x2, 0x5, 0x0, 0x1f, 0xcc20000, 0x3f, 0x4, 0xffff28d0, 0xffff, 0x8, 0xffff, 0x2, 0x401, 0x7, 0x1ff, 0x3, 0x10001, 0x6, 0x10001, 0x0, 0xffff, 0x5, 0x7f, 0x8000, 0x8001, 0xcbe, 0xfff, 0x7ff, 0x75e, 0x5, 0x8, 0x800, 0x65f, 0x2, 0x6, 0x401, 0x8, 0x491e, 0x81, 0xc23, 0x20, 0x7, 0x400, 0x20, 0x6, 0x7fff, 0x80000, 0x2, 0x4, 0x5f, 0x374, 0x2, 0x7, 0xfff, 0x80, 0x2, 0x6, 0xd6c, 0x2e0, 0x80, 0x10000, 0x5, 0x6, 0x5, 0x800, 0x6, 0xca77, 0x8, 0x3, 0x7fff, 0x6, 0x40000000, 0xf84, 0x6, 0x9, 0x3, 0xfff, 0x9, 0x1, 0x200, 0x3, 0x6, 0x9, 0x5, 0xffffff63, 0x7ff, 0x3, 0xaef, 0x5, 0x1000, 0x0, 0x10001, 0x3, 0x1, 0x4, 0x200, 0x3, 0x1000, 0x7ff, 0x4, 0x2, 0x1, 0x5, 0xfffffffb, 0x0, 0xeb7, 0x7f, 0x0, 0x401, 0x3, 0x500000, 0x3, 0x4, 0x3, 0x7, 0x4, 0x4, 0x1, 0x10000, 0x10000, 0x40, 0x3, 0x3e0, 0xbc9, 0x3, 0xb85, 0x1000, 0x4, 0xdf2, 0x6, 0x1000, 0x3, 0x2, 0x59fe800, 0x8, 0x40, 0x7ff, 0x5, 0x1, 0x8, 0x62, 0x8, 0x7f, 0x3, 0x1, 0x80000000, 0x7, 0x7, 0x91b, 0x5, 0x3, 0x1, 0xffff, 0x2, 0x2, 0x1, 0x6, 0x7fffffff, 0x9, 0x1, 0x5, 0x10001, 0xc37f, 0x7857, 0x3, 0x3ff, 0x9, 0x6cf, 0x9, 0x2, 0x87, 0x7ff, 0x1, 0x9, 0x4c, 0x7ff, 0x0, 0x100, 0x9f, 0x6, 0x80000000, 0x2, 0xfffffff7, 0x0, 0xfa07, 0x7334e0f6, 0x101, 0x6, 0xa8, 0x0, 0xd9a1, 0x0, 0x1, 0x3, 0x8, 0x3f, 0x8, 0x0, 0x9, 0x1, 0x1, 0x0, 0x4, 0x5, 0x8, 0x0, 0x4, 0x6, 0xd6, 0x7, 0x4, 0x9, 0x2, 0x0, 0x4, 0x7, 0x6, 0x3, 0x9, 0x4, 0x2, 0x0, 0xdc02, 0x4, 0x5, 0x5, 0xfffffffd, 0x101, 0x80000001, 0x4, 0x0, 0x8001, 0x3, 0xffffffff, 0x7f, 0x7, 0x8, 0x6, 0x3, 0x81, 0xffff, 0x200, 0x5, 0x1c5d, 0x4, 0x200, 0x2, 0x6, 0x9, 0x9, 0x5, 0x80000000, 0xfffffffe, 0x3b3, 0x8, 0x0, 0x6, 0x2, 0x8000, 0x8001, 0x0, 0x30, 0xfffff5bd, 0x7, 0x4, 0xffff, 0xed, 0x667, 0x7, 0x8a, 0x0, 0x8, 0x400, 0xff, 0x7fffffff, 0x7, 0x81, 0x0, 0x571, 0x1, 0x9, 0x7, 0x2e4, 0xfff, 0x1, 0x40, 0x9, 0x81, 0xfff, 0x10000, 0xfffffffc, 0x3, 0x1ff, 0x4348, 0xaa6, 0x80, 0x10001, 0x0, 0x6dd5, 0x6, 0x3, 0xd4d5, 0x2e871bb3, 0xb9, 0x20, 0x0, 0x0, 0x3, 0x74c5, 0x73, 0x2, 0x4, 0x4, 0xdc1, 0x0, 0x5, 0x8000, 0x0, 0x698, 0x200, 0x3847, 0x8, 0x1000, 0x1f, 0x4, 0x8, 0xf2, 0x7, 0x1, 0x0, 0x1ff, 0x10000, 0x2, 0x4, 0x9, 0x81, 0x7, 0x4, 0x401, 0x200, 0xf0000000, 0x10000, 0x8, 0x1, 0x2, 0x8724, 0x1, 0x4, 0x9, 0x8, 0x1, 0x7fffffff, 0x3ff, 0x100, 0x53b, 0x3, 0x5, 0x8f, 0x40, 0x0, 0x401, 0x2, 0x8, 0x9, 0x97, 0xa7, 0x6, 0x9, 0x2, 0x7, 0x1, 0x2, 0x1749, 0x400, 0x2, 0x8, 0x8, 0xfffffffe, 0x4, 0x2, 0x6, 0x5, 0x5, 0x2, 0x700, 0xb7, 0x1f, 0x7, 0xf848, 0x7, 0x100, 0x9, 0x9, 0x8, 0x6a6, 0x2, 0x400, 0x200, 0xfffffffb, 0xa7, 0x8, 0x3, 0x5, 0x2f6, 0x1, 0x0, 0x5, 0x3, 0x7bc, 0xfff, 0x7fff, 0x8, 0xb3d, 0xfffffff7, 0x6, 0x1, 0x10000, 0x7, 0x5f, 0x1, 0xdc, 0x88ca, 0x7, 0x0, 0x0, 0x101, 0x3, 0x3f6e800, 0x1f, 0x1, 0x3f, 0xfff, 0x2, 0x4, 0x7f, 0x6, 0x1, 0x4b86, 0x4, 0x5, 0x80000, 0x80000000, 0x200, 0x80000000, 0x64bd, 0xc59, 0x3, 0x7f, 0x2, 0x814c, 0x3, 0x0, 0x1, 0x16e, 0xb6f8, 0xff, 0xfffffff9, 0x3ff, 0x3ff, 0x3fe0, 0x7fffffff, 0x1ff, 0x5, 0x8b, 0x6, 0xfffffffa, 0x0, 0xff, 0x6, 0x2, 0x7fff, 0x6, 0x0, 0xfff, 0x0, 0x3ff, 0x40, 0x0, 0x101, 0x5, 0x20, 0x1f4, 0xc889, 0x1b, 0x4, 0x8000, 0x52c, 0x7, 0x5, 0x0, 0x1ff, 0x6, 0x2, 0x80000000, 0x400, 0x0, 0x785a, 0x0, 0x89ad, 0x20, 0x5, 0x5, 0x10001, 0x8, 0x7, 0x6, 0x0, 0xe16, 0x1, 0x7, 0x7, 0x95, 0xfffffffb, 0xfff, 0x1, 0x6, 0x6, 0x9, 0x0, 0x0, 0x80000001, 0xa3, 0x10000, 0x9, 0x0, 0x2, 0x200, 0x9, 0x6, 0x5, 0x3, 0x3ff, 0x795c, 0x20, 0x9, 0x6, 0x3, 0x6, 0x80, 0x8, 0x9, 0x0, 0x3, 0x0, 0x1, 0x80, 0x6, 0x200, 0x1, 0x101, 0x44, 0x2, 0x3, 0x7, 0x6, 0x7ff, 0xde4, 0x8b8, 0x6, 0x800, 0x8, 0x1, 0x5, 0x8, 0x0, 0x4, 0x83b, 0x1, 0x7fffffff, 0x80, 0x4d0, 0x5ef6df1d, 0x1, 0x26800, 0xffffffff, 0x903, 0x9, 0x0, 0x3, 0x96b6, 0x5, 0x6, 0x7, 0xff, 0x1, 0x3, 0xfffffffa, 0x5, 0x0, 0x2b00, 0x6, 0x5, 0x4, 0x3, 0x1a25, 0x5, 0xc2, 0x9, 0x9, 0xffffffff, 0x0, 0x400, 0x3, 0x7, 0x2aa, 0xfffff800, 0x9, 0x7fff, 0x47, 0x401, 0x4, 0xffff, 0x0, 0x7fffffff, 0x2, 0x9, 0xfffffffb, 0x4, 0x8, 0x40000000, 0x5, 0x1000000, 0x3, 0x0, 0x4, 0x5, 0x785, 0x5, 0x3f, 0xffffff01, 0x9, 0xb1, 0x9, 0x6, 0x8000, 0x5, 0x0, 0x4, 0x80, 0x6, 0x8, 0x9, 0xfffff800, 0x6, 0x0, 0x3, 0xffffff93, 0x7, 0x0, 0x1, 0x2, 0xd31, 0x9, 0x7c8e, 0x5, 0x10000, 0x1, 0x81, 0x320f, 0x20, 0x0, 0x4, 0x6, 0x7, 0x3, 0x8, 0x703, 0x80, 0x1, 0xc0, 0xff, 0x9, 0x800, 0x0, 0x2, 0x7, 0x20, 0x37c, 0x58, 0x5, 0x5, 0x0, 0x6, 0xfffffffc, 0x8, 0x8, 0x101, 0x0, 0xd53b, 0x6, 0x1, 0x1ff, 0xffff891d, 0x3, 0x1000, 0x2, 0xffffffff, 0xab, 0x0, 0x401, 0x1f, 0x3f, 0xb55, 0x20, 0x56fd, 0x1, 0x4, 0x3, 0x8, 0x80000000, 0x8, 0x3, 0x0, 0x10001, 0x823, 0x9, 0x8, 0x0, 0x9, 0x4, 0x3, 0x1, 0x81, 0x1, 0x8e, 0x2, 0xffff725e, 0x200, 0x9, 0xa5, 0x9, 0xffffffff, 0x80, 0x6, 0x401, 0x100, 0xfffff86a, 0x101, 0x0, 0x51, 0x8, 0x4f000, 0x5, 0x2, 0x7fffffff, 0x1, 0x6, 0x40, 0x200, 0xffffffe1, 0x9, 0x0, 0x80000001, 0x200, 0x5, 0x100, 0x3ff, 0x4, 0x80000000, 0x0, 0xc290, 0x3, 0x7ff, 0x8, 0x80000001, 0x6, 0x5, 0x9, 0x1ff, 0x1ff]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) read$usbfs(r5, &(0x7f0000000000)=""/87, 0x57) 16:02:18 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x22c0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0xff, 0x9, 0x30, 0xa56, &(0x7f0000000040)="703752cf3f47a4a78653887c307b1a736f9f871d789e53791e84f0646b3a7f53fc2bb8804c4299a4fb0688bd78c18ef7"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b45, 0x100000004) 16:02:18 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000001) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000040)=0x68d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000080)={0x3, 0x10000, 0x1}) 16:02:18 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x400454ca, &(0x7f0000000180)={0x0, r1}) 16:02:18 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000040)={0x5, [0x3, 0x936c], 0xc84}, 0x10) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 16:02:18 executing program 3: fcntl$setsig(0xffffffffffffffff, 0xa, 0x15) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:02:19 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af23, &(0x7f0000000180)) 16:02:19 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x2, @broadcast}, 0x10) sendmmsg(r2, &(0x7f00000038c0), 0x4000000000000a8, 0x0) r3 = pidfd_getfd(r1, r2, 0x0) ioctl$KIOCSOUND(r3, 0x4b45, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ACQUIRE(r5, 0x6430) 16:02:19 executing program 2: clone(0x200338aa4fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 16:02:21 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000d5) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:02:21 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40047438, &(0x7f0000000180)={0x0, r1}) 16:02:21 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af24, &(0x7f0000000180)) 16:02:21 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b45, 0x100000004) 16:02:21 executing program 2: clone(0x862800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000440)={0x7, &(0x7f0000000000)=[{@fixed}, {}, {@fixed}, {@none}, {@fixed}, {}, {@none}]}) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 16:02:21 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = timerfd_create(0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x8, 0x7, 0x7fff, 0x3, 0xbf10}) r2 = eventfd2(0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) connect$netrom(r3, &(0x7f0000000080)={{0x3, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCX25SDTEFACILITIES(r7, 0x89eb, &(0x7f0000000140)={0x200, 0x1f, 0x9, 0x0, 0x5, 0x13, 0x13, "0127c24249c041777ad015ef72a39b5a4e16be8f", "8e14d21b10633d0c0a8688fad44dcbad597b32be"}) ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, &(0x7f0000000100)=0xf7c400) 16:02:21 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40049409, &(0x7f0000000180)={0x0, r1}) 16:02:21 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100400002) 16:02:21 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x4102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r2, 0x4b45, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000080)) 16:02:21 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af60, &(0x7f0000000180)) 16:02:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x7ff, 0x5416, 0x1}) unshare(0x20000400) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r3 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_pts(r5, 0x100) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x10, 0xa, 0x68, &(0x7f00000002c0)="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"}) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000180)={0x0, r3}) 16:02:22 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4004af07, &(0x7f0000000180)={0x0, r1}) 16:02:24 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000d6) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:02:24 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x6) 16:02:24 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) 16:02:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@setneightbl={0x2c, 0x43, 0x100, 0x70bd2d, 0x25dfdbff, {0x4}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0x2}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008090}, 0x10040044) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000000)={0x33, 0x2f, 0xb, 0x11, 0x9, 0x2, 0x5, 0x14, 0xffffffffffffffff}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000180)={0x0, r5}) 16:02:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4010aeac, &(0x7f0000000180)) 16:02:24 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4004af61, &(0x7f0000000180)={0x0, r1}) 16:02:24 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RREADDIR(r2, &(0x7f0000000080)={0x49, 0x29, 0x1, {0x77, [{{0x2, 0x1, 0x6}, 0x6, 0x43, 0x7, './file0'}, {{0x80, 0x3, 0x5}, 0xfa0a, 0xd3, 0x7, './file0'}]}}, 0x49) 16:02:24 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$ax25(r2, &(0x7f00000003c0)={{0x3, @netrom}, [@null, @remote, @bcast, @bcast, @remote, @default]}, &(0x7f0000000080)=0x48, 0x80000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = eventfd2(0x0, 0x80001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000002c0)={r11, 0xc4, "b295484424a22621570c72d3019e83e058be899446276c0f64998597ac7af467225c115d5ff9a492a3a098669eb9bc0652dc38dae377d9c3147aa7dc3b77cda29761d165eb882c744d29a016d262ec7d4283c3ad58b80edd2e7fcd13fd0e341fe81042c3e17d74f7db4288af1bbcd01fb62a37e3861c9291d07c0c5fa54218e80337cff153fed8da4ddb23835117d412b7b356a9e65093c3f773c1a351d76173af0f9cd0d2bd4d17a1098ef70b7191daa7cc98b55060b9a1246696cc167bff01c3d08cc7"}, &(0x7f00000001c0)=0xcc) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r4}) 16:02:24 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40086602, &(0x7f0000000180)={0x0, r1}) 16:02:24 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$ax25(r2, &(0x7f0000000000)={{}, [@null, @rose, @netrom, @null, @netrom, @remote, @default, @netrom]}, &(0x7f0000000080)=0x48, 0x0) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000002) 16:02:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40140921, &(0x7f0000000180)) 16:02:25 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) [ 1479.600672][ T0] NOHZ: local_softirq_pending 08 16:02:27 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000000d7) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 16:02:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40186366, &(0x7f0000000180)) 16:02:27 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40087602, &(0x7f0000000180)={0x0, r1}) 16:02:27 executing program 3: clone(0xd906be00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) 16:02:27 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = semget(0x3, 0x0, 0x80) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000002340)=""/4096) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b45, 0x100000002) 16:02:27 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r2}) 16:02:27 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010100}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x203002, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0xa, &(0x7f0000000180)=[{0xf8, 0xb6, 0x2f, 0x8}, {0x3, 0x0, 0x81, 0xe6d}, {0x3f, 0xff, 0x1f, 0x8}, {0x6, 0x0, 0x0, 0x200}, {0x401, 0x9c, 0x7, 0x40}, {0x5, 0x8, 0x1f, 0x4}, {0x1, 0x2b, 0x6}, {0x401, 0x9, 0x80, 0xfffffffb}, {0xff, 0x7f, 0x2, 0x9}, {0x7fff, 0xb, 0x5, 0x9d52}]}) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) exit_group(0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x111000, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000040)={0xfff, 0x3ff, 0x800, 0xeb, 0xf9, "3f27205bea230dac9cdb0b23567a3a23cb66f3", 0x4ba, 0x1}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r3, 0x4b45, 0x100000004) 16:02:27 executing program 1: unshare(0x20000400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000000)={'macsec0\x00', 0x8, 0x1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) rt_sigreturn() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$USERIO_CMD_REGISTER(r5, &(0x7f0000000100)={0x0, 0xff}, 0x2) 16:02:27 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x40087708, &(0x7f0000000180)={0x0, r1}) 16:02:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4020940d, &(0x7f0000000180)) 16:02:27 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x140e, 0x200, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000000)) exit_group(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r4, 0x4b45, 0x100000002) 16:02:28 executing program 3: socket$inet_icmp(0x2, 0x2, 0x1) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b45, 0x100000004) [ 1481.416773][ C0] traps: PANIC: double fault, error_code: 0x0 [ 1481.416780][ C0] double fault: 0000 [#1] PREEMPT SMP KASAN [ 1481.416786][ C0] CPU: 0 PID: 9554 Comm: syz-executor.1 Not tainted 5.8.0-rc2-syzkaller #0 [ 1481.416793][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1481.416796][ C0] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 1481.416809][ C0] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 e0 83 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 9f 96 66 89 48 c1 eb 03 48 [ 1481.416814][ C0] RSP: 0018:fffffe0000001fb8 EFLAGS: 00010086 [ 1481.416822][ C0] RAX: 0000000000000000 RBX: fffffe0000001fb8 RCX: ffffffff88000e87 [ 1481.416829][ C0] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff884583e0 [ 1481.416834][ C0] RBP: fffffe0000002120 R08: 0000000000000000 R09: 0000000000000000 [ 1481.416845][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1481.416851][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1481.416857][ C0] FS: 00007fb157eca700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1481.416861][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1481.416866][ C0] CR2: fffffe0000001fa8 CR3: 000000020fe75000 CR4: 00000000001426f0 [ 1481.416872][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1481.416877][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1481.416880][ C0] Call Trace: [ 1481.416883][ C0] [ 1481.416885][ C0] error_entry+0xb8/0xc0 [ 1481.416889][ C0] RIP: 0010:native_irq_return_iret+0x0/0x2 [ 1481.416901][ C0] Code: 5a 41 59 41 58 58 59 5a 5e 5f 48 83 c4 08 e9 10 00 00 00 90 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 f6 44 24 20 04 75 02 <48> cf 57 0f 01 f8 0f 1f 00 65 48 8b 3c 25 00 90 01 00 48 89 07 48 [ 1481.416905][ C0] RSP: 0018:fffffe00000021d8 EFLAGS: 00010046 ORIG_RAX: 000000000000a700 [ 1481.416914][ C0] RAX: 0000000000000000 RBX: 000000000040b41c RCX: 0000000000000000 [ 1481.416920][ C0] RDX: 0000000000000000 RSI: 00007fb157eca9c0 RDI: 00007ffc4e47cf5f [ 1481.416925][ C0] RBP: 000000000078bf0c R08: 0000000000000000 R09: 0000000000000000 [ 1481.416930][ C0] R10: 0000000000000000 R11: 28fa49575ee36c00 R12: 0000000000000000 [ 1481.416935][ C0] R13: 000000000078bf08 R14: 000000000078bf00 R15: 000000000078bf0c [ 1481.416939][ C0] ? asm_exc_general_protection+0x8/0x30 [ 1481.416941][ C0] RIP: a703:0x0 [ 1481.416944][ C0] Code: Bad RIP value. [ 1481.416949][ C0] RSP: 0003:0000000000413825 EFLAGS: 00040702 [ 1481.416952][ C0] Modules linked in: [ 1481.667384][ C0] ---[ end trace 84dda9760ffff61d ]--- [ 1481.667388][ C0] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 1481.667399][ C0] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 e0 83 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 9f 96 66 89 48 c1 eb 03 48 [ 1481.667402][ C0] RSP: 0018:fffffe0000001fb8 EFLAGS: 00010086 [ 1481.667408][ C0] RAX: 0000000000000000 RBX: fffffe0000001fb8 RCX: ffffffff88000e87 [ 1481.667413][ C0] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff884583e0 [ 1481.667417][ C0] RBP: fffffe0000002120 R08: 0000000000000000 R09: 0000000000000000 [ 1481.667421][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1481.667426][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1481.667431][ C0] FS: 00007fb157eca700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1481.667434][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1481.667439][ C0] CR2: fffffe0000001fa8 CR3: 000000020fe75000 CR4: 00000000001426f0 [ 1481.667443][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1481.667447][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1481.667451][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1481.668781][ C0] Kernel Offset: disabled