0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000007e80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000007ec0)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000007fc0)={@ipv4={[], [], @local}, 0x0}, &(0x7f0000008000)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000008640)={&(0x7f0000000180), 0xc, &(0x7f0000008600)={&(0x7f0000008040)={0x5ac, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x1e8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x195c}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r6}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x9, 0x5, 0x4fd9, 0x4}, {0x100000000, 0x800, 0x0, 0x80}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xbae}}}]}}, {{0x8, 0x1, r10}, {0x164, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xb2}}}]}}, {{0x8, 0x1, r14}, {0xf4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r16}, {0x138, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff9}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x1f, 0x6, 0x3, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r18}}, {0x8}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x40}, 0x48000) connect(r0, &(0x7f00000002c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0) pipe2(0x0, 0x4800) [ 1306.889177][T30565] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1306.909845][T30565] EntryControls=0000d1ff ExitControls=002fefff [ 1306.917238][T30565] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1306.925542][T30565] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 10:34:49 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000001c0)="09dfd1969aa5fa060c000008001e0a03b7c6e7a83500008987", 0x19) fcntl$getown(r0, 0x9) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100000001, 0x4000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000080)) [ 1306.935468][T30565] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1306.943413][T30565] reason=80000021 qualification=0000000000000000 [ 1306.955725][T30565] IDTVectoring: info=00000000 errcode=00000000 [ 1306.966341][T30565] TSC Offset = 0xfffffd41f5a1e598 [ 1306.976891][T30565] EPT pointer = 0x000000008882501e 10:34:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xa0, 0x0) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000000c0)=0xfff, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:34:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1307.265864][T31369] *** Guest State *** [ 1307.271099][T31369] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1307.285740][T31369] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1307.297538][T31369] CR3 = 0x0000000000000000 [ 1307.306929][T31369] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 10:34:49 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:49 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xff', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:49 executing program 0: r0 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) [ 1307.316021][T31369] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1307.350405][T31369] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1307.398168][T31369] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1307.437188][T31369] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 10:34:50 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x2c) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000080)={{0x3, @name="5709c57dda74572c9ad03433c903630552620fad9d8d3521743eaf45035cd2f3"}, 0x8, 0x7f, 0x800}) [ 1307.480944][T31369] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1307.503558][T31369] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:34:50 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000180)=0x13a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) r1 = dup(0xffffffffffffffff) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x80) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_emit_ethernet(0x300cce, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000810000d086dd60b4091046d37d000000ffffe0000002ff0200ae0000000000000000000000013a0090780003040060b680fa000000000000009fda243d24c13729000020000000ffffffff05c487574788ffff0000000e95d4706ce6ee066a986b84ec27d567a864d7853eb0f30e29883e71e5e7fe2621e4904626407432ac07037cb692aaad865c56aaf516a884881cd10d9df0f31c1d512faa002fde1b951c72ccded0b36da4d79c928eb67732da4907d0d57c8837b0ba99cb78f0823f91721ae1b5e4c7be33f5172ad1"], 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000200)={0x5c1a, "600f898e5b011d03c11f3174c4cd6d9743613cd9e49b63fb78c321da738c48ec", 0x3, 0x1}) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000001c0)=0x5, 0x4) connect$l2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) [ 1307.528499][T31369] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1307.566706][T31369] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1307.608732][T31369] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1307.638176][T31369] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1307.649217][T31369] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1307.660333][T31369] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1307.671196][T31369] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1307.681582][T31369] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1307.691632][T31369] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1307.700043][T31369] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1307.710686][T31369] Interruptibility = 00000000 ActivityState = 00000000 [ 1307.719089][T31369] *** Host State *** [ 1307.723777][T31369] RIP = 0xffffffff811b4e70 RSP = 0xffff8880555e78e0 [ 1307.732008][T31369] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1307.740707][T31369] FSBase=00007f8855b62700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 1307.751277][T31369] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1307.760729][T31369] CR0=0000000080050033 CR3=00000000a1b84000 CR4=00000000001426f0 [ 1307.771038][T31369] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1307.793919][T31369] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 10:34:50 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x2c) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000080)={{0x3, @name="5709c57dda74572c9ad03433c903630552620fad9d8d3521743eaf45035cd2f3"}, 0x8, 0x7f, 0x800}) 10:34:50 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xff', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1307.820170][T31369] *** Control State *** [ 1307.830118][T31369] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1307.844947][T31369] EntryControls=0000d1ff ExitControls=002fefff [ 1307.861603][T31369] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1307.906265][T31369] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1307.918539][T31369] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 10:34:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000140)=0x401, 0x2) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x4) [ 1307.962212][T31369] reason=80000021 qualification=0000000000000000 [ 1307.978011][T31369] IDTVectoring: info=00000000 errcode=00000000 [ 1307.991643][T31369] TSC Offset = 0xfffffd4176f7cd49 [ 1308.049639][T31369] EPT pointer = 0x00000000907e701e 10:34:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000040)={0xffffff30, 0x0}) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000000)={0x4, &(0x7f0000000080)=""/117, &(0x7f0000000400)=[{0x5, 0xac, 0x100000000, &(0x7f0000000100)=""/172}, {0x5, 0x70, 0x8, &(0x7f00000001c0)=""/112}, {0x5, 0xba, 0x4, &(0x7f00000002c0)=""/186}, {0x5, 0x74, 0xfff, &(0x7f0000000380)=""/116}]}) prctl$PR_CAPBSET_READ(0x17, 0x4) 10:34:50 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) fsync(r0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x80000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x8) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000000000000004) 10:34:50 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x80000000000000) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='rootfs\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x400100, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) syz_mount_image$nfs4(&(0x7f0000000300)='nfs4\x00', &(0x7f0000000380)='./file0\x00', 0x1, 0x9, &(0x7f0000000940)=[{&(0x7f00000003c0)="8fe25e87b541d8ac00db400f8ef763d48cce986ddf6c975705771bf11f97a5b737d5a8d4a347c728c4b4520be326b31dae2ba6f7203bfccdc18aabc6f5ad0e449cb1b612d6d4ac31afcff6e62c5c927af728fb80a27cd029b0e4d8a0816bbc13d3d13992ee4c20d3391c6ca523a3f7ff83b7c6d5d57bf66afc649fd9eb0ac7972da201340c0106e42647361aa3b6d169873547739b7e449a9f94bc3089a197fbfb6cd3e64392073cc65316f0c569aafb2121d4677b49", 0xb6, 0xaa}, {&(0x7f0000000480)="3a9a39404b0b97cf3b4bcdd96abddc88a9aa4332dd38df4a10f0d6590a71d4d4f385a06f7639fc42790a49f602164a5bd4fc56aa5429b0205eebebf22ad1aaa19d84", 0x42, 0x2800000000}, {&(0x7f0000000500)="fca1373ca12c9d8d087f6c4687feed750dec1791731966367b1fca35168c6eadfca30df1a443a82bf1c525d3f2c82226f105714e936f4c8d463c139308da9d75f8509e913f9cfb14e4905cdda582ae3707a6a1c6280a6b79678df3bc5d850d78a30b9699968d86b14bc25b7b864077b4f6480c92190c5d171f03394acd42988f41df0a989ccc1bae6eb1f787a69b54d832272105918668a8ea3bca565d2174328bc558493c51c146e08f7152505099837e7803d58650", 0xb6, 0x9}, {&(0x7f00000005c0)="36186b68d8777bf6539d2fbb0dcddb6c55e1b956fc15bc069cd308db87d63f980732", 0x22, 0x8}, {&(0x7f0000000600)="4e9726915a46183680728004abf569ba89335d2e18d9fc43229e91", 0x1b, 0xffff}, {&(0x7f0000000640)="d0c2ac6081e01c2ff0b2855dfb9581d87b027835eac6fb49b4100b7eb56b7562d6b4510e86533f7661229454a9edbfce7517d8efb4e260302221", 0x3a, 0x101}, {&(0x7f0000000680)="cbc81524f67fe547cf7e599b9ad2348aa65dee47969d049ab4d904e746f98a1363fc2969c3a33b50cd632e85ee0922a44af4c9bfd96fc0b0c838040e3f3f35178ecd4455368c19dc397ed1c14486a3b9556b4abe5f83b38088af63298cb89b7f0e064cd30c31155c0f22fad9cedb9225896d0629a11cfbd40a075e824069cac01e9bb74554e33e1224f69e63c70ed3bf929c18d3f9b2e6268dd11a7c77061bd9379bef4c09324fdc0c87227e69236283de8a9763466e55f18adc5e9bd877aaf7dfaa488d10bc14e2e49d5afafcd1a0fef72e5a4bd90b795c30a12d72bab8c513690c", 0xe2, 0x1}, {&(0x7f0000000780)="1e24e2ae5f192e5c577d5556c1bcf691ab5341e87f9675c3dba60c31dac4be303d35bec7081844e181c5b75c322012e55d87d807e05a33781c6bdb5f28111e00ea5523b17c10178111f8cc76b4477ff8f954f3abc2fcebc771e5cf3028022ffd557f4121d34810b503c594f4c8ccb6d84e62621d212c25678c72f15f25abbeeb0217f11d4915208d86a95869a5c8a2e2", 0x90, 0x6}, {&(0x7f0000000840)="9c3e634f3634350832212762bc8a360d59aedc9650ec800a2ed264505b4fb56e146bcf3ff4ff446d8e36bb5547cd643c4e6a26b4a5526ea09d5367b1efbc74b21d62080f661bf5a58937474b6f2e9ae10f4a1321048cb2687f145867c7d83df6e0b08457609612152f397db549f950cd46858cd5894e2fa3522844b53df5774faeced781014b2a7780c508815ac17bda98616c0bded92427d8df2e6f8e8ab478c5c29ef5a70eb87e0d7ade60540a59901e3e18b58f6f348fd36b60b7f966cd1f9dd4506f2d99499c28e5b82369c29aeb9fa9", 0xd2, 0x5}], 0x100000, &(0x7f0000000a40)='\x00') ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={@empty, 0x4d, r1}) chdir(&(0x7f0000000080)='./file0\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cwd/..\x00\x00\xd8s\x11Z\xb9\x8f\'PO\xf8\x83\x1aYb\xa6\x00\x8bZY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac') ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000a80)) 10:34:51 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x30000, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xfd5a}}, 0x0) io_setup(0x7fff, &(0x7f0000000080)=0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4000, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vfio/vfio\x00', 0x800, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x80000, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/null\x00', 0x400200, 0x0) io_submit(r1, 0x7, &(0x7f0000000840)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f00000001c0)="df7cb66729f22a5329d35b5c281020a614fa1b3b4ade5b4ffd25e281e78aef78911a76717a20882e646768eabc7e2c9102aaed301b152472f3a6d87e79232b635ee36ee84e86b551564abfefc0a7d27c91bd3cab6ff1a8fca5240942651d556b252f723cbed06e08d0e44725fa30b55d8d45a08423ea1c96e76593ac3aa37979b6aa61b69ec51e093d207ff115179281c0e41098607feaa0a6b8863085cb7721bbe10e2f835e4777faed85d04c9633ba931d", 0xb2, 0x4, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f0000000280)="fe3125c818e290d37c4807d08c24ddcab065f87699653b1d938c7267beb415a384d9f19b1bdfef13057df4440f9a4552a853f0f224c6226e9f6741b5c52d8c6ae5a63117f9f1526af92a997fd8ba35e6d6d4aaccc76b87480e96a3ebdce5d709e8ca31ed9eee662069ab48cba92b0213194da9882b621ad585d5b54a85d405cde38674e5cf22c8f57fc1e9d72aa6edb024241f9b4458ef0410f7d74ec23f96b27b104eb2955ed21c55a7a5738f7b326d3153317879029284759c6bce0927999f2b7a5570519b596bfa18c68d01", 0xcd, 0x8000, 0x0, 0x0, r2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f00000003c0)="d405458f96ca70a711c0b8fe337d960f7770346f21d533f39aee3d2de21bb1532eaf2d1040c34cb617d115cccf7dd063d469e1239365b668cef4f311f642777fce609a1fd693e0f20f619336f90cf28751215a", 0x53, 0xf1c, 0x0, 0x1, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x80, r0, &(0x7f00000004c0)="ab5ae04a06d66bbe44ec657be5fba61a22006ceb639526c5dc4e2559197c06d54555dfe6d8283ac749782e2c5697af9e7e5da8b4132a547a490d4d34404158", 0x3f, 0x20, 0x0, 0x1, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x10000, r0, &(0x7f0000000580)="90b19040fcce721da49e81d3b07ec853489f7cdf572819985646d76452d3a20231d0621eef014c3abbaab4f9aefabd106da069d76c371b2b40bf4b27feecb244dbe94f137e740a1d6f129a4ee99dfba5dcf20125ee73ada14228d3450c9b2869754cb91d771c5a9a67ee0a86724adc2376703eb9726d5431e7b60a4e740f3c60dd0305205d695d338124eea7ca7bc707fb2a337afc484ae604e6c55c187ce4464cd5551bc567e8fd47c2da43c3f2d338cc4808ba", 0xb4, 0x4, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x81, r0, 0xfffffffffffffffe, 0x0, 0x3934, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x9, 0x6, r0, &(0x7f00000006c0)="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", 0xfc, 0x7c1b, 0x0, 0x0, r5}]) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x1f, 0x4) 10:34:51 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xff', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:51 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1000000}}, 0x30) [ 1308.392298][T32139] *** Guest State *** [ 1308.414058][T32139] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1308.459638][T32139] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1308.498403][T32152] netlink: 815 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1308.510740][T32139] CR3 = 0x0000000000000000 [ 1308.526146][T32139] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1308.543439][T32139] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 10:34:51 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x42000) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r2 = dup(r1) read(r2, 0x0, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000040)=0x101, 0x4) [ 1308.556861][T32139] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1308.578094][T32139] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1308.600842][T32139] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 10:34:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x82440) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) vmsplice(0xffffffffffffffff, &(0x7f00000046c0)=[{&(0x7f0000001500)='w', 0x33d}], 0x1000000000000280, 0x200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$alg(r0, &(0x7f0000003d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29}], 0x18}], 0x3ad, 0x0) [ 1308.619003][T32139] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1308.628630][T32139] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1308.645562][T32139] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1308.663950][T32139] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1308.673184][T32139] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1308.682759][T32139] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1308.692024][T32139] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1308.701504][T32139] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:34:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000006200)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") close(r0) r2 = socket(0x10, 0x806, 0x80000001) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xac, "a6200d7701216be81f3bed9918191dc39c630f86d31773c5adf84e0e1613942a761a2aa630e98fda477b27a0a2ff385ec745b603f0b51005bd83ec1444c07297969e8283ef34ebf5f9bd09f1dd8f8524efee313331a082bf4aec129adafcbede8a168267214324ee8f5a04f21fc342b61dad362e66c026e152bf78513aeb0258c8a032f7dbef20a108ec62b0ca032471974d5089536e666acf34e47d912303daf9edf3a6d9ae5d913f315561"}, &(0x7f0000000100)=0xb4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x9, 0x4, 0x5, 0x40, 0x9, 0x101, 0x80000001, r3}, 0x20) [ 1308.711816][T32139] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1308.721224][T32139] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1308.730951][T32139] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1308.758263][T32139] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1308.774180][T32139] Interruptibility = 00000000 ActivityState = 00000000 [ 1308.796994][T32139] *** Host State *** 10:34:51 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xff', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1308.818142][T32139] RIP = 0xffffffff811b4e70 RSP = 0xffff88805ae078e0 [ 1308.828641][T32139] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1308.853159][T32139] FSBase=00007f8855b62700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 1308.866256][T32139] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 10:34:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) r2 = accept4(r0, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x80, 0x80800) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x0, 0x288, 0x3f, {0x77359400}, {}, {0x4, 0x2, 0x401}, 0x1, @canfd={{0x1, 0x8d03, 0x4, 0x7}, 0x4, 0x1, 0x0, 0x0, "700633879cfba461ff57a8a8c0464340b01f8b614b4085f2b3b9cf8a7986ab79886d98647466abf6a3d87ce4f87850e4dcf5cfdd4544741a82f803dcfb867fd9"}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$xdp(r1, &(0x7f0000000380)={0x2c, 0x4, r3, 0x20, r2}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000009, 0x13, r4, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60f3, 0x80000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r5, &(0x7f0000000140), 0x5a) [ 1308.877237][T32139] CR0=0000000080050033 CR3=0000000088f2c000 CR4=00000000001426f0 [ 1308.892426][T32139] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1308.918533][T32139] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1308.935390][T32139] *** Control State *** [ 1308.956209][T32139] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1308.977171][T32139] EntryControls=0000d1ff ExitControls=002fefff [ 1308.996040][T32139] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1309.031671][T32139] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1309.052434][T32139] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1309.065806][T32139] reason=80000021 qualification=0000000000000000 10:34:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1309.085355][T32139] IDTVectoring: info=00000000 errcode=00000000 [ 1309.105915][T32139] TSC Offset = 0xfffffd40dbdde0ff [ 1309.133390][T32139] EPT pointer = 0x00000000a440501e 10:34:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r3}) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) shutdown(r3, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000000)={0x9, 0x1f001}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x3) 10:34:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000040)="ff55d36cffba04365d0000000000000101000000", 0x14) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x79) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x200000000000000, &(0x7f0000000100)={&(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0xf2a}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="ff55d36cffba04365d0000000000000101000000", 0x14) 10:34:52 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x13}) r1 = dup3(r0, r0, 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x8000000) io_uring_setup(0xdf5, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1, 0x3c1}) 10:34:52 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xff', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r4, r3}}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r3, 0x3, 0x1, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:34:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:34:52 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x20, 0x4000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r3 = dup2(r2, r2) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18}, 0x18) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0xf7) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x400, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'eql\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x6526269c76f0a4b1) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x198ffbfa, 0x0, 0x5}}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000001700)) socket$caif_stream(0x25, 0x1, 0x3) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r7 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00L\xff\xff\xff\xc3`\x00'}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000001400)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000001480)) sendmsg$inet_sctp(r7, &(0x7f00000015c0)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x18}}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB], 0x0, 0x24000004}, 0x24004001) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000001780)={0xffffffffffffffff, 0x7, 0x0, r5}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000001800)={0x0, 0x4}, 0x8) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, &(0x7f0000001880)) 10:34:52 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$evdev(r0, &(0x7f0000000600)=[{{0x0, 0x7530}}], 0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) getgid() sendmsg$netlink(r0, 0x0, 0x804) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000001c0)={0x80ff, 0x2}) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3, 0x440000) r1 = open(&(0x7f0000000240)='./bus\x00', 0x4001, 0xffffffffffffffff) openat$cgroup_type(r1, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000340), &(0x7f0000000000)=0x60) 10:34:52 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xff', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1309.868427][ T551] *** Guest State *** [ 1309.877353][ T551] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 10:34:52 executing program 5: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0xb5eb, 0x101000) r2 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x800) r3 = socket$netlink(0x10, 0x3, 0x1b) ppoll(&(0x7f0000000140)=[{r0, 0x1004}, {r1}, {r2, 0x8010}, {r3}], 0x4, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)={0x3}, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, &(0x7f0000000640)="e9e5ebf27b9ef939385934942a92a7b3f96fd71d5dfb371fa36207a3c0a36530562baaa40c00a71b5cb3db85b0006be04cd4477e6db5b9aee260eec327813b40740fa0fb217fefffdb23ef5c46d1eb8b55d2f1e9970276d6a8c76b56dfed12cefe5ab891cf25ee9d2191e95aef4ccf4563a2878e1cb96f9b1be53ac031b9c25eaa5b503bed67b4af22e76b6c804a1d3ed7ce3d6b45d17835e30c6590fa22fc1bd13e37eaaedf0f91e5bb30c4d03196f53c60bcc9b2174c4b71bb448c80fb2ae5a9ada521df0aff4d628f35ff0636a951ba5a943c103b9a4fb960e2a881b4cbb31de4d791ab9c65f151981abe4171ff3ee63993a0862a7ce43c882b6c8c822e0fb4ee0130f7861b795eb2aeb11987991ea11bbe1532aa26a5e05867ac954bfd8fd3345d71357719fabc06728e77d8162add4e7ab9bb1f95d19277de82b699904527c8fce7206dee18752816f1b4dd9140fdf7fbb43fe2f2869679a6734b7bbde08412dce3c727879bc596f89f87806fd219eb6c536ccce4cc273713517c3270bdd4bda67aaddffc26b9c81b6927f2dfa3b16ad4a275d8690c78c21963486f6abe46c331ed3648f6e9cd315ceee4688966ea0522b47bd2e2ea8bd2afd79e7f8e27356db61d4aa26ccb88f42e076ae1654d067ef71a33ca5248b5bcec15538b8478fb7cc967ac3b44478b1b985c25d0691789bf84d353cb3e86e3e18291a6b8eac8cd795f290ad47c139d1fddc4a6727ef3fb4e19d2408b6ce41ef6b4a2bb93e3d53bbeb55f18b1d08f030ad0d5baa88298b1702495039e5f7d43e43f0b637993dc17d0fb05bd4982d8cbe1130a7410faa0e577c67e493f47bfd7a979abcec9bb7a26e8ea7752381c2ae0ca0dd006f32eb6505c303adffe462bfecd3ab942ecb0c6fec48f795413e7408003bdc452e713bd921b3b1430678edf86a88b43ea623353b35165f52265d8442f681f603433fac09138acc9f0ac1e9eb038873cdcf73787c1a397f2da696f037b752c9e236dc4f1c9bcfbd2d7ba3e87b0c3b560c12c4010a957b9e581e77a743020296c5f70ca5c4638e80f3924712853f1ac927e21eb3a55c1aa33b3635c234214a653c23cad2629894212415720eecfe2ab5ebfd15727a1a06ff8dc40d9cf7353f6bad965e59d2fd0fbc69ab3008af0e5b3518a865b9f7c8801d032698fb0165ea3817d63b77916ab7082303a2dbf60f64ea08ca220ae8fe6a8bd0465b8a571865a923367e85c96e5fe1c2179defc834877a31b038201eaaecd65b2f8f90232705bb19159168e14787d4a99e9e57ab75e85745ee22c3a868e035c811e7f04079d9a40217ca3314baf06a4d814eb6ebed5db6bdbf2137ed36d1c73f07847e435a9d80fbd4cc950722df703bebe36963b8fc6a9d1932b98af7036a9b2d4e0f750cc2cdd53a0d0f17a7df92fbdebf3f2364a8471dbca2e111f78261e572f0e3f59b0e091fb0788d63f78752605964ee8f5f1eb44d35164e293dfa78db4ad22a8e3fde9153f241e5ea599bba3c32f898e8b606949455ddde11af938a702dffa8ba58841d822f39de55f015c559b71ef739198ef4939672b85f375d57b57ad4dcade3dbaf4120a961bfda9b8e9497149d79c26281626163d231b4c4416cef209e107531d324b9d9b34720f43d00411763ce7727cbe2b24362e5e107e3a941bc1b05bcb68f985588312b24c0c4d9cc9de57ad80486909dcf7c91a352659ddf43fcc39cca6e25e0aa864da03a8fb7237a345b170621bfb6d12c81502a74b16a6ffb69af9531890e451bdb4eb84661041b3669fdc0f163f87f48343e0731c94962f235a56aab9a5d68bbf49cc4116cb76cebf77e1ecbc88338f497ad66a508f749ac95d228f0eb198422e9e8fb27f47f335d26b995eaa418034c8b55f7e3c8a3ea3b9afb4ccc9b90fb92419020871cc74084e7d521abffa0e2df3a609340fb9f895328737ecb285e68e540e368717d2779b1cac899c79c56a3237bc6da295292241bd2b92e0017c0cb46df31612dfc9ce7cf9c6baa5a8b8a73d18bd73df763a93c18c9a8af3f921e29e4cd9cf93ae74c2db22a6a96bf59ca50713f95b0911b2546e50dd08137bd1f1398dae185248d2bbf1c214b16fc1e5e10c9312a8695af46b3ad5b60d22f47412fc2641924d4035fc20b6151f6db1fbbd1ed74cb74706859045ba043a1c3193e2b8403349854b318004eef936c186abb9555e2d6640328f135b036850f0a9085283027771d9290ec60bd65923cb60a2dd31f19ed538645327ea869f9876b14b1272af45af8e3b277e31da033326a893e820d99c3f2160a1dab362fe5de416c783e46c6b1c2f3aa607e08b23737cc004e9c92233b6c33cc4f4207e1a969edb9ee4c8d8d0771065c4b2b0cd1d94db265f59edce662bbe14bfc45a22810793c79b568c9c1a19c97ae72a0753258ad32c614d6791c1ae4bea5bc28db960619e7eff32c104bcb2445283fc2b0b76061f3a920e1554d9f32f203adb9cf81632e3bb5f81157ea256796d6b6aa8214833cc4d18aa405a36bfcce15cf7ad7b827d19f20a7ed0d1235804e3cf63e7f33b4ca3260d8aacd27559a26240704c3eba9f191f90531d3062d561b26932580d73cb6bec171a1a98041fbdf0cf0d7da5cfac3c5c44f39be5dc233c49a5078e8a62afafb5384096b590b8cb23d157a18c30aeeccb7f1ea86aa6de56ecd76f992b43eb196c4956cd5f42d56cbfae40d13eadb3812e58461767b1e5350a2ffac78c177941e05cd2ac7e374eb49aa4686c6082ea5e9536197e07d16f9d8a88c712d7759cc78dd5c94933a64f2983737c5c8f8b113c5913f0a176c749c51d61f6df3a43fcda64e8326a7e715e486d74c4b9579e56089b47477b086bebd3f9efb6d562b2bbda9c629d9ad2f181ccb3012cf642ac3b2ced30b6f61a2aca6d41a3371a5425ed73b6981191c92c2d69b7383eb3c5fc4fc8741847175aebc8a1751e313361ef2a61fe009ce62fd8cb2f551ea3080f1a95bfe0fe13415b2b515ff3ecefc492c53d5e371963cbe79c242ac1d9ebc292c47ee04298f180c9ff1504fca3d6459ac3f1349784d47dd5d0e610e5ff3273027b349522becd5844d11cfe7b85ba162b617914240b8938b63de94a89321a8067248d2a8df2ce82f22dc68adc18d5427093a893f17d56f31b47f3cf3e643b29113459b28e11ba36b44fd589cf8b5307800207d14043dc12d52d8a868a128275fad0e1d87849b10a3af581c40d202591d7eb797d68f53516e234290092be49d9566a458376f2ef39b4ecbbfcb4dd08801bcc80688e3b9848b8c975b4c90331f17ab5c46b73e85a164d7b7180ecb3644a2acc1b8a5b822d9bf14e1be9dc51ba2a4993d3e5c180151a898551399ac0c6c55042e6e3d88a3f6e781bf833bceb996b4610de3068b6e935ef40a108f924c1defddf67a5eecd45c4f623a178456df0150039dc11c4eba104e0ab32997a18583fe6cee620ac3dd9665d638f0cce890260e5d89ed55918a76e15d97933f091c0a4e216d44363cd888312aaf9e95b33ba62721e8073121025c199f99edfa7adfe666dfc4ec5fbe5de19798abc95380f5d91b53483352a875b44c3ba6295b685da0e8c7312c2344bf62f4288aa1c68758c8613c1490fb381733ce851d1b4885ad0214ef231d3583f3c22e003153e6f303a970b2d09d97c7edc0e0f028f9216c0e36b3476902854a552d888abc3dff5b16cbbe881d5b6d1a2fe3607dd2114d893261ddc056e6f475e1ae80c0a52043ac7b609718c6fd4138f815998428939d7f405ed91348394c97a47b3621da9584038d887da4da7dcbd35e5a0afbfc5179677a051042a9bdb1161d2d1ddabdb88b81d21685a7c8ec61fc07e3591aec382f8be4e95252336d6efbce38e0b3a043a0ddb53536961f716dc544e528228aff58d32795425645218f7e78efb927f0a83dfd92001e2a2927184c83e22ea9589381bf22588f32e48a741b3c01181ad05ecc7d00541331a9d9fb502cee85d081386353eb7fd1abc543b8c0a748f84db210f19c483e256a7a5c0e41376f072b58de5c9c338ba9912ff4a1d5990b13b99891aa59835dd3b164f087106b08dce096fd0ff1b4344a761fe3dac07b8e06a31deb3d3226c7d872288e4623798cfd4c70706e24347d2d5f1f5fe0fabd73a230df7523d08e57fa355a0f67d2391952ed39d960ca5820254f5d7035eead1d6eecba8a16850a1eae5d70f5c5b277c5b572ee576487ee372aa416067515f2ef75189e1806d922995a504539f8cd8f2d3cfad42fe5fceba5132d107e5e32118447524a0f4637d477a8e0175170399eb6ea7c419859c381907d0c8c33fae5e2e9b8679a157c11e520b609203a1c0e822d5ebfbe0f67d8875e858085e016c3d86e19356f16ebaefa02a1b9a2f674cb2cb0e8922bbc8bd172bf1dfa46ca0a6c22cef7b2f4ac5f42654eeef1d4829d2789d546c9e2f3f9f7fa7c2504ed883546836f2167826d8458ca15705f171b1bf2043a0313ce5670da443ba70b9f6e1249e5978d2e90676371dda53ffdfcb717cecbae73db2a00d1321731af6337ef59bd0fb1941f1b2924879606a8329aca9a55c20d9b40fe080348f6e7eef534757ba760f8866a9331f3dff8854fe1a1674f6d3b8c73adac3b9747380bbc928991d1ad38b54f0780683363756949edaadc41bc8c1c8033a3b366c04ce4ba429dc8779d56ac81a824dd1a3bda074845e8fe2ff2d94c04a4afc9a1510b3782e9768f35ea3772e0fef35eed1d0dbdf4a4f1f3a56ba900909434c7ea03443c58f6eb2274edbae5e8d93a59aa2de190d937116f169e4e51784046766b81aaf481c37c589dd928a1f02718bf60fa5c1dbddeeed8e86235093fa29ff5b16fd89bb135a2cfebc34afc77c524cfe2b91869962157adbf49a8fcc2e60ced03970d77466ff2ae8ca0d9df681c6cc45a648feaf30453cf0fb4b5ec923b1c2b2ad8bbd07cc826659b05e3c8b0a92c3b3a3a10cf5a07837a98e5245e3506db0166385d15e46f318261fce0ddbd4312d01c15af223106a1f1740ab69ba278d0f1228b93aaa8a75de0caeec9fb093acdca4870deeb323b38538aef531c2f7fff8954f862f4bb5e4c6e1412e25e54a2cca6a2c3fa5587d8236f4cc507646db52ee94bc8c210eb05134025c6fff052da937affce8aed2c70586b5c13a495623a61942d3bbe5e9d657b0c54f987f6c91265b29840b250fda20d98572ff68761be367087f858d19e33bf05acc0c04e4e9ec98ba4ab628a55543c179b0874238ea371a09165683653ecfb6209d208a0afc7925c3f78e5ec792ae28fc6168620a95b0056bc54e0b4ffd09c99058313d74424989083e4ee2c2f83d342679f4ff6ec7f0f9d157e65b7caf97595c48e8cb18cd56e3e8333dd8d13d12659512dab54b8e753e40223474e9568f5fbbe83bc5aaacd91f578b8923bed4371f8468cfc553c0732d1034f58bde076b0b40afbe7d976c2a1f3694d7db2e66cb59bcb4faf55fbf0de53fddacfb6f8116a051c858a567bfe2d624cc1320c0e95e164fcb1e37034069e0a4b3cb3352fba48cff8b2c0264d97077bcff742f6a486639aff3e459c9b78ec07139378354a643133729e92e786650d139d95a64d868027646155c150d27356a39ee8e7cb713086b10545fe6d0cc8fd2bce8306417d754c01f0583380e0e64dfdddda6d77bfe5738058eeb88647c20a615118729e83eea974fb3a9c4389e41a4a005c80af61d253bf05a28bc7bc014ee2563dd7fbe912a724df7d7b5f9789c271d580bb23ed067fb30a3b0d13611", 0x1000, 0x20048040, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) recvmsg(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x142) [ 1309.932924][ T551] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1309.954028][ T551] CR3 = 0x0000000000000000 [ 1309.959492][ T551] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1309.978738][ T551] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 10:34:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1310.007723][ T551] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1310.052090][ T551] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1310.080898][ T551] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 10:34:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='us|jquoua=,{z,\x00']) [ 1310.096366][ T551] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1310.107567][ T551] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1310.123126][ T551] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1310.134426][ T551] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1310.147981][ T551] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1310.157018][ T551] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1310.169368][ T551] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1310.178739][ T551] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1310.187697][ T551] IDTR: limit=0x00000000, base=0x0000000000000000 10:34:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)='IPVS\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) r2 = dup2(r1, r0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) fallocate(r0, 0x3, 0x0, 0xc00000) [ 1310.206494][ T551] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1310.226602][ T551] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1310.241541][ T551] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1310.275923][ T551] Interruptibility = 00000000 ActivityState = 00000000 [ 1310.285041][ T551] *** Host State *** [ 1310.290298][ T551] RIP = 0xffffffff811b4e70 RSP = 0xffff88805d3578e0 [ 1310.300127][ T551] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1310.321568][ T551] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1310.360118][ T551] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1310.370305][ T551] CR0=0000000080050033 CR3=00000000a682f000 CR4=00000000001426e0 [ 1310.378448][ T551] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1310.385983][ T551] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1310.393330][ T551] *** Control State *** [ 1310.397635][ T551] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1310.405413][ T551] EntryControls=0000d1ff ExitControls=002fefff [ 1310.411819][ T551] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1310.419658][ T551] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1310.427172][ T551] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1310.434852][ T551] reason=80000021 qualification=0000000000000000 [ 1310.442336][ T551] IDTVectoring: info=00000000 errcode=00000000 [ 1310.448723][ T551] TSC Offset = 0xfffffd40148a1d08 [ 1310.453957][ T551] EPT pointer = 0x00000000753bd01e 10:34:53 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:53 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x3) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x5, 0x2140) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.nlink\x00', 0x0, 0xfffffe15, 0x0) 10:34:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) dup2(r2, r1) 10:34:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10201, 0x1, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x5, 0x51e, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)=0x10) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000180)={r3, 0xe1, "933e400112ad626be092e07ede0e883c7aaf1747cde56fedf0dd7b5b014fac126433377e55d77f9a71b359237687548b19432378aaf9e171708e5d22be1aff0d34316e0f8b0fae50ef593666b86fb50a9be1542de353d1a77e304c98394ddb220aff382c40fb7401be925e9a386e0137faf361a6b40e993ff2f60c7020b844fb2e6aa48c85e632c72161a70a55d394243bc02c9cc80838fee237e8b3804f5ec05df7da57c16baa09a91f7a34da919a9ae9db64e84d7a849ff280a23a75b4c95882cbd5180dd3f6f3683a5d9c736696d10348126ae47ea5e15c59f9f766b3af8076"}, &(0x7f0000000280)=0xe9) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x616e, 0x100}, 0x8) ioctl$RTC_WIE_ON(r4, 0x700f) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:34:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000000c0)={0x6, 0x6, 0x7}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:34:53 executing program 5: alarm(0x1fffffffffffffe) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) pidfd_send_signal(r0, 0x15, &(0x7f0000000100)={0x11, 0x40, 0x80000000}, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x1, 0x0, 0x1, 0x7ff, 0x59, "2436fcef562e6d6039df9fec789c61a6b3db1d057ce643bd8d484a106e81e1b1729e601eabb7d244edf9645c9806ba67e617c681339571e0aff823d78d45ba", 0x21}, 0x60) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x3) alarm(0x20080002) timerfd_gettime(r0, &(0x7f00000000c0)) 10:34:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000010000000003, 0x40) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000022c0)=0x1e) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10000, 0x0) 10:34:53 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1310.889068][ T1528] *** Guest State *** [ 1310.895653][ T1528] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1310.936979][ T1528] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1310.990953][ T1528] CR3 = 0x0000000000000000 [ 1311.002176][ T1528] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 10:34:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:53 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="5500000018007fafb72d1cb2a4a280930206000200a84309c026234d2500080008000c00080000006300a3c728f1c46b7b31afdc13b8d54400009b84136ef55afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x480080) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) [ 1311.033913][ T1528] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1311.061566][ T1528] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 10:34:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000fe5fee)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000340)=""/150) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000300)={0x0, {0x5, 0xa6}}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000140)=0x4) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x80, 0x0) getsockopt$llc_int(r1, 0x10c, 0xf, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x80, 0xffffffff, 0x5677, 0x7, 0xfff}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, 0x4) [ 1311.099873][ T1528] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1311.113556][ T1528] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1311.122196][ T1528] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1311.132229][ T1528] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1311.142033][ T1528] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1311.183165][ T1528] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1311.218158][ T1528] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1311.241834][ T1528] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1311.255199][ T1528] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1311.264838][ T1528] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1311.274048][ T1528] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1311.283461][ T1528] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1311.299986][ T1528] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1311.307422][ T1528] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1311.316152][ T1528] Interruptibility = 00000000 ActivityState = 00000000 [ 1311.323595][ T1528] *** Host State *** [ 1311.327543][ T1528] RIP = 0xffffffff811b4e70 RSP = 0xffff888038e178e0 [ 1311.334371][ T1528] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1311.341557][ T1528] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1311.350550][ T1528] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1311.357218][ T1528] CR0=0000000080050033 CR3=00000000a44fa000 CR4=00000000001426e0 [ 1311.365117][ T1528] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1311.372700][ T1528] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1311.379729][ T1528] *** Control State *** [ 1311.383941][ T1528] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1311.391425][ T1528] EntryControls=0000d1ff ExitControls=002fefff [ 1311.397636][ T1528] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1311.405431][ T1528] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1311.412908][ T1528] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1311.421079][ T1528] reason=80000021 qualification=0000000000000000 [ 1311.428352][ T1528] IDTVectoring: info=00000000 errcode=00000000 [ 1311.434513][ T1528] TSC Offset = 0xfffffd3f85abbebf [ 1311.439635][ T1528] EPT pointer = 0x00000000a043701e 10:34:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:54 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@md5={0x1, "c5a1758f326692baf99276f5ab5b49f7"}, 0x11, 0x3) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 10:34:54 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x214}}, 0xffffffffffffff6e, &(0x7f0000000040)=[{&(0x7f00000001c0)="f4191d0380ff7709109a755ac072c5b4e48f6feb7dd2e58168a4eff44c5e6c2d3686970535e0fe1a114d684f93a790f015517c3ec58232d19c25fef348216b36888d2cd7085d7dafcb4748d780527d5989d6867c9326bc29af6964bb337f5ed436ae05b85c35cb4fc535fe93343658860c4c055e7f72d307db2fb7b8b425771fbffab4b753beb4e8b81a95635c21aa392d32e20ac91af204cd74242e79efd2a51266adde834969d8c5d8ab55819b4158776605c500d54080a4a22157bf4d9d0876c0815ba669b827", 0xc8}], 0x1, &(0x7f0000000080)=[{0x315, 0x84, 0x7}], 0x10}, 0x0) 10:34:54 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xf9', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400802, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x7}}, 0x7f, 0x1829, 0x5, 0x80000000, 0x4}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={r4, 0xfff}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:34:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000280)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x5, 0x1f7be51b, 0x401, 0x7, 0x7f, 0x7}, 0x7ff}, 0xa) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0xfffffffffffffffe, 0x1000}) 10:34:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0xfffffffffffffffa) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:34:54 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x45, 0xa8a00) mremap(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000090a000/0x2000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x0, 0x10000}) read(r0, &(0x7f0000000200)=""/100, 0xfb) 10:34:54 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:54 executing program 5: r0 = socket(0x40000000015, 0x805, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000240)={r2, 0x8, &(0x7f0000000100)=[0x3, 0x8, 0x0, 0xffff, 0x6, 0x0, 0x6, 0xfffffffffffffc00], &(0x7f0000000180)=[0x9, 0x3, 0x3, 0x400000000000000, 0x4], 0x0, 0x5, 0x1, &(0x7f00000001c0)=[0x401, 0x4, 0x1, 0x1, 0x2b], &(0x7f0000000200)=[0x200, 0x9, 0x7d4, 0x7, 0x3, 0x6, 0x3, 0x4, 0x9c73]}) 10:34:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0xffffffff) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000100)) shutdown(r0, 0x400000000000001) 10:34:55 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:34:55 executing program 5: shmctl$SHM_INFO(0x0, 0xe, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x3ff, 0x0, 0x5, 0x1a, 0x19, "9ae89c47661fea277b3af43d86a8692cc6c6adb229db958b49caba3d88e294e75d1787c46315176129e5793bfdecb5702a879591e2d2b6da46b80cb2bc14d938", "2acaba366a4fd29ad82a7db97f63385972b9cd38b534c7eeb27b3c536a6b1754c2e431ff7143b09083ef99f842a23ac5c25c98475ae9619cba05a6ff5fd914a5", "a0ab3034472253e6ff32d4712aa515eb635e8345c9736aaa28b372742570f2b2", [0x100000001, 0x7]}) 10:34:55 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x8c', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:55 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x2000) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="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"]}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 10:34:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:34:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) close(r2) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000140)={0x71, 0x16df}) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x80000400) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000180)={0x7, 0x0, 0x1, 0x6d7}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000001c0)={0x7, r4, 0x3, 0xa7}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) readv(r2, &(0x7f00000002c0), 0x17c) 10:34:55 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xf4', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x2, 0x0, 0x8}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) [ 1312.880031][ T2934] *** Guest State *** [ 1312.885658][ T2934] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1312.898256][ T2934] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1312.978405][ T2934] CR3 = 0x0000000000000000 [ 1312.983455][ T2934] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1313.016000][ T2934] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1313.042596][ T2934] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1313.055618][ T2934] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1313.070673][ T2934] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1313.081204][ T2934] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:34:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:55 executing program 0: clone(0x2302001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1000000018) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x7, 0x0, 0xca}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f0000000040)="e2f549f4a6d4d133bf5981f23859e0f0fffd4f8098b8e623b74c61acd2f5b2047ea315236ed4a185e678ce61488eb79de116f15e043517b2bfb7dd3782e9e670480f02473d6c23761ed9cbc738440775aa3710") [ 1313.090252][ T2934] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1313.099653][ T2934] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1313.140610][ T2934] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:34:55 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1e9ca09110168c"], 0x1}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @rose}, [@rose, @null, @bcast, @remote, @remote, @remote, @default]}, &(0x7f0000000240)=0x48) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000280)=0x100, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x4009}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000003c0)=0x1) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="006386dd07767221ed7f74e2a554bbd209ffa1ac58076cef5c59b56f21197a9233db8d7833897d84b9aee96ce1b98f884352c8627474150eb069cc5ae0c6925ac39c1aeca7f33516e630"], 0xfdef) [ 1313.181451][ T2934] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1313.198930][ T2934] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1313.218818][ T2934] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1313.248098][ T2934] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1313.296578][ T2934] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1313.338012][ T2934] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1313.347100][ T2934] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1313.355075][ T2934] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1313.363635][ T2934] Interruptibility = 00000000 ActivityState = 00000000 [ 1313.371085][ T2934] *** Host State *** [ 1313.375911][ T2934] RIP = 0xffffffff811b4e70 RSP = 0xffff888093c4f8e0 [ 1313.384380][ T2934] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1313.392006][ T2934] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1313.400941][ T2934] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1313.408024][ T2934] CR0=0000000080050033 CR3=00000000a13d8000 CR4=00000000001426e0 [ 1313.416261][ T2934] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1313.424263][ T2934] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1313.431494][ T2934] *** Control State *** [ 1313.436043][ T2934] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1313.444071][ T2934] EntryControls=0000d1ff ExitControls=002fefff [ 1313.455030][ T2934] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1313.472235][ T2934] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1313.483583][ T2934] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1313.491692][ T2934] reason=80000021 qualification=0000000000000000 [ 1313.502198][ T2934] IDTVectoring: info=00000000 errcode=00000000 [ 1313.509798][ T2934] TSC Offset = 0xfffffd3e76621ddf [ 1313.515026][ T2934] EPT pointer = 0x0000000097d9d01e 10:34:56 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) prctl$PR_SET_FPEXC(0xc, 0x50000) write$P9_RSTAT(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='H'], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x34000) 10:34:56 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x6, 0x8f}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={r1, 0x81}, &(0x7f0000000200)=0x8) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 10:34:56 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xf5', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_NCCI_OPENCOUNT(r3, 0x80044326, &(0x7f00000000c0)=0x5) [ 1313.727425][ T3367] *** Guest State *** [ 1313.731800][ T3367] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1313.742569][ T3367] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1313.760743][ T3367] CR3 = 0x0000000000000000 [ 1313.765208][ T3367] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 10:34:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0), 0x8) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x7, 0x1, 0x2, 0x8, 0x58}, 0xc) [ 1313.795225][ T3367] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1313.810258][ T3367] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1313.817661][ T3367] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1313.840831][ T3367] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 10:34:56 executing program 0: syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x3, 0x7ffffffffffffffe) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000780)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r1, 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000003c0)=0x3) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000480)='!seli\xf2Mnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/60) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000001c0)={0x2, r0}) mq_timedreceive(r0, &(0x7f0000000140)=""/24, 0x18, 0x0, 0x0) unshare(0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f00000000c0)) close(r2) syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) [ 1313.878136][ T3367] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:34:56 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xf6', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1313.918739][ T3367] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1313.944622][ T3367] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1313.999692][ T3367] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1314.021430][ T3367] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:34:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1314.042050][ T3367] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:34:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/mls\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001580)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002940)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000002a40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000002d80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000002dc0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002f80)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e00)={0x11c, r1, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x100, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9e}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x44fc}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1314.088177][ T3367] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1314.121115][ T3367] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:34:56 executing program 0: syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x3, 0x7ffffffffffffffe) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000780)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r1, 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000003c0)=0x3) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000480)='!seli\xf2Mnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/60) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000001c0)={0x2, r0}) mq_timedreceive(r0, &(0x7f0000000140)=""/24, 0x18, 0x0, 0x0) unshare(0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f00000000c0)) close(r2) syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) [ 1314.156731][ T3367] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1314.177591][ T3367] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1314.189278][ T3367] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1314.200052][ T3367] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1314.209585][ T3367] Interruptibility = 00000000 ActivityState = 00000000 [ 1314.219455][ T3367] *** Host State *** [ 1314.224000][ T3367] RIP = 0xffffffff811b4e70 RSP = 0xffff8880596f78e0 [ 1314.239095][ T3367] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 10:34:56 executing program 5: syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x3, 0x7ffffffffffffffe) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000780)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r1, 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000003c0)=0x3) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000480)='!seli\xf2Mnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/60) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000001c0)={0x2, r0}) mq_timedreceive(r0, &(0x7f0000000140)=""/24, 0x18, 0x0, 0x0) unshare(0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f00000000c0)) close(r2) syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) [ 1314.257510][ T3367] FSBase=00007f8855b62700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 1314.275032][ T3367] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1314.317571][ T3367] CR0=0000000080050033 CR3=00000000a3c10000 CR4=00000000001426f0 [ 1314.346145][ T3367] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1314.369385][ T3367] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1314.389230][ T3367] *** Control State *** [ 1314.405030][ T3367] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1314.428957][ T3367] EntryControls=0000d1ff ExitControls=002fefff [ 1314.447070][ T3367] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1314.467964][ T3367] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1314.509567][ T3367] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1314.516890][ T3367] reason=80000021 qualification=0000000000000000 [ 1314.528928][ T3367] IDTVectoring: info=00000000 errcode=00000000 [ 1314.535095][ T3367] TSC Offset = 0xfffffd3e01ed1043 [ 1314.541189][ T3367] EPT pointer = 0x0000000092cde01e 10:34:57 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:57 executing program 0: syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x3, 0x7ffffffffffffffe) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000780)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r1, 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000003c0)=0x3) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000480)='!seli\xf2Mnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/60) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000001c0)={0x2, r0}) mq_timedreceive(r0, &(0x7f0000000140)=""/24, 0x18, 0x0, 0x0) unshare(0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f00000000c0)) close(r2) syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 10:34:57 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xfb', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:57 executing program 5: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) connect$bt_rfcomm(r0, &(0x7f00000024c0)={0x1f, {0x4, 0x5, 0xd5, 0x400, 0xd8, 0xac}, 0x7fff}, 0xa) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/136, &(0x7f0000000180)=0x88) socket(0x1a, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x5, &(0x7f0000002440)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="4619d7d016ee44e114c17267d9145cf1262624471b896877fbb25d5ccffc54066dea92c21a7dbb641cd30672d94012938d0c63c467e5b2ea2f1fcfd4d7c3f5783f4fa5a8729615c41ab0958538dfd1b12869ef04fca2347a9f04ab255a74c639de19d4cb7effbcdb94bffd99c3d03cbaf2b1d421f9f5992f75023a781ad03bb8e3ecbea7e4aee1273d62648a7d4bd3573605434b0313462d6f91e3b02e546f8e36eca2fff09ee87211f147dd005999429ac22d340577d5bcca9efe5edcec2837b365ff0e7a4601ef237dd24715bf2753e97e3bfd2081348a3e6a23", 0xdb, 0x6}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="b5a69f546f670549e7997a1cb470ec82e7377e02334e9c79365a980db03487b2801e60e22f5876de712468a724ad74fb203598caae1fb64f0669ebcc38febf94161a2a604f98b7ae08203cfc8033baf460c6fb779d2989517e49b931e1dde2532f8da68995a2dd59e3c84c810ee167ffe9c2ae68d849e634cf49aa7ca24015d71a9b74b3c9c678cddbcf712fb848dfb35bb11cc16ff72f10b3b0df06854f33a1804ef77fd434539125b390673c3180acca", 0xb1, 0xa4}, {&(0x7f0000000100)="bf2a7fea43007598970a11afb4a56ce1454d513cd1029ae1ff361084180ee95e33fbc0", 0x23, 0x7}], 0x20000, &(0x7f0000000140)='/GPL\x00') 10:34:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x103000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:34:57 executing program 0: r0 = syz_open_dev$admmidi(0x0, 0xffffffffffffffff, 0x12000) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) creat(0x0, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000140)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0) getpeername$netrom(r0, &(0x7f0000000f40)={{}, [@null, @null, @netrom, @netrom, @remote, @netrom, @bcast, @netrom]}, &(0x7f0000001100)=0x48) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, 0x0) statx(r0, 0x0, 0x2c00, 0x200, &(0x7f0000001240)) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000900)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7, 0x60}}], 0x48, 0x7}, 0x0) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000ec0)) write$nbd(r0, &(0x7f0000000fc0)={0x67446698, 0x0, 0x3, 0x0, 0x4}, 0x10) 10:34:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) [ 1314.870977][ T4064] rdma_op 00000000a71890f9 conn xmit_rdma (null) 10:34:57 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x100000000001, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) fcntl$getown(r0, 0x9) [ 1315.010677][ T4301] *** Guest State *** [ 1315.015179][ T4301] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1315.026363][ T4301] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1315.045346][ T4301] CR3 = 0x0000000000000000 [ 1315.050515][ T4301] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 10:34:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='aew default user:nodev '], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) 10:34:57 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xfe', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:57 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x109000, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="7699b37f748b8c499813a3bb6cb80f8ada6adada7969f5b21d969aa35db11cde9ded563af4449b3057988ca988b285cc73845bdc85ed0a55d3e402ced8346dc4d8683febc13c9b4d55c226a794e4de232daeb05b26fd56de9bff4df25d7fda575a0a2a3e3d1a2ab3b0cd1124e4ecf04b469fc2e5c4108ccbd42a43a13073d43111e1d3c636a97a84d009d91a1add96d5dc0974425b999358b7b404f15bc004930bf92a565a44821d2f1089fcef9ea365b3854faac9ef6bd8fce4400b0c19601ba07281a42a6314ac01b8ce01444a5963c87b799c8ea402ee2f24e74ef683df337872b7bbc11ab4a4a6e7c5bec34094518d171b990793f36f8952dc724393a23715e5b47d0f0095ae9ad52c235ad359f5603d9f7fbda7c4b0a43d61a3e53218d5438fe6870f412382b6232a1634b0dd8c72ed9f5ad0181ad5b8d5bf4e09565fd9eb671350d272b2ce449c7b4b5220b35a7c0bd67a58e5a9f00888e23c3926d99cad6049ffb44f609dceaec1e0c1df11464d6bc9672b67e3f8f4f8834b7bfea8b299f6fda16912b6139b12d09c4b6c1d1896ab93e2121d3c0690ffbbe46a41f86ca16def0322b5cd3a40f75b3979a7feb38376ec7e29496e3f1fc721d3f6030b610058898fc0aad029ff12b48b15de008358420be69e7ec38d8d0d0c1e35ca84558ce630aba3fbbd662878d8fa88a46803d00203e719744baf61c6fe8e86a7eefaa977828360e3b8509db68f312d94d7c51354b5db46bc74a86772a4fb7f6b3dca17360eb56fd61b7cd4ccfa2f158703c1b6afcc3265b0458bc97a5c8ee2a3cafcfcf07505d8ea2a5f5da1ffdfa1c1f239f673e670482a6b85d2a6328f2b4f732af42f8a4a06e52e4204ab434ff549b1b406873ac268aa017e3469511f92debdaf33a3a5bdabc6983b9181a10bfe01cb1c37f4d2838e73688af89de0a9d1b831f581d597541ead6a91c8b7a650c94964251b52c915007893683a8ee9b8b854ff59beadb52a9953fd1f0c30eb06bfe64f5101c33d4da04d76a55443b3e5ffe91011642b08418f18039496672727fbcb9f615f00298b453653741a2d6934ba8d3874fcfb585d2c9c927abfebc3ee2d2a0ca280f8224c72cbbcb434ddc19b4a8daf773794f9df3f5b6976603674e845d9cf064591d29c5a71c54ba0bb1af1b3f5bb7c336d6b8d4c1a54eb738e3820ce77f45814188a7c98cb5ab4b13a13437244f9071fabf0f671ded9055bffca8d628545d36793af48f2cb95d380654f29810d1ef443ed0f4a048b2cb8a25f7f86cf706a2f9dd3fd75d6c69c501051d0aa615edab6834a45a4f64142ac2674e833c98513ad005750ef39c89e731aabf4e076a3e5128564517d6561166216fb6eab98ca9a4cc58715e0927c4cf1178f7c67046899e847ff64a760576011b825e0ff511c02a6bdf70e1a5ecb1f9393514b9268f43841ce4e044c401371936c7666e2dcb941bbebe97a81a69adbb141e1beb9f2388c0cfa0988e2f743f4bcc6e969d77a4a1108ba437a975e03e8f6836d54a9b3ca2e5bec753d759717d7edc379b6a3951bf88c7e3655850198cab6b2721dbec7bc729ecf969bea60501cf76a406b40d849090c5cd58737b3e586407800fb49f8a04f5c0975491e1e0d47699f7a9465b185ced4a40f1f75fb4917f632ffed6229996c672012d8d5600025faf21030716c5497d12a6abb8dcf61c71453590414833caf07dd8ba256d5680aa21e5efbe9292857ec99c027ba2767e04acb671a01895679ceef6a45c1a72ab7de72b99b7a68d084d0dd1a82f31bc8e259ae98ceb2b88212847c544b2dc8c95de84b3aa115dbcd195393986404c4d47bab21562f1f36db13ff69a01413d5a3b9e8e12de77ea0418a8dcf375628306de949007ace69c18a5c7533c2840ab062977e5daa945075522b8e5c160182acea8cf21b2cad7130ce90f588d7938121931389a175604ae9d45ef296f1e30eb51d0550d52bdbb6ce88c141a055b4c6931c5ce777ece94123c8a694eddc12a38fe359e825ba6b485a6d0102420f9d6c8f50358b846a20bcda1df1817faa8f71a1bab5d6340654a2b6665bb67d1a612c6ca86722131de66799c810179a8cd394226a3b8a076d887cf6471c9ad9a90a2b46541f83aa4aedea71f48616a1ece01b87437bc82f4264fdd84386081b22be79345d7508ce97cc9837cb3013dbcc4385f5663c78933f1a18b8c1df9fb8e515ca66db3691a79001c7e9d127d8867e81a6902295d1775d95ece73929d28c34dfb77f917fa16fe07a1f86c330196d42dde3d6cff62bd0a93cfd44ae93fadc606242951d7ef968810f892a71897bde02583a1bfd44556b602e528275e058fc1ed4da52aad9cc393f035501df907b841bed13ca7b13df54cb969c0b5224930a2a52a9bb67d11c61db5d016453fa803897959e045906e7fda129e8794cbbc0181b95f0c2beb21f16a0462decbf72b78b04521512f2e9df220f67df07e8251a8de3aaf1a269d4da049cd23902c51cc1aaf81e06755e4a518297ad1783de5ba6297ac2401cac3e6ed960b4d1517015b173d7b08edbfc72c862d2ab4fd5e6d20d9e7e2318ed00095ad68e2844400fad7960df9f3d32472501f9c2928a1d629f1642cc4029d14800088b13d8fdbc6b0a06ec0f27fa7f61ea2d3a3d9232a29947ac6db96fa5ac33b7416671be18ca5e0226934165261611c9a04f97a046643d71f31cf2152eded5e5268253dfce940d02b090534704483cf4d94707a8c4e05e55c43d08269d7561fa7089e91c0cee37e080a90badfe944859ec490f4c8ecff4488257cc18b63217e3a85c5dec12bcd73e52b2fb2a4a0dc80e874bf25715b5ad00130d40cbe5326eda60cc0c508aa7ad7d12f69f873ad5fb51f9956fe42ca704c75fd04765ae56aae9cfbba3548734745fdb51b8eb64fbd18372742e026a37ac2792cbd4041c36421e86e548394518e5fe6d9a72124583288a10c85e0b1f8c5caa87236b0be69151cad04ce7ac037ea479410323e7c76d4d11304bef10b14143742629ab885c58f56ab8c507d6cafdd3ac2379b13e650ce9ab4b80818976d9aafeba0ca80ccb014ca27031505f89178c15f8729d99a65073a75d84173fc608bddf8fe5700ac695c7dd63bac1272f881077c2061aebfc6d6c8dca19c6e660ba8132bde10b4d431c1341c26e5899770059702784b00634b3766c4f088bb06f889d303b7187d67df5e69447c64e4858f54629842ffa549561454e2e2c62a85bdccb41883d494942a2a617b2d5f271487fa18400f765e569085c91e670e58bcdd3f03577f7e6a8ae22aef19a12bb5bef2aaa64b3961eea160f202241954c28402d3dff8b514564b5ae58038fad9a980de5a81e548042718044dca34d68f9fe2fe1da4aa2bbc5640474abbbeb9000c1612157f4e7fdd9396358cabdcd8a7157abb1cfe04ba19cca2c65154482d9a9c5c98687235f9aace63e12274d9c32c3db7cecb6a258c4b2c76aee517c32705c15fb3113c4cc9e0d6a8a2880f518a14df3cac8d0bde57c76c0983024adf33cd7dfb1bfbda8c5fe46326454e5b390590e9efeb5714c8c1a9adee40a999defa2e75a457c8b4ec18eb88c1eb9e9c0dc4f6f1328b64a0b668d5598caf75bb5d718486e9693bc4cea94ea48de8afc9361c22281403dc823dccc101c1780ec04ee445cf747a51243e8732231b57630363d8d6ad0119d2abd71f361031c85e980ee4de5d7cfeeab50f62bd87f39b1005298ff92c73f11ac08ee9be5f0c72a2dab5ff0bc8033a441b59c5aa72a5fd6f71d2f19936af80d48eac0bc01f570a67750a316c4b66f90af3d7bbdb4e24e55f0260ce0e5c85126300e46caa592788fdcf89984dec65a2165f7a67bac7934b7ff81c721800d573ea539ed77276ac37f9339bb1f7717f09d75f33796badbcc82dc6f2e74c64eb85bbe78b46e0a1133b0f756e5e0b898b68aca6abe2ab3402f58b1f62106e1ae63025c1a3331987f22e6964c7a9d769e9b392e0d1281795105368426cf9effa92918c5792df5e12e64f1cbbe01b95b9a8199aeefa88cd244d08eed3c0d7af5cc80e4d54db56f499f279c0b78fc8cd5c3c558c6afec6c48f76461d318ad51f541b39b30338d3f751a22e0c8b3278b70db47e096adff54814ef924bc141c447b895324d9b8ad8303554d0ec89130eb758295a372fb81dea6180591c9b9e5f03e05e4ac8f3b8ec0216a91a6587fd3a779f2adfa44858e883b26d654332a6093820ea8346c08b36be0b0eddf73ea11c7e3e12fae338d37c7b18ac28d3d60c42c7622c8c07ec095d360e640e2c65e49d73a90d5407f1d12615449245bfe9389a8bc35856d2c232e70f11e2e80d4e3667d1cdde076c728b9409c22a8a2dbafeec79040676bf71389884211812ae37863a77db069e6c08b78732745824aa55b181058594ff3e53b09426bb74f692bdcdef5d53a480b3297dc6dfc6858105ce7c86c9ffe7a10632c3c420512eec017ab30f5bf8cd470e81ac7788853a51e732a754a0cb0180f04727a0f7199cfe629ab59793cc32e6667", 0xc8e) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0x0, 0x100000000000001}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001000)={0x0, r2, 0x80000000, 0x1f, 0x8, 0xff}) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000001040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = open$dir(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000001c0)={0xfffffffffffffeff, 0x7000000000000, 0x0, 0x9, 0xf3fa, 0x100}) r7 = dup3(0xffffffffffffffff, r1, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000f40)={0xac, 0x1a, 0x0, 0x70bd26, 0x25dfdbff, {0x9}, [@generic="d57a0732f6fa6f7736942c5340154ff77654488092a17a0444b8565ffd78db39975bf00ff54f08018496ab950bc27d8bd8ceb66981a034acacd5537fc70f3e551caada3e28f937b29eb932185ba2fbc01105703fb5ebecff96adde7255fdb26b2460c1de04ce73b1a4200498b0f0accae61f0cad310261bc7abd0531c6a8b93ab777a5718648ec2a61d03a90e1a464efbac03f4d88"]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syncfs(r7) msgget(0x1, 0x0) [ 1315.082556][ T4301] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1315.114458][ T4301] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1315.158205][ T4301] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1315.185345][ T4301] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1315.217790][ T4367] encrypted_key: keyword 'aew' not recognized [ 1315.225903][ T4301] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1315.238403][ T4301] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1315.263138][ T4301] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1315.284530][ T4301] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1315.296684][ T4301] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1315.313329][ T4301] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1315.324124][ T4301] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1315.356007][ T4301] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1315.374653][ T4301] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1315.386287][ T4301] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1315.402760][ T4301] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1315.411716][ T4301] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1315.425132][ T4301] Interruptibility = 00000000 ActivityState = 00000000 [ 1315.434382][ T4301] *** Host State *** [ 1315.438932][ T4301] RIP = 0xffffffff811b4e70 RSP = 0xffff888056f2f8e0 [ 1315.446948][ T4301] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1315.460925][ T4301] FSBase=00007f8855b62700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 1315.476693][ T4301] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1315.494466][ T4301] CR0=0000000080050033 CR3=0000000079e99000 CR4=00000000001426f0 [ 1315.510314][ T4301] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 1315.520948][ T4301] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1315.529067][ T4301] *** Control State *** [ 1315.533327][ T4301] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1315.541032][ T4301] EntryControls=0000d1ff ExitControls=002fefff [ 1315.547319][ T4301] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1315.555143][ T4301] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1315.562599][ T4301] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1315.570115][ T4301] reason=80000021 qualification=0000000000000000 [ 1315.577217][ T4301] IDTVectoring: info=00000000 errcode=00000000 [ 1315.584455][ T4301] TSC Offset = 0xfffffd3d50830c24 [ 1315.589654][ T4301] EPT pointer = 0x0000000096cbf01e 10:34:58 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) r1 = accept(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000100)=0x80) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000240)=0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chdir(&(0x7f0000000300)='./file0\x00') pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f0000000200)='./file0\x00') poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f0000000180)='./file0\x00') 10:34:58 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:58 executing program 5: r0 = socket(0x10, 0x802, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xf, &(0x7f0000000000)=""/42, &(0x7f0000000040)=0x2a) 10:34:58 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x802, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:34:58 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x9b2, 0x101) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x5d, 0x4) connect(r0, &(0x7f0000000040)=@rc, 0x80) [ 1315.868902][ T4773] *** Guest State *** 10:34:58 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0xc005, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 1315.891414][ T4773] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1315.912967][ T4773] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1315.948121][ T4773] CR3 = 0x0000000000000000 [ 1315.952820][ T4773] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1315.974141][ T4773] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1315.984048][ T4773] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1316.001970][ T4773] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1316.013104][ T4773] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1316.026595][ T4773] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1316.042924][ T4773] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1316.052464][ T4773] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1316.067574][ T4773] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1316.084583][ T4773] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1316.093921][ T4773] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1316.109419][ T4773] GDTR: limit=0x00000000, base=0x0000000000000000 10:34:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:58 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1000, 0x5}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x5}, &(0x7f0000000200)=0x8) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") keyctl$get_persistent(0x16, 0x0, r0) [ 1316.150033][ T4773] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1316.170167][ T4773] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1316.184320][ T4773] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:34:58 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:58 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1316.223162][ T4773] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1316.244019][ T4773] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1316.273369][ T4773] Interruptibility = 00000000 ActivityState = 00000000 [ 1316.321014][ T4773] *** Host State *** [ 1316.334197][ T4773] RIP = 0xffffffff811b4e70 RSP = 0xffff888059d8f8e0 [ 1316.365664][ T4773] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1316.374071][ T4773] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1316.382873][ T4773] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1316.389801][ T4773] CR0=0000000080050033 CR3=00000000945df000 CR4=00000000001426e0 [ 1316.400092][ T4773] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1316.408002][ T4773] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1316.414977][ T4773] *** Control State *** [ 1316.419542][ T4773] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1316.427111][ T4773] EntryControls=0000d1ff ExitControls=002fefff [ 1316.433584][ T4773] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1316.441544][ T4773] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1316.449906][ T4773] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1316.457411][ T4773] reason=80000021 qualification=0000000000000000 [ 1316.464855][ T4773] IDTVectoring: info=00000000 errcode=00000000 [ 1316.482568][ T4773] TSC Offset = 0xfffffd3cdb514f53 [ 1316.489645][ T4773] EPT pointer = 0x0000000092a8d01e 10:34:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(0xffffffffffffffff, 0x80044325, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f0000000300)={0xfffffffffffffffe}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xffffffffffffffff) sendfile(r4, r3, &(0x7f0000000080), 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x1) 10:34:59 executing program 5: syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x6, 0xd, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) getpeername$inet(r1, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) 10:34:59 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xff', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:34:59 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x1) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x10000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) [ 1316.828953][ T5347] *** Guest State *** [ 1316.833860][ T5347] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1316.852092][ T5347] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1316.866104][ T5347] CR3 = 0x0000000000000000 10:34:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xfffffcdb) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)={@multicast2, @local, 0x1, 0x1, [@rand_addr]}, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @local}, 0x10) 10:34:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}, @IFLA_ADDRESS={0xc, 0x1, @remote}]}, 0x54}}, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.origin\x00', &(0x7f0000000140)=""/178, 0xb2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa00, 0x0) r2 = getpgid(0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7c030000270910002bbd7000fbb9df25090000008680772b0d36c15d2c1f36c30b81f3f00e080081007bfa88c8894b250da61deb56ad361ac8ebf8bc2209244497cff1fe7186b579348c8b005bc2805ce78c9575e4784bf479cc45c0bb9173196529c425b50513fecb4583928a8092ef1519235d8d87087290dc1aa187b888c40cb0063dee952a6f44be16b7bbf060fba7511505000000f169c9697c3de7e23e661fbe51c4a8a3a9002889edfc5afa3b8688e18d82452d76d09b57cbbffe81df86124ff7497a921295d7b9d06f9faeac1cf345", @ANYRES32=r2, @ANYBLOB="4c03310094da6d60ce1d790a53152a444bee88b18ded994580a19a058e1316f9dab4d367e5d12fed8bf56eda8421c3a1ac06d70cf8318a8156b6adb5743244d1265ae5095f6caf1c8c0b7fd990f69a5529e8d7dbc82fde7987160284ee0284babe0397c4bd39539a904ae806392f383a8f78af755a60688f717ed1e40c64802fc68607c7465f3402fa82fff2d7aa897ab9af2fd40289ea1d20d06323a52f93f6a183baa407b5ccf67f62c2740064bf99ec07e29dfdb237abc6823d046bdd2f89ee5842fb8b8d49b15888832a01abd0f616955f6fbce84b96879a71a325e80f9d6c407fa9909127dfb3a2a3a37971739431110c4b457b89be0e69b6301ff9e449ddd32e92bf1fc7b486b944cad4da6ac64fc03ffc1883dadacf51e522bca27d395cda6a49a5fde6be5e0de6451fce52ed2e9b3cfd4c76f5018bc12dfee4b8261b1d9085eef3f93e3769dbf223a7b0c48be35b66a9e33872bf27e5eca71721b12435bcb220b7af1d5cb7b4e44e9cb35126caf023d8cfe19d24b9487ff737aeb13e3ee8e28de553f555d95af76f03451fec0dce5e6b6bd1dfb8d7511cfcadb193c5c1fbb6b9f22da99f597f743be0a45feb970dbf499f717880ffd88366e9a5dc03d23733f15dc0a7b850870210150d8eb02fe8e81caf483fd2acf8a58865642e6f7665726c61792e6f726967696e0000d34db100c3fff506b378bc9d946bae0f43aed2b6734e1a34aa1fc5b24d4f8cc13e11cba0ee15eebf030813fdf102f331f4f58eb861232530ad955200ac2bf34ced9c6767d444f4ab51eea4b404bad3057880675a12dd95d115bc4a1a6065ecc2a89e5a110e4215cac82bc9598589aa573de57f4613077490c09a6fcc91087fe204edae7cd428836048d973da405da153bf3b4bc636b189d2301f99b67e893e4795a574459c718ea4fbc641fcdef8e03bc0949e90425a863927ffb5dc7862b1cf099adade44fbc87a0e0039f4d776e0713e4911b93ee02f2d5918830bff9dddb3862758a84fd8a0b1bb8e5133dc4306449343b62527e8170e0ad75c6cc3b32a6be8f0b7c85c9020469410339afb11f41e1524682e88fd54fb76419c217a05c311952a74b3dacd9626a84f4a02c36d049408a45af21d48f26156f97c903ce34c7e11e263cef526c42bb16f68133fe37436d90af92c0448be2e245d944c00000000"], 0x37c}, 0x1, 0x0, 0x0, 0x4}, 0x11) [ 1316.874605][ T5347] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1316.885926][ T5347] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1316.901174][ T5347] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1316.912670][ T5347] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1316.924418][ T5347] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1316.958237][ T5347] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1316.978668][ T5347] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:34:59 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1317.000539][ T5347] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1317.014080][ T5347] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1317.026612][ T5347] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1317.048178][ T5347] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1317.081449][ T5347] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1317.092099][ T5347] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1317.122147][ T5347] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1317.133906][ T5347] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1317.158541][ T5347] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1317.175152][ T5347] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1317.184953][ T5347] Interruptibility = 00000000 ActivityState = 00000000 [ 1317.193592][ T5347] *** Host State *** [ 1317.199711][ T5347] RIP = 0xffffffff811b4e70 RSP = 0xffff88805699f8e0 [ 1317.206606][ T5347] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1317.214443][ T5347] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 10:34:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:34:59 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000100)) 10:34:59 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={'vmac64(tnepres)\x02\x00'}}) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x40, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000180)=0x54) ioctl$TCGETA(r0, 0x5405, &(0x7f00000000c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2d096ffa5f07a6f0, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0xc060) 10:34:59 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xff', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1317.245263][ T5347] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1317.257970][ T5347] CR0=0000000080050033 CR3=000000009ec22000 CR4=00000000001426e0 [ 1317.291936][ T5347] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 1317.320022][ T5347] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1317.384340][ T5347] *** Control State *** [ 1317.403910][ T5347] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1317.413177][ T5347] EntryControls=0000d1ff ExitControls=002fefff [ 1317.429710][ T5347] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1317.446005][ T5977] could not allocate digest TFM handle vmac64(tnepres) [ 1317.457067][ T5347] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1317.473220][ T5347] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1317.483222][ T5347] reason=80000021 qualification=0000000000000000 [ 1317.494811][ T5347] IDTVectoring: info=00000000 errcode=00000000 [ 1317.503191][ T5347] TSC Offset = 0xfffffd3c5a33b400 [ 1317.512894][ T5347] EPT pointer = 0x0000000089bd101e 10:35:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251, 0x0, 0x0, [0x85ffffff]}, 0x48) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x402200, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/15}) 10:35:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2000000000080001, 0x0) getsockopt$inet6_buf(r1, 0x6, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x20000, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) recvmmsg(r0, &(0x7f0000001c40)=[{{&(0x7f0000000040)=@nl, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/228, 0xe4}, {&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f00000002c0)=""/82, 0x52}], 0x3, &(0x7f0000000380)=""/214, 0xd6}, 0x7}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)=""/37, 0x25}], 0x1, &(0x7f0000000580)}, 0x137}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/161, 0xa1}], 0x2, &(0x7f00000016c0)=""/75, 0x4b}, 0x9}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001740)=""/211, 0xd3}, {&(0x7f0000001840)=""/149, 0x95}, {&(0x7f0000001900)=""/158, 0x9e}, {&(0x7f00000019c0)=""/45, 0x2d}], 0x4, &(0x7f0000001a40)=""/163, 0xa3}, 0x8001}, {{&(0x7f0000001b00)=@generic, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b80)=""/21, 0x15}], 0x1, &(0x7f0000001c00)=""/45, 0x2d}, 0x6}], 0x5, 0x0, &(0x7f0000001d80)={0x77359400}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000001dc0)=@req={0x7fff, 0x9, 0x1000}, 0x10) 10:35:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@newspdinfo={0x140, 0x24, 0x302, 0x70bd2c, 0x25dfdbfd, 0x62a, [@output_mark={0x8}, @encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e24, @in6=@mcast2}}, @sec_ctx={0x100, 0x8, {0xfb, 0x8, 0x1, 0x5, 0xf3, "581da20b65cef28f9ba1bcb9225aa56626b3f818c0c3ceba1f667be3691f50957e2f98c01ed7b1b76cd8debfa05f9cdf892378567af5bc2d00ce4620aa30846f1ba674ac596cba6ae0b6fbdbabbc25854cecdf882e0030f8db62b25b69f096210ebc16c04f2c5b5897d9ca08f22f8eec469b319939924b7677e48bd8c439dae3518ba70a34843b514b0f5308bca047512c0197a94d79b2f69d95cb15b79b2e91bfe78843aa1c434c21a480bfc89bcb0675134ae200d5f652e0a5ad76461b80f22e2096c2f939392a7c7e885f82ceb25e59db206e11f11bf822e2cf956a87afd3934f754b54d849d4818a2e810c04e6cedf7ec0"}}, @ipv4_hthresh={0x8, 0x3, {0x1, 0x6}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsync(r2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000002c0)=0x104000) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={0x0, 0xc00000000000, 0x7f, 0x3, 0x8000, 0xfffffffffffffffa, 0x400, 0x40, {0x0, @in6={{0xa, 0x4e20, 0x9, @mcast1, 0x7}}, 0xffff, 0x81, 0x6, 0x3ff, 0x6}}, &(0x7f0000000500)=0xb0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000540)={r4, @in={{0x2, 0x4e24, @rand_addr=0x49}}, [0x8, 0x7, 0x6, 0x400, 0x5, 0xfff, 0x2, 0xa5e, 0x7f, 0x9, 0x1, 0xffffffff, 0x5, 0x1, 0x7]}, &(0x7f0000000640)=0x100) 10:35:00 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x4, &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x72, 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000000c0)=0x8) [ 1317.816217][ T6206] *** Guest State *** [ 1317.821161][ T6206] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1317.832532][ T6206] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1317.843111][ T6206] CR3 = 0x0000000000000000 [ 1317.848543][ T6206] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1317.856374][ T6206] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1317.868697][ T6206] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1317.876558][ T6206] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1317.885360][ T6206] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1317.893718][ T6206] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1317.903780][ T6206] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1317.918327][ T6206] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1317.930289][ T6206] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1317.946321][ T6206] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1317.956295][ T6206] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1317.966007][ T6206] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1317.976591][ T6206] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1317.987651][ T6206] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1317.997740][ T6206] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1318.008550][ T6206] EFER = 0x0000000000000000 PAT = 0x0007040600070406 10:35:00 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000800000001) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x3, &(0x7f0000000280)='I\x00='}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000400)=0xe8) r5 = getgid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000440)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) r8 = getegid() r9 = getpid() stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)=0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getgid() r15 = getpgrp(0x0) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000740)=[0xee01, 0xee00, 0x0, 0x0, 0xffffffffffffffff, 0x0]) fcntl$getownex(r0, 0x10, &(0x7f0000000780)={0x0, 0x0}) r19 = getuid() getresgid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) sendmsg$unix(r2, &(0x7f00000009c0)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000200)="8a85e6b4650c1ff383d9eb18e6991804c9d3d5e7aeb6dc5a5179b79f7bf32e6d077bf4e5a8fd995a4d18ee9c991891f8203b386581c2c942dacb0712f6dd05e6fe36bbff7401c652156cf0dad3824a7e9fe7", 0x52}], 0x1, &(0x7f0000000880)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x30, 0x1, 0x1, [r0, r1, r1, r1, r0, r1, r1]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}], 0x130, 0x80}, 0x8000) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000000)) [ 1318.017637][ T6206] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1318.026817][ T6206] Interruptibility = 00000000 ActivityState = 00000000 [ 1318.034920][ T6206] *** Host State *** [ 1318.039788][ T6206] RIP = 0xffffffff811b4e70 RSP = 0xffff8880589b78e0 10:35:00 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1318.073734][ T6206] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1318.104704][ T6206] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1318.116634][ T6206] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1318.128072][ T6206] CR0=0000000080050033 CR3=000000009ecd9000 CR4=00000000001426e0 [ 1318.164446][ T6206] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 1318.186381][ T6206] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1318.194237][ T6206] *** Control State *** [ 1318.198793][ T6206] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1318.206281][ T6206] EntryControls=0000d1ff ExitControls=002fefff [ 1318.212765][ T6206] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1318.220767][ T6206] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1318.228363][ T6206] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1318.235692][ T6206] reason=80000021 qualification=0000000000000000 [ 1318.242856][ T6206] IDTVectoring: info=00000000 errcode=00000000 [ 1318.249131][ T6206] TSC Offset = 0xfffffd3bd11642b3 [ 1318.254206][ T6206] EPT pointer = 0x0000000096c2201e 10:35:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000848000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 10:35:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2, 0x0) getpeername$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x316) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x8) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:00 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x20) chmod(&(0x7f00000000c0)='./file0\x00', 0x23f) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_score\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) setuid(r1) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x4803fc, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002c00)='net\x00') recvfrom$x25(r2, &(0x7f0000002c40)=""/251, 0xfb, 0x2000, 0x0, 0x0) keyctl$session_to_parent(0x12) [ 1318.457158][ T6636] *** Guest State *** [ 1318.473723][ T6636] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1318.484918][ T6636] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1318.501775][ T6636] CR3 = 0x0000000000000000 [ 1318.507570][ T6636] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1318.516795][ T6636] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1318.528051][ T6636] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1318.534883][ T6636] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1318.541949][ T6636] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1318.549556][ T6636] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1318.558443][ T6636] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1318.567265][ T6636] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1318.576302][ T6636] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1318.585361][ T6636] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1318.594330][ T6636] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1318.603354][ T6636] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1318.612354][ T6636] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1318.621577][ T6636] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1318.630493][ T6636] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1318.639775][ T6636] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1318.647277][ T6636] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1318.655795][ T6636] Interruptibility = 00000000 ActivityState = 00000000 [ 1318.663011][ T6636] *** Host State *** [ 1318.667052][ T6636] RIP = 0xffffffff811b4e70 RSP = 0xffff888077b4f8e0 [ 1318.674374][ T6636] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1318.682892][ T6636] FSBase=00007f8855b62700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 1318.691672][ T6636] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1318.698568][ T6636] CR0=0000000080050033 CR3=000000008c720000 CR4=00000000001426f0 10:35:01 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:01 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:01 executing program 0: creat(&(0x7f0000000240)='./file0\x00', 0x10) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x22, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000004000000660000000000000095000000000000003ac8715f58d799db71e974ec0212ccf748bceb2b5cda30b67e502727cb8f4913d76daecadd79d5f376e1a5d37e9aa14ce087d3838b9079079c3c0893b471c57977d6a75f4a511230610c404c09f0f991e3a5d78cf808b1cf23237e91ca883b6a219dcfb584acfcc8c93a8a2bf64b56cb6438134afe76caf2c369a403f05356e59ac2278527dc16d445a275f597bf18d01b62cc327827d6fd17228e54b002a7c778c2bf17df0d64b2c4bff9dfa64e2497ab0740e2b79ccb890cd4fcc70999b53f095f46a8e9178a546e60a5d71c041dc427503c188a8389921da9bcd0ecf5dd4a246cf264ec29892be38fb2096ebc71a6d412e1a29ce4f97c1640a8"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0xfffffffffffffedc, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 1318.706495][ T6636] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 1318.714114][ T6636] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1318.721406][ T6636] *** Control State *** [ 1318.725735][ T6636] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1318.733433][ T6636] EntryControls=0000d1ff ExitControls=002fefff [ 1318.739840][ T6636] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1318.747652][ T6636] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1318.756158][ T6636] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1318.763790][ T6636] reason=80000021 qualification=0000000000000000 [ 1318.797691][ T6636] IDTVectoring: info=00000000 errcode=00000000 [ 1318.836093][ T6636] TSC Offset = 0xfffffd3b7990225e 10:35:01 executing program 5: rt_sigprocmask(0x0, &(0x7f00000002c0)={0xffffffffffffffd}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000040)='\x02\x00\x00\x00\b\xa8\xdf\x9ec\xdc\x9e\x1d\x8b\xe6', 0x1) ftruncate(r0, 0x20004000) [ 1318.873648][ T6636] EPT pointer = 0x0000000080ebc01e 10:35:01 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setsig(0x4203, r2, 0x4, &(0x7f0000000440)={0x14, 0x5, 0x6}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB='g_\x00\x00', @ANYRES32=0x0], &(0x7f0000000500)=0x8) syz_open_dev$usb(&(0x7f0000000540)='/dev/bus/usb/00#/00#\x00', 0x40, 0x1) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="2abe6516b279e85cf2200370fcd0540e3d7877f6b673422df85d828c9e5e3b0a2af8ed5a642e1630083dd34d2ea32a61e0b913901ed0df6bc22fc9f8a945924c9888e85b981dae76a1a7e5f727afbb69a13dd3df314c301c2b99c8dac1a1a25763f44137fbd2e4403fed0711a5ba29", 0x6f}, {&(0x7f0000000100)="db7a937058cf969975377a535fb6e1428a1198ecfcae000ce92d20461ec29ac0b2a09e903aa85a64bee192f6fda3a081e107fdd45c4813f0ecfb85ad089c3cf858f3f26c45851c9a844a9d4d64590d5b6e284a4caa49a6162a97a6a7ba33403cdfcc6a0675419260578d6771684504", 0x6f}, {&(0x7f0000000280)="efca5caf88bda2fe358cb1643c2b99dd714733868985dedc17de446e749468ca965b7d135603c111f40d9c0de68f49046f604599bbf1253d396d30ace6d654e9df2b5f4440c455cb49898998e55bae6bab8c55e2bf5150abbbdc6e07dab5ad8a72c3a35d05637baa7f7cc81ddc11908498a0b062e766215dcdce0f05bbb46d35eb7199390c252bab80b92e9b6015c3645b7a64aec87a5829ae74", 0x9a}, {&(0x7f0000000340)="f837a5b51e9b4f1aec64da708d9e5d2cac344e7a3cf0ec0256f183f048cc469eb195f7431485d2687334d9445e2876cb767ef82a8b280c4abab865bd45c5e7a9a1ab1cb3eb4bebd440323051dd301bf6d9e57afc4714b4e25b5533f7ec50a44bca914e2c10dd9245b0252d412aee1bb35aad37d70855e0391bda4bba0678a742865005cfd5335d0fb5686e8f204c00df1b687aac38f8620d8ad2488e0b4e4577cba3d30b6154649ad24b00241237396d05957d5a0ddefa9b1b6dc1654362fb4646d05acea488f8237829c543687738f6f452fe5dcd811a0f4c437237c7ecf3dc412843fe80fda283ebd71d2d22", 0xed}], 0x4) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685) mmap$IORING_OFF_CQ_RING(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x8, 0x80010, r3, 0x8000000) 10:35:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000140)={0x14, 0x29, 0x12, 0xe, 0xa, 0x400, 0x2, 0xc8, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xc0000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3, 0x5, 0x84, &(0x7f0000ffd000/0x2000)=nil, 0xdbc}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:01 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x101, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x2be, 0xfff]}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x9}, 0x8) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000140)=""/151) sendmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{0x2, 0x5, 0x7}, 0x8, 0x3, 0x0, 0x0, "401c12a5e29f7c6a"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4000) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x30, r0, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000300)={'veth0\x00', 0x800, 0x9}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000540)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000580)=0x14) bind$netrom(r0, &(0x7f00000005c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @default, @bcast]}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000640)={r0, r0}) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000680)=""/98) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000700)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x7}}, 0x30) arch_prctl$ARCH_SET_GS(0x1001, 0x3) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000780)={0x3000, &(0x7f0000000740), 0x1, r0, 0x2}) fremovexattr(r3, &(0x7f00000007c0)=@known='trusted.overlay.origin\x00') getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000800), &(0x7f0000000840)=0x10) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000880)={0x4, 0x57f97947, 0x1}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendto$packet(r0, &(0x7f00000008c0)="2d00b2da92ce46cc675fd176eb3b92345f6d59dcce1ac9e65b", 0x19, 0x40001, &(0x7f0000000980)={0x11, 0xf5, r4, 0x1, 0x473, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f00000009c0)={0x8}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/full\x00', 0x40, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000ac0)='/dev/input/mice\x00', 0x0, 0xa0000) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000b00)={r1}, 0x8) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000b40)) 10:35:01 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1319.193044][ T7067] *** Guest State *** [ 1319.197337][ T7067] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1319.222388][ T7067] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1319.256492][ T7067] CR3 = 0x0000000000000000 [ 1319.267325][ T7067] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1319.283586][ T7067] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1319.291395][ T7067] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1319.298649][ T7067] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1319.305590][ T7067] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1319.313478][ T7067] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1319.322476][ T7067] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1319.331484][ T7067] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1319.341332][ T7067] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1319.350553][ T7067] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1319.359522][ T7067] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1319.369312][ T7067] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1319.378586][ T7067] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1319.398405][ T7067] IDTR: limit=0x00000000, base=0x0000000000000000 10:35:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:02 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x1}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00\x00\x00\x00\x00\x00\x00Jk\x00'}) connect$pppoe(r2, &(0x7f00000003c0)={0x18, 0x0, {0x1, @broadcast, 'bridge0\x00'}}, 0x1e) 10:35:02 executing program 5: r0 = socket(0x10, 0x802, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000180)="8f2e56ce90a1aaf6db5b0d3291c5ef47969eb29261d7255cda2475116a054dde3b4bb88062d6d85091b866fd56a8355a6cc21fcfec3c3fac34cb5f16057f47eb1f5498fde0cfe375c56671eccc421aa7202a759fcee76bc534110ab5d5f7100322bf43ff89bb5554d335b9babbe147522677fb838a7df23b4d5d5dc059b4d714d6e87354151e65a6aca8528a21eff48e234a17c99e89cdc268c7cc35f8b8f74535f95f5f878ca6b7c6bf8232a8fe59e6e3b9347af45552dd2b878c965e9e7fccafc87a3d9458c9c81a9a8039781a9a01211d65", 0xd3, 0x1}, {&(0x7f0000000280)="e1e1f91ddcc0f643f3faa487f04f77f2ee283d6449ee84866b378531b7652ac04ee1abb22802873dc14d2f9ef4cf3aee0e83dfd734f5285ebbecc3da9286b3d15511e3926e54ab49169929f6393e4ffcb29e902a8a6dac36d1450eb2f3c8cfb59826f206ef0529554a26b224c20265dde5e3ad15b9e003067b2a39773debd2f73891fc887a96e2fd0f9c5005fcf085c1163f38c00ca57af7bc8e9c96", 0x9c, 0x7}, {&(0x7f0000000100)="57f2dee680085cab176aaaa0cc891be9cb4cb6a34185917b3bbd06ea1746abfed899e393e413bf870ca2fbc31ba15f043e845fa4076f4b9b1ac005251f9c504d", 0x40, 0x5}, {&(0x7f0000000340)="f1c5ba7fc2db8d6c76e3fa7f28e0268a6d0c", 0x12, 0x75c}, {&(0x7f0000000380)="6f0ddfda05659e8aa2524c22b29924c6d28ee5dcc04758b84005bf96e13e7108cda224a7c0b6ea2c51168bb1e2283209106a728b5b170b4171fccac7c34b0cfe205d6bea7a6f048c58b94d51657f5ba31f76d429201973e852da392cbce9ccd5334c4ca2b1908278265a5e11a69e27fd3aadc68b9fcbe703b185f18ef9b4e8480e59d40ccbe46d1846df2ac956ecd01034949071737662d615fbd28145859f48f032781f6574e7cedd74e2879476b15fa0054ff499ebc49f76ffe38f9a30b76c0a3b3e66605eb0826c5b0313ed197fba0e0983e2a7f2d2d70dcdd176561442a71ee806f907f06f933adeda573295c40b2bca43ea8fe4", 0xf6, 0x2}, {&(0x7f0000000480)="4ef7d1689c353ca8d3b207b1d7371c11c611184187d77d64d32807516e8845daaa", 0x21, 0x1f}], 0x20000, &(0x7f0000000580)={[{@background_gc_on='background_gc=on'}], [{@obj_type={'obj_type', 0x3d, ',,-!#'}}]}) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x100000000, 0x5}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)={r1, 0x5, 0x2, [0x401, 0x4]}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001300010500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000040016001400030076657468315f706f5f626f6e64000000"], 0x38}}, 0x0) [ 1319.412332][ T7067] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1319.421372][ T7067] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1319.456180][ T7067] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1319.485524][ T7067] Interruptibility = 00000000 ActivityState = 00000000 [ 1319.514250][ T7067] *** Host State *** [ 1319.548375][ T7067] RIP = 0xffffffff811b4e70 RSP = 0xffff888058d7f8e0 10:35:02 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1319.631003][ T7067] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 10:35:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6004, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000140)={0x3, 0x7, 0x1f, 0x2, 0x18, 0x9}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x5) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x5, 0x3, 0x9, 0xff, 0xb, 0xfffffffffffffff7, 0x9, 0x8000, 0x8, 0x5}) ioctl$KDGKBTYPE(r0, 0x8910, 0x0) [ 1319.674138][ T7067] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1319.697931][ T7067] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1319.714360][ T7067] CR0=0000000080050033 CR3=00000000a1b62000 CR4=00000000001426e0 [ 1319.762694][ T7067] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1319.786103][ T7067] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1319.798197][ T7067] *** Control State *** [ 1319.807959][ T7067] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1319.820037][ T7067] EntryControls=0000d1ff ExitControls=002fefff [ 1319.834406][ T7067] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1319.850356][ T7067] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1319.883476][ T7399] mkiss: ax0: crc mode is auto. [ 1319.887508][ T7067] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 10:35:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x2, 0x802, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000001000000070000000707000000000000"], 0x18, 0x10}, 0x0) [ 1319.925911][ T7067] reason=80000021 qualification=0000000000000000 [ 1319.956553][ T7067] IDTVectoring: info=00000000 errcode=00000000 [ 1320.012420][ T7067] TSC Offset = 0xfffffd3b15f106fa 10:35:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0xfffffffffffffffc, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000940)='/dev/vbi#\x00', 0x1, 0x2) connect$bt_l2cap(r1, &(0x7f0000000980)={0x1f, 0x7, {0x0, 0x12b, 0x952, 0x200, 0x7fff, 0x9}, 0x0, 0x89bb}, 0xe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x9, 'syz0\x00'}, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 10:35:02 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1320.070832][ T7067] EPT pointer = 0x0000000077f8101e 10:35:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x4000) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x33, 0x20, 0x10, 0x11, 0x6, 0x3, 0x5, 0x153, 0x1}) r4 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, r4) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_GET_SECCOMP(0x15) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet(0x10, 0x2000000003, 0x0) getresuid(&(0x7f0000000180), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r3 = syz_open_dev$adsp(&(0x7f0000000c40)='/dev/adsp#\x00', 0x400, 0x400000) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000c80)=""/227) r4 = syz_open_dev$usb(&(0x7f0000000680)='/dev/bus/usb/00#/00#\x00', 0x2, 0x101) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000006c0), 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) r6 = dup3(r0, r4, 0x80000) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000b00)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f0000000b80)={0xf, 0x8, 0xfa00, {r9}}, 0x10) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x24a0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d756e69782c6c6f6f73652c63616368657461673d2c6c6f6f73652c63616368653d6e6f6e652c76657273696f6e3d3970323030302e752c6163636573733d757365722c76657273696f6e3d3970323030302e4c2c6e6f657874656e642c76657273696f6e3d3970323030302c6f626a5f747970653d2bb72b272c657569643e", @ANYRESDEC=r2, @ANYBLOB=',audit,euid<', @ANYRESDEC=r5, @ANYBLOB=',appraise,permit_directio,obj_role=,obj_role=,cpuset\',uid>', @ANYRESDEC=r7, @ANYBLOB=',fowner>', @ANYRESDEC=r8, @ANYBLOB="06df"]) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, &(0x7f0000000700)={"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"}) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000064c0), 0x40000000000022a, 0x2, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000bc0)=0x0) write$P9_RGETLOCK(r6, &(0x7f0000000c00)={0x33, 0x37, 0x1, {0x2, 0xfffffffffffffff9, 0x400, r10, 0x15, '/dev/bus/usb/00#/00#\x00'}}, 0x33) 10:35:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast}, 0x80, 0x0}}], 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x200, 0x402403) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000100)=@deltaction={0x18c, 0x31, 0x210, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x3, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0x10, 0xd, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x18, 0x6, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x14, 0x12, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0xb, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0xc, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1f, @TCA_ACT_INDEX={0x8, 0x3, 0xbc1d}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x4, @TCA_ACT_INDEX={0x8, 0x3, 0x2f2}}, {0x14, 0x7, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x15, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1a, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x1e, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3, 0xfa64}}, {0x14, 0x13, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}, {0x10, 0x16, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x6, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x6, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff00000000}}, {0x10, 0x8, @TCA_ACT_KIND={0x8, 0x1, 'xt\x00'}}, {0x14, 0x15, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x14}, 0x48050) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) io_setup(0x986e, &(0x7f00000003c0)=0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000500)={0x1, 0x0, 0xd826, 0x8, 0x0}, &(0x7f0000000540)=0x10) prctl$PR_SET_FP_MODE(0x2d, 0x3) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000580)={r3, 0x2}, &(0x7f00000005c0)=0x8) io_pgetevents(r2, 0x2, 0x1, &(0x7f0000000400)=[{}], &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480)={0x80000000}, 0x8}) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0) 10:35:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80002200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r2, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x20000) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x2, 0x2}, 0x10) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x20}, {r1, 0x10}, {r0, 0x20}, {r1, 0x20}, {r2, 0x8008}], 0x5, &(0x7f00000000c0)={r4, r5+30000000}, &(0x7f0000000100)={0x8}, 0x8) 10:35:03 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:03 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:03 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f00000000c0)=0x4) getsockname$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) 10:35:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x37, "cdedf91e3ff64bfda317c6c4ef0b333735f5091be1efb9be55903d5bb6649e9e3064c97977613c23d9b60a74b83affefce3e5a1e05395a"}, &(0x7f00000001c0)=0x3f) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={r2, 0x7}, 0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {0x0, 0x7000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) r5 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3f, 0x80000) getsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000140), &(0x7f0000000180)=0xfffffffffffffffc) ioctl$KVM_RUN(r4, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x29, 0xfff, 0x2, 0x7, 0x1, [{0x6, 0x3ff, 0x7, 0x0, 0x0, 0x800}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x10201, 0x0, 0x6002, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000140)={0x7b, &(0x7f00000000c0)=""/123}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000200)={0xfffffffffffffffb, 0x20, "33eccf6091e82193ac7406726c21e91eccaaf53e2809b39d", {0x2, 0x5}, 0xd759}) 10:35:03 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x100000000, 0x400) r1 = timerfd_create(0x5, 0x80000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x102, 0x2, {0x7, 0x5, 0x2, 0x15}}) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x800}, 0x810) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0x2, 0x1f, 0x1, 0x200}, 0x1a) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x44000) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a73ff0)='/dev/sequencer2\x00', 0x8002, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000, 0x9b) write$sndseq(r3, &(0x7f0000000000)=[{0x5b93, 0x0, 0xffffffffffffff80, 0x0, @tick, {}, {}, @connect}], 0x1c) 10:35:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x240000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x7) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:04 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:04 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0xfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', 0x0) 10:35:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7bd8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r2 = dup(r0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) setsockopt$inet_dccp_int(r2, 0x21, 0xb, 0x0, 0x0) getpeername$netlink(r2, &(0x7f0000000240), &(0x7f0000000280)=0xc) [ 1321.733029][ T8430] *** Guest State *** [ 1321.744388][ T8430] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1321.757940][ T8430] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1321.805703][ T8430] CR3 = 0x0000000000000000 [ 1321.815643][ T8430] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1321.825128][ T8430] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1321.844292][ T8430] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 10:35:04 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1321.860674][ T8430] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1321.871663][ T8430] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1321.879799][ T8430] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1321.928558][ T8430] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1321.948424][ T8430] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1321.965425][ T8430] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:04 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1321.984345][ T8430] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1322.005601][ T8430] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:04 executing program 0: seccomp(0x1, 0x41d58974fe0956da, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, &(0x7f00000000c0)="09453cfa368f45466c92536325304957ac29235f50fdeba19b2e5adb46d650d50e3332805cf093a6c03c5c0929d0c213ffc3ea046603362d160b0e00ab8549a83cf3b20c5f45ac65c1111aa08a4a151b4ece3305830dfbc6f74d687959a58bfad83e859506084b245b50489870371ac519a76d1281972213b580be1d7d19b18a1e6b2ccbdc35b69b27e5207b26140c5971526657aab2d55a371ee6cdebfe1034592a9ee4a861e563bdc623adb62e852eb95a3f2c1d4fce7247a96b7a69a80d37e65e572c4e456ec85d8991933a05eddacda1df22a1e7e80aa08b5297f5b8536da6e5b455c94f6af688", &(0x7f00000001c0)=""/249}, 0x18) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000040)=@rose) [ 1322.027693][ T8430] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1322.048312][ T8430] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1322.064640][ T8430] IDTR: limit=0x00000000, base=0x0000000000000000 10:35:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f00004e7000)={0x2, 0x229, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x10001, 0x600000) getsockname$llc(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000380)=0x7ff) getgroups(0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xee01, 0x0]) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x8004, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose'}, {@fscache='fscache'}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@privport='privport'}, {@mmap='mmap'}], [{@subj_type={'subj_type'}}, {@seclabel='seclabel'}, {@obj_user={'obj_user', 0x3d, 'vmnet1'}}, {@audit='audit'}, {@smackfshat={'smackfshat', 0x3d, 'lo*\\system'}}, {@appraise='appraise'}, {@dont_measure='dont_measure'}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@dont_hash='dont_hash'}]}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='cpu&5\n\n\n\x00\x00\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') [ 1322.083911][ T8430] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1322.116887][ T8430] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1322.144499][ T8430] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1322.165893][ T8430] Interruptibility = 00000000 ActivityState = 00000000 [ 1322.179292][ T8430] *** Host State *** [ 1322.187941][ T8430] RIP = 0xffffffff811b4e70 RSP = 0xffff8880534178e0 10:35:04 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:04 executing program 0: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x33, 0x4a800) statx(r0, &(0x7f0000000300)='./file0\x00', 0x3000, 0x200, &(0x7f0000000380)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc1105518, &(0x7f0000000040)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x400, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000340)={0x0, @dev, @local}, &(0x7f0000000100)=0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480)={0x0, 0x1000, "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"}, &(0x7f00000014c0)=0x1008) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001500)={r4, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x2, 0x2}, &(0x7f00000015c0)=0x90) getgroups(0x3, &(0x7f00000002c0)=[0xee00, 0x0, 0xffffffffffffffff]) fchown(r2, r3, r5) [ 1322.231769][ T8430] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1322.278152][ T8430] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1322.295086][ T8430] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1322.314247][ T8430] CR0=0000000080050033 CR3=00000000821aa000 CR4=00000000001426e0 [ 1322.329036][ T8430] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1322.340777][ T8430] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1322.355966][ T8430] *** Control State *** [ 1322.361482][ T8430] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1322.371063][ T8430] EntryControls=0000d1ff ExitControls=002fefff [ 1322.380279][ T8430] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1322.389156][ T8430] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1322.399973][ T8430] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1322.409031][ T8430] reason=80000021 qualification=0000000000000000 [ 1322.420057][ T8430] IDTVectoring: info=00000000 errcode=00000000 10:35:05 executing program 0: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x3, 0x40) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000240)={0x0, 0x2, 0x80000000, &(0x7f0000000200)=0x100000001}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000100)=0x5e) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000000) [ 1322.434921][ T8430] TSC Offset = 0xfffffd39b7b8d384 [ 1322.446320][ T8430] EPT pointer = 0x0000000089cce01e [ 1322.515338][ T8443] *** Guest State *** [ 1322.524668][ T8443] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1322.554525][ T8443] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1322.645917][ T8443] CR3 = 0x0000000000000000 [ 1322.650877][ T8443] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1322.658549][ T8443] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1322.665976][ T8443] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1322.673197][ T8443] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1322.681216][ T8443] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1322.689319][ T8443] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1322.698495][ T8443] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1322.707244][ T8443] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1322.716483][ T8443] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1322.725670][ T8443] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1322.734969][ T8443] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1322.743880][ T8443] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1322.752666][ T8443] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1322.761910][ T8443] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1322.770715][ T8443] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1322.779664][ T8443] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1322.786798][ T8443] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1322.795059][ T8443] Interruptibility = 00000000 ActivityState = 00000000 [ 1322.802063][ T8443] *** Host State *** [ 1322.805961][ T8443] RIP = 0xffffffff811b4e70 RSP = 0xffff8880538878e0 [ 1322.812889][ T8443] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1322.820151][ T8443] FSBase=00007f8855b41700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1322.828777][ T8443] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1322.835378][ T8443] CR0=0000000080050033 CR3=00000000821aa000 CR4=00000000001426e0 [ 1322.843177][ T8443] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1322.851234][ T8443] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1322.858081][ T8443] *** Control State *** [ 1322.862341][ T8443] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1322.869967][ T8443] EntryControls=0000d1ff ExitControls=002fefff [ 1322.876143][ T8443] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1322.883888][ T8443] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 10:35:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f00004e7000)={0x2, 0x229, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x10001, 0x600000) getsockname$llc(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000380)=0x7ff) getgroups(0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xee01, 0x0]) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x8004, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose'}, {@fscache='fscache'}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@privport='privport'}, {@mmap='mmap'}], [{@subj_type={'subj_type'}}, {@seclabel='seclabel'}, {@obj_user={'obj_user', 0x3d, 'vmnet1'}}, {@audit='audit'}, {@smackfshat={'smackfshat', 0x3d, 'lo*\\system'}}, {@appraise='appraise'}, {@dont_measure='dont_measure'}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@dont_hash='dont_hash'}]}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='cpu&5\n\n\n\x00\x00\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') 10:35:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x7fff, 0xffffffffffffffe4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x52, r0, 0x2000000000000004) 10:35:05 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:05 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1322.891442][ T8443] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1322.898838][ T8443] reason=80000021 qualification=0000000000000000 [ 1322.905972][ T8443] IDTVectoring: info=00000000 errcode=00000000 [ 1322.912241][ T8443] TSC Offset = 0xfffffd394ca85eb2 [ 1322.917370][ T8443] EPT pointer = 0x000000009f95901e 10:35:05 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='selinuxfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1323.131163][ T9154] *** Guest State *** [ 1323.138137][ T9154] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1323.163646][ T9154] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1323.175732][ T9154] CR3 = 0x0000000000000000 [ 1323.181417][ T9154] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1323.193094][ T9154] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1323.202283][ T9154] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1323.212128][ T9154] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1323.242281][ T9154] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1323.276359][ T9154] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:05 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1323.300117][ T9154] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1323.318146][ T9154] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1323.364222][ T9154] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1323.374554][ T9154] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1323.384468][ T9154] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1323.393766][ T9154] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1323.402888][ T9154] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1323.412241][ T9154] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1323.421302][ T9154] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1323.430415][ T9154] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1323.438200][ T9154] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1323.446703][ T9154] Interruptibility = 00000000 ActivityState = 00000000 [ 1323.454235][ T9154] *** Host State *** 10:35:06 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f00004e7000)={0x2, 0x229, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x10001, 0x600000) getsockname$llc(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000380)=0x7ff) getgroups(0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xee01, 0x0]) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x8004, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose'}, {@fscache='fscache'}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@privport='privport'}, {@mmap='mmap'}], [{@subj_type={'subj_type'}}, {@seclabel='seclabel'}, {@obj_user={'obj_user', 0x3d, 'vmnet1'}}, {@audit='audit'}, {@smackfshat={'smackfshat', 0x3d, 'lo*\\system'}}, {@appraise='appraise'}, {@dont_measure='dont_measure'}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@dont_hash='dont_hash'}]}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='cpu&5\n\n\n\x00\x00\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') [ 1323.460436][ T9154] RIP = 0xffffffff811b4e70 RSP = 0xffff888053a278e0 [ 1323.482102][ T9154] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1323.517514][ T9154] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 10:35:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000080)="0adc1f1a3c123f319bd070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000018000101000000000000000002000000000000010400000100000500ac141d004f1f1758fda30b64a186928fd0bb735bcc15c0911add2c4b956a334a488180dc8e33695ec1f977a1c107f27a0e06fa354190eecd3e1a"], 0x24}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) keyctl$set_reqkey_keyring(0x16, 0xffffffffffffffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000000c0)=""/116) [ 1323.573036][ T9154] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1323.626213][ T9154] CR0=0000000080050033 CR3=00000000a0742000 CR4=00000000001426e0 10:35:06 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1323.705773][ T9154] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1323.727903][ T9154] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1323.745732][ T9154] *** Control State *** [ 1323.750204][ T9154] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1323.758985][ T9154] EntryControls=0000d1ff ExitControls=002fefff [ 1323.765441][ T9154] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1323.773905][ T9154] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1323.808139][ T9154] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1323.818953][ T9154] reason=80000021 qualification=0000000000000000 [ 1323.836410][ T9154] IDTVectoring: info=00000000 errcode=00000000 [ 1323.845435][ T9154] TSC Offset = 0xfffffd38f70980a5 [ 1323.856904][ T9154] EPT pointer = 0x000000007bbc801e 10:35:06 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) r1 = dup(r0) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x88, @time={r2, r3+30000000}, 0x0, {0x3ff, 0x10000}, 0x1, 0x0, 0x3}) ioctl$ASHMEM_SET_NAME(r0, 0x40087705, &(0x7f0000000300)='/dev/ashmem\x00') openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 10:35:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='\x00\xaf1\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfew\xe4\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xc9\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\x1c\n\xb0@mns\x8el\x9b{2\xa7 h\xc7\xac\xfa\xd9!pR\xa8\xcaY%%\xb0\xbc\x85\xd1\x13R0\x94\xeb4\xf3\xb1\xd33\xca*q\x1f\xf6\xc79nUy:\xc2Aw\xf2\xecj\x81\x85\xecW\x17h\x84\xbav\xbd\x0fz\x1bN\x8a\xb1\xf7%\x7f~E\r\xe6\x94\xec\x84\x1dv\xd6\v$\xf3\x18\xc2\xe5H\xd0\xd7\xa7\xb0\xc8\b\xc0\x19\xe2$|\xd31m\x8a\xb2\xd3\x15\xe9\xbaiM\xef\xf9\x9b7\xf3\x1a\vo\'f\v\x14\x84~\xf4\'s6\x18\x9e\xd6\xb43r\xe50\xe3\x84\xf5\xea\xc2\xda\xcd\xfbX') mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x4, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1000017c, 0x2000107c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) fcntl$setownex(r1, 0xf, &(0x7f00000001c0)={0x2, r2}) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/uts\x00') r3 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4002) shmdt(r3) 10:35:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:06 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:06 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800470000300000000000009078ac141400ac1423bb4407057f000001000e00907800000000000000000000800000000000"], 0x0) io_setup(0x57, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0xc4a, 0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)={0x77359400}, &(0x7f0000000200)={&(0x7f0000000180)={0x4}, 0x8}) 10:35:06 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) accept4$alg(r1, 0x0, 0x0, 0x0) close(r0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x400000) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000140)={0x3, @null, r3}) 10:35:06 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000200)={0x10004, 0x115000, 0x7fffffff, 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000002c0)=0x113000) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000240)={0x8, 0x0, 0x1}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r2, 0x0, 0x15, &(0x7f0000000100), 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) [ 1324.201043][ T9758] *** Guest State *** [ 1324.216554][ T9758] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1324.262608][ T9758] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1324.290782][ T9758] CR3 = 0x0000000000000000 10:35:06 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/nfsfs\x00') ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) r1 = syz_open_dev$mouse(0x0, 0x0, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204006902000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, 0x0) [ 1324.308174][ T9758] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1324.329057][ T9758] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1324.344517][ T9758] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1324.364048][ T9758] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1324.374271][ T9758] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1324.382780][ T9758] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1324.392093][ T9758] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1324.401779][ T9758] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:07 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xff', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e1affffff65308b0ebd1e4d072f2c7b290449825d66ddadd44a8eee5100000000ef676f96094b0000"], 0x2c) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', '.', [{0x20, '+'}, {0x20, '#'}], 0xa, "8890e9b0848ae8c41c8bd00317bd6044a9f1a37f7a5564669a1f145addc30f78789c27"}, 0x2c) [ 1324.449776][ T9758] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1324.488269][ T9758] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1324.518234][ T9758] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1324.554125][ T9758] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1324.576473][ T9758] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1324.588694][ T9758] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1324.611450][ T9758] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:07 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x418) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x20440, 0x0) accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff38c, 0x0) [ 1324.629664][ T9758] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1324.648358][ T9758] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1324.688082][ T9758] Interruptibility = 00000000 ActivityState = 00000000 [ 1324.702072][ T9758] *** Host State *** [ 1324.706265][ T9758] RIP = 0xffffffff811b4e70 RSP = 0xffff888056f2f8e0 [ 1324.714061][ T9758] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1324.722396][ T9758] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 1324.731891][ T9758] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1324.739155][ T9758] CR0=0000000080050033 CR3=0000000090314000 CR4=00000000001426e0 [ 1324.747185][ T9758] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 1324.755276][ T9758] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1324.767639][ T9758] *** Control State *** [ 1324.773692][ T9758] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1324.797453][ T9758] EntryControls=0000d1ff ExitControls=002fefff [ 1324.806352][ T9758] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1324.832658][ T9758] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1324.855854][ T9758] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1324.871697][ T9758] reason=80000021 qualification=0000000000000000 [ 1324.882322][ T9758] IDTVectoring: info=00000000 errcode=00000000 [ 1324.892259][ T9758] TSC Offset = 0xfffffd38667c4a90 [ 1324.897590][ T9758] EPT pointer = 0x0000000099b2e01e 10:35:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = msgget(0x3, 0x100) msgctl$IPC_INFO(r2, 0x3, &(0x7f00000000c0)=""/159) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:07 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7db, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0x800, 0xffffffffffffff9c}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x400, 0x2, 0x6, 0x100000000, 0x2}, 0x14) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 10:35:07 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:07 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:07 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:07 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x88180, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @random="b6eab83c5a3f"}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:08 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000440)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x6) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000280)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 10:35:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$setflags(r1, 0x2, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000140)="0adc1f123c123f319bc070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000000)=0x9, 0x4) bind$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 10:35:08 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1325.749951][T10829] *** Guest State *** [ 1325.754019][T10829] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 10:35:08 executing program 5: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clock_gettime(0x7, &(0x7f00000000c0)) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x20000) open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r2, r1, 0x0, 0x4) [ 1325.791024][T10829] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1325.838403][T10829] CR3 = 0x0000000000000000 [ 1325.842927][T10829] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1325.954855][T10829] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1325.985671][T10829] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 10:35:08 executing program 0: getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000440)={0x4000, &(0x7f0000000400), 0x8, 0xffffffffffffffff, 0x1}) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 1326.021840][T10829] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1326.058201][T10829] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 10:35:08 executing program 5: ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x407ffffffffff9) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400401}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r1, 0x8, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x40800) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x100) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @empty}, @in6={0xa, 0x4e20, 0x8001, @loopback, 0x6}, @in={0x2, 0x4e20, @broadcast}], 0x48) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000002c0)={0x0, 0x3, {0x2, 0x1, 0x598c2b52, 0x0, 0x8}}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0xc0000000, 0x0, 0xff, 0x0, 0x4, 0x10001}, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000400)='./file0\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x2) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') r4 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="587116b5a7d3400270b853a6cb7e1ed6b19f978bc08c94b2b10a577f15550a49c4b7748ceed117c4f7059c2c4d82bbc399c467f962471d69d7976dbf37ec1ea8a8215ad2a893f0ebd668f1278c22c37a92ec4f7b4ef6ea82af3dfa875bf44c57c5e199a476895f8943ed78f14312f1b7f5b45a8d7cb6af5f037919fcc0cb7c4f389dd8c7340e836521f883e44ce6e8c15c9824c320b561777c42eade17ab42d7f6", 0xa1, 0x0) r5 = request_key(&(0x7f0000000c40)='trusted\x00', &(0x7f0000000c80)={'syz', 0x0}, &(0x7f0000000cc0)='team\x00', 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r4, &(0x7f0000000b80)=[{&(0x7f0000000540)="186d3f5876f0c65a488469c1037ff9db14ab02625d0329ffab", 0x19}, {&(0x7f0000000580)="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", 0xfc}, {&(0x7f0000000680)="bb4f9b0e689c8a47b96302fae187c8a9fc2d62fa6f5fd4e3cdacd330749e352519cf85b783d4f5c96d695a948d0225a4b268cc7c512d1d6199ae7c87009fd28270e55fa612c7cf15d7dc61562b2f196cecea386d743d115cfb07acbd51acc8668d87a08f5bcf8fdab4ab0d9fcd71284133d9daf4abfde6e21012267b0814a3e3bf6c0cc94a778b3fcc591ed6f623c885635a55a2f91463b8d62cd65f5e4cacb472cbbefd45ffff6cee473f2c576ee3ac5b", 0xb1}, {&(0x7f0000000740)="2052ec58d444d497c6b5b9aa44bd4229da81d5ba683d266aee68d8ea02153400f6cac68dc3d0ceeaf23b4c953284a2266249ed", 0x33}, {&(0x7f0000000780)="7998b4dacdaa153f5fff00358a8931caa7d3918a3c7ecd20da0ace3c826137c33004e4255107cab710678ab8d528208098117d47a9c02ce17948e231bc6d0891cd8992ec1b7710f8e731fa5acb400867959af83f3f6e831229e595be6c76d88a75d7cf84099486efde3bbbbdc93173db0661025ae7168e6239867f1f317ed6efdb6f142c5f9effeede95f9f541b9b38143029f6de6b7a18421b90e6dfe214d46b979bf4e7c2fa99827c5ddae3f6350beca885556f29935f68a70806f2be35a7ecddab50b0b03129e33b98fb3f16cc039d5281a653d730e5db7f35596928004044aef8ef581a7459b53f57149aec900fa8492", 0xf2}, {&(0x7f0000000880)="f559b921a70b3c8a3dbd4fee1827ee597088b1aacb752fa0a9a950b635c956dfd918f3566827a2954170f77998963632cd73743f9945c53dc6255a932e0538bba704de8f32", 0x45}, {&(0x7f0000000900)}, {&(0x7f0000000940)="81e786aa8805d5308148a421913398aa5a24a7fe07d37c1bacc6f5a2f2f1715299959489946f057af0ad71439ca22926bf3b245d35c4e321fd47d84605829476d5e7e8ca04e443f05da8e55403ff2ba920500e4952796e85a5616aefbeae220d15d104c411981f6e0173e72cce98d0cacdb91992d0ec1408", 0x78}, {&(0x7f00000009c0)="acc41740b115f5b86fc2de836d63ffad91cc26ea073c1f867d72988bb32e8f881e8ea617cdd9a39942a7714ce95262f13c79a2932b7f530432d9411351649d6cfd897a231ed07bb6604da950ae5b1bbc6ef4616994af4d64d4a2cb3b47aeefca759c8ff0e97d0ea3ac033a659d2777bb13fa6a85448f3f4e4fe1778ab59d191a1b7fa5044bc58197dd23bebc39", 0x8d}, {&(0x7f0000000a80)="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", 0xfd}], 0xa, r5) 10:35:08 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1326.108160][T10829] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:08 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1326.180826][T10829] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1326.229942][T10829] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x1000}, 0x28, 0x3) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmsg(r1, &(0x7f0000000500)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000000000001100000067000000bbde"], 0x12}, 0x8045) [ 1326.290698][T10829] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1326.323910][T10829] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1326.430865][T10829] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1326.468169][T10829] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1326.502978][T10829] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:09 executing program 0: umount2(&(0x7f0000000080)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000100)={0x3, 0x8, 0x3b01, 0x6, 0x3b1b}) r2 = dup2(r0, r0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0xfffffffffffffef9}, 0xfffffc34) read$FUSE(r2, &(0x7f0000001240), 0xfffffe96) epoll_create(0x0) 10:35:09 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1326.564431][T10829] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1326.647724][T10829] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1326.680700][T10829] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1326.694573][T10829] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1326.706115][T10829] Interruptibility = 00000000 ActivityState = 00000000 [ 1326.713699][T10829] *** Host State *** [ 1326.724456][T10829] RIP = 0xffffffff811b4e70 RSP = 0xffff888056f2f8e0 [ 1326.732530][T10829] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1326.746092][T10829] FSBase=00007f8855b62700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 1326.755175][T10829] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1326.768311][T10829] CR0=0000000080050033 CR3=000000009ae8a000 CR4=00000000001426f0 [ 1326.776411][T10829] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1326.793144][T10829] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1326.803212][T10829] *** Control State *** [ 1326.807676][T10829] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1326.821255][T10829] EntryControls=0000d1ff ExitControls=002fefff [ 1326.837589][T10829] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1326.851079][T10829] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1326.859442][T10829] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1326.866997][T10829] reason=80000021 qualification=0000000000000000 [ 1326.874553][T10829] IDTVectoring: info=00000000 errcode=00000000 [ 1326.881369][T10829] TSC Offset = 0xfffffd3792868757 [ 1326.886569][T10829] EPT pointer = 0x000000009299c01e 10:35:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r4 = getpgid(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f00000000c0)={r2, r1, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:09 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001840)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001880)={0x0, 0x0}, &(0x7f00000018c0)=0xc) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000180)='\x00', 0x10001, 0x6, &(0x7f0000001600)=[{&(0x7f00000001c0)="95a869aec28875bde00a1ecd756d8a7386750ea365368fd1ad0492d3f70e482088c77e728da1b79cac3ef415a017fbdcf7bd4c0f68338039064b1dce0882851d50e61cbf310e55f383daf212e3d54ae2b7a43d9c5816b8a8", 0x58, 0x5}, {&(0x7f00000003c0)="9cee9558e38a39e8d4d67fc0d9c2c1e327a009c6628c880f3348f00243f27a1e8390f4ac1be2cd470b32b8d3a0adb50dc967d9784ccf8d971cda3c8b1bbc9dcc122c154e7b3dec36c569a5f1c1c71566404438517b572206d40c72737ffe0cc4d3625809d6", 0x65, 0x9}, {&(0x7f0000000440)="dbeea62962d826c1050a6621fc0025e6ccfde82a369f1360355e470c991ebadab8a5ea2953b6a31e1e1d0c8c69e6d8b3b95e2d17d42112e39eb689014c4b42d4b37cfe4e07ded9e3b4f9cca2583e91814ae76da2986fc7b78b81ff77ae4d5ba0e2adc7a0d7d6208df4c72023baccf762461bb9908f14f0d426fc9a79d4402395cbf2f84176387ef9ebae8df8e879b8992bbfeac85cdc502b558cc7d76dad7fd66b75c80b2bd593104ac63968829777ab4355054cd6b106a33f8248840b3100a1872604666219bd96e9b662", 0xcb, 0x1ff}, {&(0x7f0000000540)="b88e62708712fd28d5bf4b7e6c938a4e47adb9ec17f85f66f88b9292c8e1d21e8d5f66d1bd81ad3dac40e630a355001dddf14b0a970b6175dc4da948406d1a2b4de0ec6eae0a1afd6d6af68258838f2caf434caada186f727964f6d83dd83e662dd953e0c711b8c07345cbd5e61012a2784807f5f1bf884ee311cea0238ab521a158cdd0be579dd43255738375373eb1607dfe90f506e590ac0d59d928a6c13581051653b71601bbaa654466", 0xac, 0x2}, {&(0x7f0000000600)="f16ca9906897c9e6bd13f1d550d61ea12dbb74234bd9f398850e98495d4fd1eaf4908b1c9984714052cd7abee894f353059deb7ed514c08c8c4b5b51e24494fd160c7302828a574fcfaa0aab21b649367dc7f70c55792fda98ed63ca13635dccfec99ecaa5d21a5df100def9263cdd069c7751e1343c774c6b548ac4f9bf9726c95d4690e1869d422a221e7383add19d67ec64536da8942049f5f67be3922658383e3ba137d7aaf5113ef650a159c591c7e7c64e34dc1e56b79f533f7fab652acf38e9178ccde5b84bd4f3d4e605d152de8580bff6b1fddca98fc9b318fac81ad3da25799ad4573b3f805e61755074dd34ee3c137fae66e7127e12d015eb24243571c3a26aa18218fdc5488bf81f1746bea7f6abdcb3d99d9a391140dc2faf01552788167b896b74e26d7b3be1cd178975759003cbe6e0122200941a95bfb48048cdbe0f39a20b22d2a704ece1f635682412a6edd6c2aeec1ac1a24b21593542222b55f0f4cf31c80657d72c26efb488218a9175375251f0c966c8ea24fbd0ee5063b0b963cbb32290c15ad79babc53b654ba6ca9c12863ec9502684d69d6b68861d4f5aa9562d9eafca26a23372f497e04a3b6477f7222861a5c944984f12b2a9c0472c47c06eb11f987271cdde1136e850e627c3cdb3155ca0d411b1d750dbe9eae7f59b435a451d16aaf501f9e636c8ddf522e604cad994c3108a11b99c1eb74c5eaf8ce3a43f25ebbc78fdee3f05eb47298415af6d58ff0dd7eb0341270d387e2f458eee817ac124ef33e135fd7fc0adc45c49d1fceeea1aab2c9c5fcca77e7c5a20b0d840b93ac9c2ca9c9bd608375ece79b99ee6723d46cc03f1441726d5cda20e849fa96bff0c97f3213ffb63fe964fa0c9e767b7d79fa0357bf8d9a818ada72bfaa993a4be4324b17f184fd68c3be186cd2357406eec123c1c2fa8dc47d84e2855f36255e8d4fb483a1fd3e8307e29a5d4d931c58c12943a06913ef2617e15e03791541328409eef817555af29faa17b69be0cda06aa5d6c316504da942fe1c7ae610fdd387b1458bf8374b7c84e3e559d2f64a43b14928d8828511f75047f2dfa90f9dc178a13b2e3d64b64067e9b928bab3a5cdf782b3b2462190e3dd55eb651fa68b82cf3e2bdf0d5930593b83d26f68cca2b0a8ad8072daa50d059e5265f31a00d3c6f487b217d103c0096bb90dace16c053374c99d7b5c1bf0b79fb01391b3cb6e43786d2c422088bd6cdcb797fc25e3d44a5114d7423d041518a86adcb29355c492452db820292814f1ea8b07311dabbb5a5525eba70349898a44a4b1a29d9462ae773d8f4335198cceeedc525eb03e07c178b1f1da27062f514856e1e7406a2371d643fbb29ba19607df3f44d3388821d7af02bc3eb5163a512d9b305461ce19d9c6081f817f7a06a263af97eda349fd92e5fffeaf52aebfbd517a9e7abcbce136e62b6c5007dc0326ab068f7241cb85b81e0ceab01f688f4244daae252fa5d5af551eaf81a3599015f24fd22830510c5590104949541b07def7aaed96a51d1e842b480d90014e118ae4f080c63fb7aa1ff7fd38dda1a2ff44cf46b1cbd7255e53ff4c597c5f5c7ab52a38017e98894b6f20f71d6064915c354fd11076d44d9fe6894442faa204f01fe4fe3f69c26234664d07f77e1ce3a00cc79c8604b5293f57e671dfb55473cd0f673c404b9104b8471b476c9384a776e9a91fc4ac5956fe089ae7f405d9dd3608c63253806dbbd79d7bd99bab40263320e251eeef6c62d40619ea2aadb3b27f0e1f46081299e5c5089ae9d9d27bfd3e74374634f713c8988ad29a73a0ac9131b79febc7dc0dc915a26039cbd573f7022b17f919f887930e19b20d04f2056a5b2efc5c914a05fd5630452be1b5d1f102d3141ecab8393e248406d5ac31809f879cc2dcf4b09cef60dfcd44208025233561c2d7c029d5cd8922b1331b764267e3572e887f7c8f8cf355e6a30e9fadf030581b159d1125241c1a9d5cd62ab9a4fa97c92230794376fe389419b71d9faf0a9e725ae1496a963938fe0f1fc871eced0bb5c5397770ca6cb42183fd2bc1553b6ccf8acdf4170f4820a437898d2c42145391310bfa802d914f1d623a2119eef5ee7392e4f6d6225e2ccb2409b4d355281dabe9830c9b27cd393bf5913de73d3cb3a2c0f895a6fc944c361a3d0efc08cc1d509994f5352b9a013cd474aaa6cbe27a1e71d31836214aebf66bfc57770a0ee15a6ccc5280b96aad1c6e3bca184fcb88ca2cb103082fd71c4864ad512fd8936682bbfc6e0236d10a740584fed0404cd9075157b17d7e2646fb39a4385c2849d068524a11f56b85a72fabe33aeed1ba2831dcad9f22552c48648624b1f93e163297fd4dcd622179bc3ad6a62a35c173f232a6b8d59651fb297091b9b86ba129ff9ef311210104a6312626dcc17b7121bc42779110acdf1e5c007af05c784c0a6594c0f9668d526e7927c197fe2e88875434b1b7d03820142a83506cdc3609fedadca2fca7691a989b24b29226a87351efaa31fe4835da8fb3bb0baaf5a1b43ca3eff31c999a5f43af8392bdc1b672e2753d1535ee4c232434f920da4e77ecc4a8ac61f240c41dceb6c582173c8dba3ae133395c38b564cf8497471bef7c975ddacec23f4ae8dd2862061237295e5e5ccabcb7a310369ab1a3a4f7a621900207dcc4df2d657a83209680c70f182f6e4361d9725ad1a4f37537a434adf8a539f0a684c316b39c78856164563c06a30c012a4152a5870b96b58091d70826b9cd5e36df376745c4f731c86da121deeb9102fcc76f2cf6fe9a27676441ad2f395ed84034b1e4109d9024f50f0f1a9e4cb894258b21e21e8aa97d0bc5fdec519329104086652afb573658b8343a7dfc7b40a86125cdfc674d9243869a448b1403858f17a4d3a97f02928ea137a8377c4add110c2ebde72398e28ff7d71d2fda03cac683a6391fc61bed6231972351e43d7dcb484b9158d873223a89dacf36ea81b5c7d6dac645e760829e0b7a2874f31cb95af09bc757e6377d295e8c332133222a7bad5441ace83bc0abfe8829925ced727c165ea7e76386b56f16f27d2e86223e4fadcea5c4eb9b1fa081a5d00ec64860c2bad335c62ed36394ddc601a75bdf366283d64dc0b7cddca1298616d5e87706a6558826e8e4c3fb3e3cf201d97df735717b5f1171125274315703478c8bf0e3870a2ce2510675b9d8997b23b113dc52eb2c12c8ff54300455b7e26c181213071b42f74f4ab15d525fd949edf2d99da530476446eefd7be3c369ad7715f6853541c19f35e4465e20fe8f2c37f4bfb85542a5cd18247486075ba7b97f0b5e528b2f0b356e0947e63007e591f40f87fe2c48a7fb3848c1e30bbd6f4c6cf5df6de3957218d91e7bb1e0364907251e16b7595d3ae3b850f2458b2cbcf139f4d7a6049fa8c29a3ff90b5ff5a51f52681a39b22b288850e8bb71457c349909a9bc305d2f82d71ade8a405aa437d8b1bf8b5d963b917d1270befbfbd59ae00d2b05aa3c012f4b896df7527f8056212c4865fa7ee37b34b58c6367f481cef3f12a08ec4a975aeda9f32615c7bbe59bb14021c5e18a0bdd3395fd8efb2b3cefb72a641fed7d3c8ec85ffafae584e78eea82d1df614dea8a6e851fb88f1abd7a6bccde7aa091f7a6814ded87a34b27bb5a964f555d858683735681d67325fd9e46d641784c7acdd7bf26af1df30311a595c09e7762dba5605069507e4ee84c200ff07ac8a69d7e65e7af8654268257a3c7710964ed0b4a45c258210e40917df14ea168f3c8658bf8dadbf9d4d572f3ca210408927c8845d1d2505bd67d919cd861469587f4fa76c9e1295bddbbdf4703dff43b61f833fa492d023f0cee561e604db4dc34a896d758d4f8b83c255a51de01404d3025d96560e861a9c7fe6e087fc38935e8668532132c291328d70b743c22774c372be865f0b2858e45c65951b59a77888288ac5d41a362696113c8f14e9703099a8271538a4f701dc7ac1f1b0e64d2f9d875c6c6117343590af6bc0ccf43e9b403fc1bf11917a39051c90a5e7f37d68732dc67a268e489cc3baf0ca1215f5aa29453789d96d70366b363aae57dbdb7e3a582b5c2f4bb11b6b2ce18322a22e99e1ff8ee01b554d51b6a27902fdeb9ce063eb6be9a703a08a6520cdfbda5f60e69be367e22a41d4f51f1207d2c72d57f6683c177bda3eb2a468bde532390d7f934c1d09ce5bf02a30c579b1b1ba3f9bf621ef76a4cd36798b42f43376d437e546c3591e37a8fb9c73e4358d25b8bd2d8e651cfceabffa0d17d09cda38d5ae7ddb2e8139f0d930be7aa68950ba48dd5deb7a956aecf70cf4cd5d8e9fe22137525c51ece1a197fc2525e6536beb8fe699cbd35aba1bcdcf836c29d57f2404756cacd78cbe0fb8b9dd6ab4d8cb5b00de94cc60eab47099b0c4dc9581dae961fbf699c78bce844e60ed218c766ebfc585bb37a80119ff755e6d20e5c485b39d0008f8744e37d302189caca45cd8b829de6f1643eb1f08492f3326cceb55f4b7a65092363b44d421dd6bbef1977fa6df48c3776b638f445e1cacc5d55044222c23373f6d95f76e81e0d4b9885641a83338152b1eb6f4f02cd5e88f732e9f2cee324f3244f2a31b01f2b88a6f4b0b138abf4e758349b2ddc556ba3ac03b65cac7c9fdb7b62da15a08e5ffcb7ea9b6a8bfea18d65b7d28a68eebc67c55637dc0f84820140afdd50f7ec730e59c42f086e6fd8516a7da5a572fe688a8e83cf989cba3eb6ccd31f0112a54e920ec0fb507203c08cb3340e0e0427a4b0ff825900e1d2853583f1f70147cc209a838fb16f64309737fc15251a29e84868432c90582a836b555e0cf1752a46c604a9aa7b53699eb30a680d0bb98eb364d2c5b0f1da4ad687ab05604aa309ac36939425c913ce8350fc3bffdb56b6269792f79e26291bcd5f2edbda3ec68b2cf5318fc10ff9cfd07a1719899f226b932fc3fe66ada644a62d1f62aac9710467a279f31ec309c178a12b31db0dc4b1fa27c1daa3d47e572eba5e958ea2cdc1f994cd94dc80e2cf81fc066f4cda87b98ba89688863dcefb53e7e65f3654c8396b91c8cf506143800933e420381a2a346f85373d9d0b9c5becc44496fc5120352cc5a6cde7562b247f9325189ca1baf0c386bb9bcc6488bb69d18364c6d31b91101f4f19948e0d9eb7b13ceeeaa0c682170906637d8dd382e9665c56ba3f3e89fc4aa6dd79eb49569420289af9bebe42127d8891f19cbbaab069708323fe07352c8a10205266b1e834235db9a0b7544e15ea0ffba1d46f338deced74f8d8104cb508a06a6e7a12817770d9befd7a261c71fef39dc81c49c9d060016bfcf6df53e56dfa09cbe220443ba7815e24ab5e0407aa1f38b86e0e843681c48ee6284fd298b606eb529e3262e3562114de82f8af9cc5f212a91ea3b502f5f2dfceb3c295c6c7312bfca0c0f28ca699c1ce85679597f488fba9432026a50c58334a79da395fe82c3bee4e344840c41c79222a3d7590c061aa843402a7c45b1e87e2a2423950b03e963726e0775ce7474b47413c0a5d77d4a551609d8210c8f1eccc4ba8b3051562ca9275ec436b3ac0ca0c6fa23cf276d92aad128803955aecfbaa0ac15380a48c499d421ebf6b3d2ca48132023ee9ed8992795358946d79b74fa0b1ff107ea07d8fad1138afcac5e9029a130208852d4bdcfab6a4a5ecccded6b062947ce276989e092b85e87cdad81e67a68582b8b833bb0b963d06cbe6acf1a8d7b4fa4a9b4e3501dc3c91e532cdc45a4cde7", 0x1000, 0x36af}, {&(0x7f0000000240)="20b43a51e15a4ce55b32292de842f2a0f7c6ee11f65c59ac5a7c992f5671fac19449b3", 0x23, 0x9}], 0x1262412, &(0x7f0000001900)={[{@fat=@fmask={'fmask', 0x3d, 0x8000}}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}, {@nodots='nodots'}, {@nodots='nodots'}, {@nodots='nodots'}, {@nodots='nodots'}, {@fat=@gid={'gid'}}], [{@fsname={'fsname', 0x3d, '/dev/adsp#\x00'}}, {@permit_directio='permit_directio'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_type={'obj_type', 0x3d, 'wlan0}wlan1#'}}, {@obj_user={'obj_user', 0x3d, '/dev/adsp#\x00'}}, {@measure='measure'}, {@euid_lt={'euid<', r3}}, {@euid_gt={'euid>', r4}}, {@fsmagic={'fsmagic', 0x3d, 0xf1}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x4b564d03, 0x1]}) r6 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x2, 0x0) r7 = getuid() ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000000100)={0x3, @null, r7}) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc028ae92, &(0x7f0000000340)) 10:35:09 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000340)) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/status\x00', 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) ioctl$NBD_DISCONNECT(r1, 0xab08) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)=0x2) r4 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x4000, 0x0) setxattr$security_ima(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@sha1={0x1, "77fae9d5a6fd839e934b397109a12ce588ece08f"}, 0x15, 0x2) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000500), 0x4) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000300)) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000480)=0x7fff, 0x4) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000280)=""/49, 0x31}], 0x2}}], 0x1, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000100)={0xca, "20cd8e88621bd7e713a29905da8fd15dae44a86e019710fba8ed2a7c6ac7a898", 0x3, 0x800, 0x4, 0xe04800, 0x201, 0x8}) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000004c0)=0x4, 0x4) 10:35:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x200400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x3, {0x40, 0x3f, "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", 0x4b, 0x39ed800, 0xb8d, 0x5, 0xffffffff, 0x79a, 0x68ea, 0x1}, r2}}, 0x128) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000040)={0x7f, 0x2, [0xc0010015, 0x80000]}) 10:35:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) write$tun(r0, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x15aa) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:09 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:09 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'ifb0\x00', 0xffffbffffffffff5}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000340)={'ifb0\x00\x03\x00`\x00\x00\x00`\x00\x00\x00z'}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000200)={0x4, [0x5, 0x2, 0x4, 0x719e]}, &(0x7f0000000240)=0xc) r2 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0xb, 0x2280) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000380)={[], 0x1, 0x71bb, 0x2ff, 0x0, 0x4, 0x100000, 0x1f000}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xee00, 0xee00]) fchown(r2, r3, r4) connect$vsock_dgram(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) fcntl$getflags(r0, 0x40c) 10:35:09 executing program 0: socketpair(0x8, 0x4, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@rand_addr, @local, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000180)={@empty, 0x72, r3}) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x3, 0xffffffff, 0x10000, "3196a2e8ad5cd5acadcc85afc085b045d90448cd6ed2483ccd0a38cefa375d1516942efb58101b314889df35d69b1f6df54e3c38fcc9414928f3fe81803b61", 0x3d}, 0x60) getsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000240)={'nat\x00'}, &(0x7f00000002c0)=0x78) 10:35:09 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1327.303275][T12042] *** Guest State *** [ 1327.320265][T12042] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1327.380096][T12067] device ifb0 entered promiscuous mode [ 1327.399910][T12042] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1327.459165][T12042] CR3 = 0x0000000000000000 10:35:10 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000058, 0x0) [ 1327.482058][T12042] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1327.550174][T12042] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 10:35:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @random="c6e66a4e2a75", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x2c, 0x0, @empty, @empty, {[], @gre}}}}}, 0x0) [ 1327.602428][T12042] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1327.683362][T12042] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1327.738579][T12042] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1327.783869][T12042] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1327.848596][T12042] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1327.910969][T12042] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:10 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1327.970619][T12042] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1328.039514][T12042] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='ip6gre0\x00', 0x18b) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x7, 0x4) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000180)=0x764a) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r2, r2, 0xc, 0x1}, 0x10) [ 1328.126256][T12404] *** Guest State *** [ 1328.136778][T12042] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1328.254386][T12042] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1328.277111][T12404] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1328.297218][T12042] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:10 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1328.368203][T12404] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1328.463079][T12042] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1328.534614][T12404] CR3 = 0x0000000000000000 [ 1328.546798][T12042] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1328.635644][T12404] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1328.666538][T12042] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1328.704642][T12404] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1328.778030][T12042] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1328.779601][T12404] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1328.818512][T12042] Interruptibility = 00000000 ActivityState = 00000000 [ 1328.853814][T12042] *** Host State *** [ 1328.866024][T12404] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1328.889153][T12042] RIP = 0xffffffff811b4e70 RSP = 0xffff8880581078e0 [ 1328.910277][T12404] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1328.935522][T12042] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1328.954245][T12404] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1328.974292][T12042] FSBase=00007f8855b62700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 1329.030340][T12404] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1329.055320][T12404] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1329.074004][T12404] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1329.075536][T12042] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1329.086096][T12404] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1329.091023][T12042] CR0=0000000080050033 CR3=000000009f12c000 CR4=00000000001426f0 [ 1329.101722][T12404] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1329.121004][T12404] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1329.128984][T12042] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1329.131912][T12404] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1329.137688][T12042] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1329.149538][T12404] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1329.154801][T12042] *** Control State *** [ 1329.167035][T12042] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1329.167936][T12404] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1329.175236][T12042] EntryControls=0000d1ff ExitControls=002fefff [ 1329.189039][T12404] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1329.190227][T12042] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1329.197239][T12404] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1329.205398][T12042] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1329.218891][T12404] Interruptibility = 00000000 ActivityState = 00000000 [ 1329.221241][T12042] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1329.233850][T12404] *** Host State *** [ 1329.235705][T12042] reason=80000021 qualification=0000000000000000 [ 1329.239370][T12404] RIP = 0xffffffff811b4e70 RSP = 0xffff88805ea478e0 [ 1329.246824][T12042] IDTVectoring: info=00000000 errcode=00000000 [ 1329.259113][T12404] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1329.260077][T12042] TSC Offset = 0xfffffd36bd48df10 [ 1329.266870][T12404] FSBase=00007f8855b20700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 1329.272320][T12042] EPT pointer = 0x000000008f02801e [ 1329.286156][T12404] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1329.293178][T12404] CR0=0000000080050033 CR3=000000009f12c000 CR4=00000000001426f0 [ 1329.306443][T12404] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 1329.314533][T12404] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1329.324950][T12404] *** Control State *** [ 1329.329273][T12404] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1329.336820][T12404] EntryControls=0000d1ff ExitControls=002fefff [ 1329.348736][T12404] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1329.356555][T12404] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1329.369708][T12404] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1329.377153][T12404] reason=80000021 qualification=0000000000000000 [ 1329.377163][T12404] IDTVectoring: info=00000000 errcode=00000000 [ 1329.377169][T12404] TSC Offset = 0xfffffd36500c3313 [ 1329.377178][T12404] EPT pointer = 0x0000000079e9e01e 10:35:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x10001) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:12 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xa, 0x8, "30210bb2de2a99eec3486e0165410a6c0104000000000000fb5126c0d2050634000300", "e3bd70f7026e94ec1b2b1d73213df5ef570ea448508a72ee10cfc39ad4b7eb2b", [0x74, 0x80]}) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x10000) 10:35:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x40000100]}) 10:35:12 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:12 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:12 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x337, @loopback, 0x100000000008}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0x2000000000000000) write$rfkill(r0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x2, 0x2, 0x1}, 0x8) [ 1329.644617][T12763] *** Guest State *** [ 1329.659867][T12763] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1329.682248][T12763] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 10:35:12 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007f6, &(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x4, 0x459fef82, 0xfffffffffffffff7, 0x7, 0xff}) [ 1329.693358][T12763] CR3 = 0x0000000000000000 [ 1329.701360][T12763] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1329.719361][T12763] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1329.733982][T12763] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1329.747118][T12763] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1329.755016][T12763] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1329.763324][T12763] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:12 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1329.818193][T12763] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1329.838771][T12763] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1329.884197][T12763] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1329.918180][T12763] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1329.946904][T12763] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1329.962669][T12763] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1329.975291][T12763] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1329.987145][T12763] IDTR: limit=0x00000000, base=0x0000000000000000 10:35:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1a, 0x4, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000280)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380)={r0}) r3 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0xffffffffffffff2d, 0x8000) openat(r3, &(0x7f0000000240)='./file0\x00', 0x40, 0x109) sendmsg$tipc(r2, &(0x7f0000002140)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10, 0x0}, 0x0) [ 1329.998607][T12763] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1330.010074][T12763] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1330.033387][T12763] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1330.075125][T12763] Interruptibility = 00000000 ActivityState = 00000000 [ 1330.119526][T12763] *** Host State *** [ 1330.136192][T12763] RIP = 0xffffffff811b4e70 RSP = 0xffff888059acf8e0 10:35:12 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1330.162924][T12763] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1330.182031][T12763] FSBase=00007f8855b62700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 1330.228152][T12763] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1330.253504][T12763] CR0=0000000080050033 CR3=0000000092516000 CR4=00000000001426f0 10:35:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xc0000, 0x0) recvfrom$ax25(r1, &(0x7f00000000c0)=""/217, 0xd9, 0x2, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000023c0)=""/4096, 0x10}], 0x1}}], 0x2, 0x0, 0x0) [ 1330.281022][T12763] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1330.317183][T12763] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1330.340514][T12763] *** Control State *** [ 1330.379324][T12763] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1330.443986][T12763] EntryControls=0000d1ff ExitControls=002fefff [ 1330.472820][T12763] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1330.513607][T12763] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1330.553884][T12763] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1330.570720][T12763] reason=80000021 qualification=0000000000000000 [ 1330.643111][T12763] IDTVectoring: info=00000000 errcode=00000000 [ 1330.661633][T12763] TSC Offset = 0xfffffd357a13d571 [ 1330.666932][T12763] EPT pointer = 0x000000008f8eb01e 10:35:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x7f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000001c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r5}) 10:35:13 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:13 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:13 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x0, 0x201000}, 0xfffffffffffffdfe) mmap$xdp(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x7ffffffc) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x42000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="11000100aaaa00000000"]) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x8000, 0x4) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000100)=""/102) 10:35:13 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet6(0xa, 0x803, 0x2) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) [ 1330.892562][T13638] *** Guest State *** [ 1330.897281][T13638] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1330.911486][T13638] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1330.925958][T13638] CR3 = 0x0000000000000000 [ 1330.934352][T13638] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 10:35:13 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)="21a62198b0562e4286a7b65ae1deea94157cdc088638c646bcff6fd71d48f17df774fdd3ba71c61f9e0bed66fd12e35aade937e76a7eb0d4aedd50eb660a763c9e115d2419de70762fe3c1210e39fa7dfeaaf1601d0af66c9ac5cf8e46359e5864beb60b81181056eb8533ba2e805a948ff385b95acc5c230224dd7c5791eb75cc23b00807fca99e5e8f17b68177ba649a83f9427c2cbf64538d937e73ef0efda9e1d88750a7d7e0724215b5691cc50bba32bcbd327c758429c42b62d5e1d95d380cc69349d8165503891911951bdffe048816f203fc7293c0214de82d660fdf5b666e2b6dd50e6e", 0xe8}], 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) [ 1330.954129][T13638] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 10:35:13 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x7f', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1330.999524][T13638] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1331.024682][T13638] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1331.054342][T13638] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 10:35:13 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:13 executing program 5: perf_event_open(&(0x7f0000000ac0)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x9e0000, 0x1, 0x5, [], &(0x7f0000000140)={0x990968, 0x8, [], @p_u16=&(0x7f00000000c0)=0x100}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40096102, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e0000002600812de45ae087185082cf0224b0eba06ec4007a2300000900080000000000000872183b0000000000", 0x2e}], 0x1}, 0x0) [ 1331.096033][T13638] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1331.126031][T13638] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1331.161313][T13638] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1331.184072][T13638] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1331.223108][T13638] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1331.248790][T13638] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1331.251099][T14057] QAT: failed to copy from user cfg_data. [ 1331.260022][T13638] GDTR: limit=0x00000000, base=0x0000000000000000 10:35:13 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x15) r2 = socket$inet6(0xa, 0x6, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000140)={0xeb4a, 0x10000, 0x100000001, 0x3, 0x1c, 0x5}) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x4, 0x401}, {0x100000001, 0x80}], r3}, 0x18, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0) [ 1331.275580][T13638] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1331.286019][T13638] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1331.296429][T13638] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1331.306459][T13638] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1331.314653][T13638] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1331.324054][T13638] Interruptibility = 00000000 ActivityState = 00000000 [ 1331.332042][T13638] *** Host State *** [ 1331.345241][T13638] RIP = 0xffffffff811b4e70 RSP = 0xffff88808dc578e0 10:35:14 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\xff', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1331.370664][T13638] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1331.388662][T13638] FSBase=00007f8855b62700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 1331.398475][T13638] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1331.405924][T13638] CR0=0000000080050033 CR3=0000000086679000 CR4=00000000001426f0 [ 1331.418226][T13638] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1331.445466][T13638] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1331.468030][T13638] *** Control State *** [ 1331.472581][T13638] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1331.480373][T13638] EntryControls=0000d1ff ExitControls=002fefff [ 1331.494048][T13638] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1331.503148][T13638] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1331.512398][T13638] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1331.521147][T13638] reason=80000021 qualification=0000000000000000 [ 1331.531586][T13638] IDTVectoring: info=00000000 errcode=00000000 [ 1331.546059][T13638] TSC Offset = 0xfffffd34cfdeccca [ 1331.557176][T13638] EPT pointer = 0x00000000a9a2901e 10:35:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f00000000c0)=0x8001) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:14 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:14 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) eventfd(0x101) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x2, &(0x7f0000000300)=0x1) socketpair(0xe728e716eae4c44c, 0x1, 0x7d07dd7b, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000200)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) r2 = creat(&(0x7f0000000540)='./bus\x00', 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000240)={0xffffffffffff07e1, 0x8, 0x8, 0x40, 0xa588, 0xfff, 0x6}) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0xb) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="2d696fff"], 0x4) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x80000) 10:35:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:14 executing program 0: futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x3000, 0x1000}) futex(&(0x7f000000cffc), 0x1, 0x8, 0x0, 0x0, 0x0) 10:35:14 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x6) ioctl$int_in(r1, 0x800000c004500a, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000000)={0xffffffffffffff1b, 0x12, 0x100000000004000, {0x8, 0x0, 0x800003e, 0x0, 0x803e0000}}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x9, 0x4, 0x4, 0xfffffffffffffffe, 0x0, 0x1}, 0x3c) [ 1331.968265][T14447] *** Guest State *** [ 1331.975143][T14447] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1332.008805][T14447] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1332.021434][T14447] CR3 = 0x0000000000000000 [ 1332.026831][T14447] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1332.035040][T14447] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1332.044838][T14447] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1332.053450][T14447] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1332.062481][T14447] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1332.073001][T14447] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1332.097409][T14447] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:14 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1332.123283][T14447] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1332.173503][T14447] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x404}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x3}, &(0x7f00000001c0)=0x8) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="24000000180007041dfffd946f610500022800001f95d10a554fefbfe10016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff2a47e23f7efbf5400000000", 0x4c}], 0x1}, 0x0) [ 1332.219361][T14447] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1332.248242][T14447] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1332.283269][T14447] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1332.302182][T14447] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:14 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0xfffffffffffffffc, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x2f5}}, 0x3) [ 1332.338808][T14447] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1332.359278][T14447] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1332.390798][T14447] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1332.452346][T14447] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1332.527404][T14447] Interruptibility = 00000000 ActivityState = 00000000 10:35:15 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1332.568283][T14447] *** Host State *** [ 1332.572383][T14447] RIP = 0xffffffff811b4e70 RSP = 0xffff88803a3978e0 [ 1332.588398][T14447] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1332.609795][T14447] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1332.619009][T14447] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1332.634673][T14447] CR0=0000000080050033 CR3=0000000098e0a000 CR4=00000000001426e0 [ 1332.681574][T14447] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1332.711827][T14447] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1332.722357][T14447] *** Control State *** [ 1332.726721][T14447] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1332.740418][T14447] EntryControls=0000d1ff ExitControls=002fefff [ 1332.746800][T14447] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1332.760961][T14447] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1332.772478][T14447] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 10:35:15 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1332.802569][T14447] reason=80000021 qualification=0000000000000000 [ 1332.831514][T14447] IDTVectoring: info=00000000 errcode=00000000 10:35:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1332.910795][T14447] TSC Offset = 0xfffffd343e8f17ea [ 1332.945747][T14447] EPT pointer = 0x0000000092edf01e 10:35:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x400000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x9dd, 0x0, 0x23}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:15 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{}, {}, {}, {}]}) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2100c}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x134, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4eb13a23}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x13}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6000000000000}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xde}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) sendto$inet6(r1, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x101aa) 10:35:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 1333.293354][T15007] *** Guest State *** [ 1333.297559][T15007] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1333.308078][T15007] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1333.340234][T15007] CR3 = 0x0000000000000000 [ 1333.352854][T15007] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1333.362432][T15007] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1333.370732][T15007] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1333.378232][T15007] RFLAGS=0x00000002 DR7 = 0x0000000000000400 10:35:16 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1333.385307][T15007] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1333.398468][T15007] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1333.418316][T15007] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1333.427253][T15007] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1333.441797][T15007] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1333.464080][T15007] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1333.473697][T15007] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:16 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000540)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) [ 1333.491964][T15007] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1333.508083][T15007] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1333.517521][T15007] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1333.530720][T15007] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1333.555103][T15007] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1333.574017][T15007] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1333.616086][T15007] Interruptibility = 00000000 ActivityState = 00000000 [ 1333.653597][T15007] *** Host State *** 10:35:16 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x4000000000001}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) r1 = dup2(r0, r0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000)) pread64(r0, 0x0, 0x0, 0x0) 10:35:16 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1333.663206][T15007] RIP = 0xffffffff811b4e70 RSP = 0xffff8880539378e0 [ 1333.673082][T15007] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1333.685475][T15007] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1333.696857][T15007] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1333.718336][T15007] CR0=0000000080050033 CR3=000000008df99000 CR4=00000000001426e0 [ 1333.742584][T15007] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1333.763888][T15007] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1333.784937][T15007] *** Control State *** [ 1333.792746][T15007] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 10:35:16 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1333.830721][T15007] EntryControls=0000d1ff ExitControls=002fefff [ 1333.852683][T15007] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1333.868004][T15007] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 10:35:16 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000540)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) 10:35:16 executing program 0: clone(0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x200000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x0, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) ioctl$VT_RELDISP(r0, 0x5605) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x7fffffff) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) syz_execute_func(&(0x7f0000000100)="f3e100def9575c8ac2c2c9734e424a2664f0ff064a460f3038082e67660e50e94d00c9c9c4625dbae5feabc4aba39ddf4507e50c420fae9972b571112d02") unlink(&(0x7f0000000400)='./file0\x00') ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000003c0)=0x29, 0x4) [ 1333.888958][T15007] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1333.922619][T15007] reason=80000021 qualification=0000000000000000 [ 1333.931495][T15007] IDTVectoring: info=00000000 errcode=00000000 10:35:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1333.971719][T15007] TSC Offset = 0xfffffd3386cf50e7 [ 1333.978564][T15007] EPT pointer = 0x000000008e46401e 10:35:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:16 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:16 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) [ 1334.246120][T15922] *** Guest State *** [ 1334.258518][T15922] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1334.279908][T15922] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1334.297381][T15922] CR3 = 0x0000000000000000 [ 1334.305302][T15922] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1334.313782][T15922] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1334.322140][T15922] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1334.329632][T15922] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1334.337265][T15922] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 10:35:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f0000000400)=""/236, 0xec) [ 1334.345095][T15922] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1334.367522][T15922] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3be, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffffffffffe, @empty, 0x2}, 0x1c) sendmmsg(r0, &(0x7f0000000080), 0x400000000000104, 0x0) [ 1334.397294][T15922] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1334.413408][T15922] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1334.435279][T15922] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1334.455091][T15922] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1334.464702][T15922] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1334.475397][T15922] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1334.486192][T15922] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1334.498246][T15922] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1334.508131][T15922] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1334.515737][T15922] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1334.524697][T15922] Interruptibility = 00000000 ActivityState = 00000000 [ 1334.537692][T15922] *** Host State *** 10:35:17 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x10, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) [ 1334.555698][T15922] RIP = 0xffffffff811b4e70 RSP = 0xffff88805df7f8e0 [ 1334.581146][T15922] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1334.594302][T15922] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1334.635661][T15922] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1334.666775][T15922] CR0=0000000080050033 CR3=000000008212f000 CR4=00000000001426e0 [ 1334.724486][T15922] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1334.733781][T15922] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1334.747166][T15922] *** Control State *** [ 1334.751851][T16277] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1334.783254][T15922] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1334.794853][T15922] EntryControls=0000d1ff ExitControls=002fefff [ 1334.803371][T15922] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1334.815846][T15922] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 10:35:17 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1334.827683][T15922] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1334.844979][T15922] reason=80000021 qualification=0000000000000000 [ 1334.858246][T15922] IDTVectoring: info=00000000 errcode=00000000 [ 1334.873609][T15922] TSC Offset = 0xfffffd330658f39f 10:35:17 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x23, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1334.893836][T15922] EPT pointer = 0x000000008ae9a01e 10:35:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "19c769"}}) 10:35:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000500)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0D\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa9\f\xe7\xaat\xf8\x8c$5\x99\xb0\xd8\x93S\xffD\xf40\x87\xc5I\xbc\x0f\xc5\xd8\xd7\xa6P\xdfu`\x97^\x1eWX\x87_e;\r:\x18\xb3Y\xa5AH?=\x1b@\xc1\xa7I\xb8\x19:\xb1\xd2v\xea\x93&\xa5Q\xba\xc2<$\xc6V\xcclS\a\xb9C\x80\xb4\xb5\xe4m}\xa0\xb1\xe8\x95\xae\xeek\x86\xde\x1d\x9e\"\x10\x1d\xa8\xaf\x03\xab\xe4\x9e\xc4,cK\xd49+\x1el4\x86+G[\xfdC\n]Vn!\x8fv\x15\b\xf02\xba\xa6\xd4\a;\'K\x11\x19\'W`9H\xc7\xd0\n\x80|\x96\x0fW\xeb)\xfb\xa9\xb8Y\x9e5l\xc8\x86\x0f\xe0!\x94\xfa|\xac\xfe\x99\xda\xbfn\xfe\xb1\xd7X\xa3/\xaa\xb3\xaax\x00\x00\x00\xcc,#\xe4}\\\xe3\b\x99B\x93\x14\x98\x81\xa2L\xe1\xe5r\xb42p\xf3%X\xa7\xf1\xe37=\xdf\xfexR\xb5\xccI\xdcE[XN\xf5=\x1fd\xbc\xf2\xbf\x95H\x18\xc9,\xdaE\xfa\xd7\x90\xfd\v\xb8') [ 1340.339259][T20598] CR3 = 0x0000000000000000 [ 1340.359011][T20598] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 10:35:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 1340.393722][T20598] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1340.451035][T20598] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1340.468619][T20598] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1340.483566][T20598] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1340.496294][T20598] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1340.514053][T20598] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1340.524669][T20598] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:23 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'v[th1_\x10\x00\x00\x00\x00\x02 \x00', 0xa}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) 10:35:23 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) [ 1340.548076][T20598] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1340.558221][T20598] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1340.570017][T20598] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1340.579854][T20598] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1340.605509][T20598] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1340.632382][T20598] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1340.665204][T20598] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1340.677333][T20598] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1340.704139][T20598] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1340.714876][T20598] Interruptibility = 00000000 ActivityState = 00000000 [ 1340.745004][T20598] *** Host State *** [ 1340.749198][T20598] RIP = 0xffffffff811b4e70 RSP = 0xffff88809868f8e0 [ 1340.761909][T20598] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1340.769333][T20598] FSBase=00007f8855b62700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 1340.784548][T20598] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1340.791391][T20598] CR0=0000000080050033 CR3=000000007cbca000 CR4=00000000001426f0 [ 1340.804777][T20598] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 1340.812319][T20598] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1340.824671][T20598] *** Control State *** [ 1340.828984][T20598] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1340.836448][T20598] EntryControls=0000d1ff ExitControls=002fefff [ 1340.848387][T20598] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1340.856132][T20598] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1340.868951][T20598] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1340.876381][T20598] reason=80000021 qualification=0000000000000000 [ 1340.887243][T20598] IDTVectoring: info=00000000 errcode=00000000 [ 1340.895388][T20598] TSC Offset = 0xfffffd2fca05041d [ 1340.904265][T20598] EPT pointer = 0x0000000088da101e 10:35:23 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:23 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:23 executing program 0: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000014ff8)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfffffffffffffd6b) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 10:35:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:23 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@in6={0x1c, 0xffffffffffffffff, 0x0, @empty={[0xeaffffff, 0x2, 0x0, 0x3]}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000200)="088bc04f08d572e9", 0x8}], 0x1}, 0x0) r1 = dup2(r0, r0) sendmsg(r1, &(0x7f0000000840)={&(0x7f00000002c0)=@in6={0x1c, 0xffffffffffffffff, 0x0, @local, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[{0x68, 0x1, 0x20, "1e14e866e178d2f2cf1756703025d80d4113d2bb0d94f8eca528a2f4c3ee483405f301483d0c747b9889858ec737f904f3187f94a991fb9f79c4e445a4331132ab859879babbbcbb440fb2c9d72cde4479bf624b34eb"}], 0x68}, 0x4) 10:35:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f00000000c0)={0x8000, 0x0, 0x2, 0x402}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) write$P9_RSTAT(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="3f0000007d008000000001040021335b8bb09e000200030000000000000001817f0000000004000000800000000000000000000001005d040070726f6300000000000000"], 0x3f) mprotect(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x2) 10:35:23 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x4026, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:23 executing program 0: 10:35:23 executing program 0: [ 1341.325085][T21361] *** Guest State *** [ 1341.339358][T21361] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1341.361089][T21361] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 10:35:24 executing program 5: [ 1341.376978][T21361] CR3 = 0x0000000000000000 [ 1341.382787][T21361] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1341.390695][T21361] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1341.399052][T21361] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1341.406053][T21361] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1341.413996][T21361] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 10:35:24 executing program 0: [ 1341.422271][T21361] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1341.432772][T21361] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:24 executing program 5: [ 1341.476080][T21361] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1341.505098][T21361] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1341.520332][T21361] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1341.566891][T21361] GS: sel=0x0004, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1341.598297][T21361] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1341.610794][T21361] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1341.626880][T21361] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1341.636575][T21361] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1341.648398][T21361] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1341.655698][T21361] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1341.664129][T21361] Interruptibility = 00000000 ActivityState = 00000000 [ 1341.671293][T21361] *** Host State *** [ 1341.675234][T21361] RIP = 0xffffffff811b4e70 RSP = 0xffff88805a7778e0 [ 1341.682117][T21361] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1341.689461][T21361] FSBase=00007f8855b62700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 1341.698225][T21361] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1341.704874][T21361] CR0=0000000080050033 CR3=00000000a94df000 CR4=00000000001426f0 [ 1341.712705][T21361] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 1341.720195][T21361] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1341.726953][T21361] *** Control State *** [ 1341.731163][T21361] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000c2 [ 1341.738670][T21361] EntryControls=0000d1ff ExitControls=002fefff [ 1341.744822][T21361] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1341.752503][T21361] VMEntry: intr_info=800000c9 errcode=00000000 ilen=00000000 [ 1341.759940][T21361] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1341.767389][T21361] reason=80000021 qualification=0000000000000000 [ 1341.774483][T21361] IDTVectoring: info=00000000 errcode=00000000 [ 1341.780694][T21361] TSC Offset = 0xfffffd2f3d32d533 [ 1341.785742][T21361] EPT pointer = 0x00000000a8e5c01e 10:35:24 executing program 5: 10:35:24 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xedc0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:24 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:24 executing program 0: 10:35:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000000c0)={0x1, 0x7, 0x6, 0xe44, 0xd, 0x0, 0xfffffffeffffffff, 0x1, 0x5, 0x1, 0x101, 0x7fffffff}) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r1, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:24 executing program 5: 10:35:24 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xf000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:24 executing program 0: 10:35:24 executing program 5: 10:35:24 executing program 5: 10:35:24 executing program 0: 10:35:25 executing program 0: 10:35:25 executing program 5: 10:35:25 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:25 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xff0f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') accept4$bt_l2cap(r3, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:25 executing program 5: 10:35:25 executing program 0: 10:35:25 executing program 5: 10:35:25 executing program 0: 10:35:26 executing program 0: [ 1343.336763][T21854] *** Guest State *** [ 1343.344842][T21854] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1343.376341][T21854] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 10:35:26 executing program 5: [ 1343.400223][T21854] CR3 = 0x0000000000000000 [ 1343.411830][T21854] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1343.429449][T21854] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 10:35:26 executing program 0: [ 1343.448203][T21854] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1343.465859][T21854] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1343.484417][T21854] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 10:35:26 executing program 5: [ 1343.493661][T21854] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1343.503009][T21854] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1343.514112][T21854] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1343.527506][T21854] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1343.536947][T21854] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1343.546319][T21854] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1343.562520][T21854] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1343.571929][T21854] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1343.598080][T21854] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1343.615510][T21854] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1343.636213][T21854] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1343.643813][T21854] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1343.675237][T21854] Interruptibility = 00000000 ActivityState = 00000000 [ 1343.689651][T21854] *** Host State *** [ 1343.693843][T21854] RIP = 0xffffffff811b4e70 RSP = 0xffff88805adff8e0 [ 1343.700947][T21854] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1343.708366][T21854] FSBase=00007f8855b62700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 1343.717070][T21854] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1343.724336][T21854] CR0=0000000080050033 CR3=00000000a92dd000 CR4=00000000001426f0 [ 1343.732388][T21854] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1343.744785][T21854] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1343.760308][T21854] *** Control State *** [ 1343.764657][T21854] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1343.772271][T21854] EntryControls=0000d1ff ExitControls=002fefff [ 1343.778695][T21854] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1343.786490][T21854] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1343.794065][T21854] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1343.801503][T21854] reason=80000021 qualification=0000000000000000 [ 1343.808588][T21854] IDTVectoring: info=00000000 errcode=00000000 [ 1343.814867][T21854] TSC Offset = 0xfffffd2e29deb623 [ 1343.820032][T21854] EPT pointer = 0x00000000a8f5b01e 10:35:26 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:26 executing program 0: 10:35:26 executing program 5: 10:35:26 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x100000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) fchmod(r0, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f00000001c0)) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x210, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40080) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:26 executing program 0: 10:35:26 executing program 5: 10:35:27 executing program 0: [ 1344.374453][T21994] *** Guest State *** [ 1344.379604][T21994] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1344.401796][T21994] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 10:35:27 executing program 5: 10:35:27 executing program 0: 10:35:27 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xf0ffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1344.423548][T21994] CR3 = 0x0000000000000000 [ 1344.428231][T21994] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1344.463128][T21994] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1344.507355][T21994] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1344.536736][T21994] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1344.590501][T21994] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1344.608959][T21994] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1344.624469][T21994] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1344.634696][T21994] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1344.649091][T21994] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1344.661688][T21994] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1344.672239][T21994] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1344.690330][T21994] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1344.702833][T21994] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1344.713489][T21994] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1344.724836][T21994] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1344.734955][T21994] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1344.744436][T21994] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1344.753924][T21994] Interruptibility = 00000000 ActivityState = 00000000 [ 1344.763152][T21994] *** Host State *** [ 1344.767056][T21994] RIP = 0xffffffff811b4e70 RSP = 0xffff888038c178e0 [ 1344.775024][T21994] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1344.782972][T21994] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1344.791963][T21994] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1344.798940][T21994] CR0=0000000080050033 CR3=000000008df3c000 CR4=00000000001426e0 [ 1344.806703][T21994] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1344.814431][T21994] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1344.822136][T21994] *** Control State *** [ 1344.826308][T21994] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1344.834678][T21994] EntryControls=0000d1ff ExitControls=002fefff 10:35:27 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1344.840945][T21994] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1344.848657][T21994] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1344.856023][T21994] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1344.856033][T21994] reason=80000021 qualification=0000000000000000 [ 1344.856041][T21994] IDTVectoring: info=00000000 errcode=00000000 [ 1344.856048][T21994] TSC Offset = 0xfffffd2d99809bd9 [ 1344.856060][T21994] EPT pointer = 0x000000008dfc701e 10:35:27 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:27 executing program 5: 10:35:27 executing program 0: 10:35:27 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfeffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:27 executing program 0: 10:35:27 executing program 5: [ 1345.243173][T22239] *** Guest State *** [ 1345.255206][T22239] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1345.265824][T22239] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1345.290215][T22239] CR3 = 0x0000000000000000 [ 1345.313224][T22239] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1345.327856][T22239] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 10:35:27 executing program 5: 10:35:27 executing program 0: [ 1345.339433][T22239] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1345.366549][T22239] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1345.384600][T22239] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1345.392519][T22239] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:28 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x1000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:28 executing program 5: [ 1345.413576][T22239] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1345.435726][T22239] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1345.459455][T22239] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1345.488770][T22239] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1345.518582][T22239] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1345.539980][T22239] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1345.552037][T22239] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1345.566982][T22239] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1345.577396][T22239] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1345.595863][T22239] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1345.607211][T22239] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1345.616492][T22239] Interruptibility = 00000000 ActivityState = 00000000 [ 1345.623769][T22239] *** Host State *** [ 1345.632713][T22239] RIP = 0xffffffff811b4e70 RSP = 0xffff888058fd78e0 [ 1345.642201][T22239] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1345.653846][T22239] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1345.677746][T22239] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1345.684720][T22239] CR0=0000000080050033 CR3=0000000092459000 CR4=00000000001426e0 [ 1345.696051][T22239] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1345.704319][T22239] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1345.714399][T22239] *** Control State *** [ 1345.718689][T22239] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1345.726114][T22239] EntryControls=0000d1ff ExitControls=002fefff [ 1345.735902][T22239] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 10:35:28 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1345.744898][T22239] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1345.755695][T22239] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1345.763074][T22239] reason=80000021 qualification=0000000000000000 [ 1345.770253][T22239] IDTVectoring: info=00000000 errcode=00000000 [ 1345.776483][T22239] TSC Offset = 0xfffffd2d202f8a69 [ 1345.781743][T22239] EPT pointer = 0x00000000a9a4401e 10:35:28 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:28 executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) r1 = dup2(r0, r0) sendmsg(r1, &(0x7f0000000840)={&(0x7f00000002c0)=@in6={0x1c, 0xffffffffffffffff, 0x0, @local, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[{0x68, 0x1, 0x20, "1e14e866e178d2f2cf1756703025d80d4113d2bb0d94f8eca528a2f4c3ee483405f301483d0c747b9889858ec737f904f3187f94a991fb9f79c4e445a4331132ab859879babbbcbb440fb2c9d72cde4479bf624b34eb"}], 0x68}, 0x4) 10:35:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000080), 0x400000000000104, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) 10:35:28 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x2000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000180)) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x2, 0xc0841) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x5, 0x0, [{0xa7f, 0x0, 0xffffffffffffffe0}, {0xbdf, 0x0, 0x8}, {0x785, 0x0, 0x1}, {0x972, 0x0, 0x3f}, {0xfff, 0x0, 0x3}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) [ 1346.265087][T22477] *** Guest State *** [ 1346.288169][T22477] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1346.318479][T22477] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 10:35:28 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = eventfd2(0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) [ 1346.343215][T22477] CR3 = 0x0000000000000000 [ 1346.358441][T22477] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1346.366043][T22477] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 10:35:29 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x181) r1 = memfd_create(&(0x7f0000000580)='\xe0\rode\x00\xf5', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c07) [ 1346.388364][T22477] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1346.395922][T22477] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1346.414403][T22477] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 10:35:29 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x3000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1346.443589][T22477] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1346.474739][T22477] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1346.485541][T22477] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1346.494806][T22477] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1346.504327][T22477] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1346.515980][T22477] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x10000, 0x8, 0x101, 0x81, 0x0, 0x6, 0x0, 0xd8, 0x38, 0x2eb, 0x0, 0x7, 0x20, 0x1, 0x6, 0x3, 0xdc51}, [{0x6474e557, 0x4, 0x764, 0xd390, 0x2b2, 0x3f, 0x3, 0x8}], "2a04851e9ee136db24ffe01d434fb17e6fd99cd7f9087bc120bbe10c2f14cf1997a8308948a9ffd8b26d093e2236fa05a9ebcc82348e977b020f877b4f3a740e526b533e1608186927c3648bc05481fe38f90c5a31df95a6e7834b1784ef6d1f8c15592e0ff3ed736942171da60f0460fb26564d20d04d91442092db6c1cf2ebd946cb73be72d705bcb41dda9b6c707452facf200e11fee3f7f527e4b7b0bf47d04c17dc56c704655ba72300c031629a23a33bd84c062de9666a723ca9098853138d678a74cf0d"}, 0x11f) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fd, &(0x7f00000001c0)="8130262bb804d4ad08d8e9dcf4c908a4188d63472f86b29f4850d70f92f8570c8b38c4f01413c6ef98d731c572b28b4d2746afba777702d32be4b874493a82c8ad9594de13859468536d95530610b8bd58582ef42714927b008ad9b8f8f9377a01b6c9389c5acb94465632f219ddef558003f229f48c8f789358ea5e4e6e036def1615e1204d563eec42e9bdf498bfad0e413940efb868d029ba68a9326c4c2906a0a81ca5761bec0c") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000, 0x8031, 0xffffffffffffffff, 0x0) [ 1346.556397][T22477] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1346.593584][T22477] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:29 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xff0f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1346.634290][T22477] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1346.673807][T22477] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1346.722702][T22477] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1346.735917][T22477] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1346.752234][T22477] Interruptibility = 00000000 ActivityState = 00000000 [ 1346.760503][T22477] *** Host State *** [ 1346.764845][T22477] RIP = 0xffffffff811b4e70 RSP = 0xffff8880532878e0 10:35:29 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:29 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x5000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1346.776597][T22477] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1346.799298][T22477] FSBase=00007f8855b62700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 1346.844518][T22477] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1346.878028][T22477] CR0=0000000080050033 CR3=00000000830a5000 CR4=00000000001426f0 [ 1346.898648][T22477] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 1346.911070][T22477] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1346.919984][T22477] *** Control State *** [ 1346.933025][T22477] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1346.953349][T22477] EntryControls=0000d1ff ExitControls=002fefff [ 1346.959893][T22477] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1346.967927][T22477] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1346.975487][T22477] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1346.983233][T22477] reason=80000021 qualification=0000000000000000 [ 1346.993772][T22477] IDTVectoring: info=00000000 errcode=00000000 [ 1347.000267][T22477] TSC Offset = 0xfffffd2c967074fd [ 1347.000285][T22477] EPT pointer = 0x000000009f2ff01e [ 1347.037545][T23297] *** Guest State *** [ 1347.042598][T23297] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1347.053107][T23297] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1347.065305][T23297] CR3 = 0x0000000000000000 [ 1347.076950][T23297] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1347.085772][T23297] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1347.093550][T23297] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1347.101103][T23297] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1347.112911][T23297] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1347.120846][T23297] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1347.129856][T23297] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1347.138857][T23297] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1347.151712][T23297] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1347.160497][T23297] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1347.169687][T23297] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1347.178462][T23297] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1347.188062][T23297] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:35:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:29 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x500, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:29 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x6000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1347.201600][T23297] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1347.211159][T23297] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1347.254223][T23297] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1347.264053][T23297] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1347.273339][T23297] Interruptibility = 00000000 ActivityState = 00000000 [ 1347.282183][T23297] *** Host State *** [ 1347.288529][T23297] RIP = 0xffffffff811b4e70 RSP = 0xffff88805b5778e0 [ 1347.295620][T23297] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1347.304158][T23297] FSBase=00007f8855b20700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 1347.315135][T23297] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1347.322918][T23297] CR0=0000000080050033 CR3=00000000830a5000 CR4=00000000001426f0 [ 1347.331666][T23297] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1347.340225][T23297] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1347.347294][T23297] *** Control State *** [ 1347.352139][T23297] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1347.360484][T23297] EntryControls=0000d1ff ExitControls=002fefff [ 1347.366958][T23297] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1347.375404][T23297] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1347.383616][T23297] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1347.394720][T23297] reason=80000021 qualification=0000000000000000 [ 1347.413388][T23297] IDTVectoring: info=00000000 errcode=00000000 [ 1347.438673][T23297] TSC Offset = 0xfffffd2c2930348b [ 1347.444376][T23297] EPT pointer = 0x00000000980ca01e 10:35:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getcwd(&(0x7f0000000000)=""/30, 0x1e) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x21e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x0, 0x80) 10:35:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:30 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x7000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x21e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x0, 0x80) [ 1347.705156][T23642] *** Guest State *** [ 1347.712617][T23642] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1347.727923][T23642] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1347.737651][T23642] CR3 = 0x0000000000000000 [ 1347.748389][T23642] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 10:35:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1347.769841][T23642] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1347.791181][T23642] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 10:35:30 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x21e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x0, 0x80) [ 1347.829085][T23642] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1347.855367][T23642] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1347.888809][T23642] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1347.906522][T23642] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1347.916609][T23642] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1347.926323][T23642] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1347.935814][T23642] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1347.945731][T23642] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1347.955706][T23642] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1347.966807][T23642] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1347.976609][T23642] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1348.001246][T23642] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1348.015141][T23642] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1348.042637][T23642] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1348.057076][T23642] Interruptibility = 00000000 ActivityState = 00000000 [ 1348.065370][T23642] *** Host State *** [ 1348.071094][T23642] RIP = 0xffffffff811b4e70 RSP = 0xffff8880344df8e0 [ 1348.078444][T23642] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1348.086227][T23642] FSBase=00007f8855b62700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 1348.099217][T23642] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1348.106058][T23642] CR0=0000000080050033 CR3=000000008c042000 CR4=00000000001426f0 [ 1348.114502][T23642] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1348.122540][T23642] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1348.130293][T23642] *** Control State *** [ 1348.134745][T23642] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1348.142550][T23642] EntryControls=0000d1ff ExitControls=002fefff [ 1348.149268][T23642] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1348.156964][T23642] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1348.164564][T23642] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1348.171963][T23642] reason=80000021 qualification=0000000000000000 [ 1348.179081][T23642] IDTVectoring: info=00000000 errcode=00000000 [ 1348.186130][T23642] TSC Offset = 0xfffffd2bcf7882b0 [ 1348.191300][T23642] EPT pointer = 0x00000000a081301e 10:35:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x7, 0x1, 0x10000, 0x4, 0x14, 0xffffffff}) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 10:35:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x21e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x0, 0x80) 10:35:30 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x9000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1348.231934][T23766] *** Guest State *** [ 1348.235964][T23766] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1348.289375][T23766] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1348.343207][T23766] CR3 = 0x0000000000000000 [ 1348.350326][T23766] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1348.369318][T23766] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1348.376653][T23766] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1348.392401][T23766] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1348.400674][T23766] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1348.413347][T23766] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1348.441279][T23766] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1348.452456][T23766] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1348.466519][T23766] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1348.482336][T23766] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1348.493420][T23766] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1348.521517][T23766] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1348.534476][T23766] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1348.544493][T23766] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1348.553591][T23766] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1348.562491][T23766] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1348.570065][T23766] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1348.578365][T23766] Interruptibility = 00000000 ActivityState = 00000000 [ 1348.585313][T23766] *** Host State *** [ 1348.589346][T23766] RIP = 0xffffffff811b4e70 RSP = 0xffff888054e478e0 [ 1348.596028][T23766] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1348.603613][T23766] FSBase=00007f8855b41700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1348.612855][T23766] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1348.619526][T23766] CR0=0000000080050033 CR3=000000008c042000 CR4=00000000001426e0 [ 1348.627269][T23766] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1348.634787][T23766] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1348.641653][T23766] *** Control State *** [ 1348.645974][T23766] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1348.653431][T23766] EntryControls=0000d1ff ExitControls=002fefff [ 1348.659633][T23766] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1348.667280][T23766] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1348.674751][T23766] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1348.682157][T23766] reason=80000021 qualification=0000000000000000 [ 1348.689263][T23766] IDTVectoring: info=00000000 errcode=00000000 10:35:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000182ec7ac2585c3040020032dbd7000fddbdf25020090fffff7fd080001000008001000000000b371b83900000000000800020000000108001000b9f7ffff"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) bind$isdn(r1, &(0x7f00000001c0)={0x22, 0xffffffffffff9e4f, 0x5, 0x200000000000, 0x100000000}, 0x6) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x21e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) 10:35:31 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000180)={r3, r0, 0x4}) r4 = accept(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}}}, &(0x7f000044fffc)=0x98) 10:35:31 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x20000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1348.695449][T23766] TSC Offset = 0xfffffd2b857f69b5 [ 1348.700790][T23766] EPT pointer = 0x0000000089b1301e 10:35:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x21e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) 10:35:31 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x21e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) 10:35:31 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{0x2, 0x4e22, @broadcast}, {0x1, @link_local}, 0x60, {0x2, 0x4e20, @multicast2}, 'vlan0\x00'}) r1 = socket$inet(0x2, 0x400000003, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000000000007"], 0xd}}], 0x1, 0x0) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380)}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000480), 0x21}}], 0x2, 0x0) 10:35:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:31 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@rand_addr="98d51428552d4aa423c6be7d0ee9eb40", 0x7e, r1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCCONS(r0, 0x541d) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x10}, 0x7d, r1}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x21e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:31 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x20100000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:31 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000faff070000ee8b08b7960ff7aa69041c7700fdf0058058aa0063b8f24252b10000000038f70f653f0ffb09f0d536b564f577d2e68890917ce2d9997c72dcee9346e613550544983c52e31d7b76651603cca0a346091867ed41790f3e93a41463f8d4f02ad95724d80c8c35d7f4fa5e30d6c05720577bf7cb8202"], 0x3d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) 10:35:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x50000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f00000001c0)={{0x4, 0x100000001}, 'port0\x00', 0x18, 0x180448, 0x40, 0x2d8f3b79, 0xa29e, 0x10001, 0x1, 0x0, 0x4, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)="3f53043d3ddf60fed75ff9015bb1df0696ac5abdc88a7872ceb6973659386227ce0f1f6221751e9cecdb9fec2f88a3f5894e786467f3f1228d64b17d3cae7caf6dc15c6f3565fe09bb334673c99dfa62e04c7bd997aca630d813", 0x5a, r2}, 0x68) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x21e) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$dupfd(r1, 0x406, r0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000000c0)=""/113) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000140)={{0x2, @name="ae91caa4648ec1d5ea8409801d78653c014e80498e5682d52904b47282195f79"}, "b9e30855843209cd8113b089c9c2bad0724165c53500a0b37667f832dfb974d2", 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x8400, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) 10:35:32 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), 0x1de, 0x0, 0xffffffffffffff5b}, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000003c0)={r1, 0x2}) r2 = socket$inet(0x10, 0x2000000000000003, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff30, 0x0, 0xff, 0x0, 0x1e0}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000040)={{0x0, @multicast2, 0x4e20, 0x4, 'sh\x00', 0x8, 0x8, 0x71}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 0x1000, 0x9, 0x4}}, 0x44) r3 = add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140), 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x1}, &(0x7f0000000200)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368613235365f6d6200000000000000000000a77400"/79], &(0x7f0000000280)="272dc05ff524dafee8b33437bfe4", &(0x7f00000002c0)="78304b1d9904e72e5bdfe0831e584a8a5cecafbb3495e7dbc57f77d200f6326b50e0da4854b79f9b578d74c96f8537a928b403ab7462eb98b600cc8322a56976e22c31c94678ea82dbdafaeb9b8e64466e119619c393a03e5e8deb5fb6b69a841a4bc5560eaeda0542a76de375b94bda464007610603b13f7993dc1ab8b8db90e67593680f6f7c777f2121a28118918b9ad0a2d1999df1b28cde3117eddc6ec14e53f01ad51b41") ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00\x00\xfe\xff\x00r\xed\x02\x00', @ifru_flags}) [ 1349.536962][T24752] *** Guest State *** [ 1349.542641][T24752] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 1349.558322][T24752] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 1349.582241][T24752] CR3 = 0x0000000000000000 [ 1349.592611][T24752] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 1349.613380][T24752] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1349.625098][T24752] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1349.632101][T24752] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1349.639619][T24752] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1349.647234][T24752] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1349.656880][T24752] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1349.665887][T24752] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1349.674870][T24752] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1349.683902][T24752] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1349.692777][T24752] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1349.701664][T24752] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1349.710466][T24752] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1349.719232][T24752] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1349.727966][T24752] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1349.736769][T24752] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1349.743979][T24752] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1349.752170][T24752] Interruptibility = 00000000 ActivityState = 00000000 [ 1349.759395][T24752] *** Host State *** [ 1349.763338][T24752] RIP = 0xffffffff811b4e70 RSP = 0xffff8880553378e0 [ 1349.770171][T24752] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1349.777316][T24752] FSBase=00007f8855b62700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 1349.786078][T24752] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1349.792735][T24752] CR0=0000000080050033 CR3=00000000a0742000 CR4=00000000001426e0 [ 1349.800566][T24752] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 1349.807975][T24752] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1349.814816][T24752] *** Control State *** [ 1349.819368][T24752] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1349.826880][T24752] EntryControls=0000d1ff ExitControls=002fefff [ 1349.833441][T24752] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 10:35:32 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x21e) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:32 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x23000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1349.841343][T24752] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1349.848828][T24752] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1349.856251][T24752] reason=80000021 qualification=0000000000000000 [ 1349.863383][T24752] IDTVectoring: info=00000000 errcode=00000000 [ 1349.869718][T24752] TSC Offset = 0xfffffd2ad39b79d4 [ 1349.874772][T24752] EPT pointer = 0x00000000a9b5e01e 10:35:32 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffc}, 0x8) close(r0) 10:35:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x21e) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='/dev/kvm\x00', 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x1000}, 0x0, &(0x7f0000000140)="2be660a3e6a2e34a633e88835c11726d30e18b6a3ecde955b206d4f79a15c7671b5a6873eb9d6a", &(0x7f0000000180)="144ebd7b4565a5ccb1dc541b6198ac06c2e3488a961bf68b65f94728f2f7d2145f3bf4d11a1c27ca99aa56f123ad925fccc99e310ea1d0d60b2383921ba0c7f95d41c6dbe97d262fcd1e69465c5e20744115282791f99cea57cbb6210754fd0aa4495c08e72aa576d0645941055bdcdaf68f42fa36c05699c0af7f4e40a4a8964ee983585b4b6bf1f78f767e3be57374abc5feb6ea15dab42736f452348e7769b77cbd2959d7f3f93c519854d4e986b9c0b9b09fc010b37a6c77709fef9e873765046cd34a2fc3be4b9e0973fa13cd953a8b7112f0cccf1cb7ffd8") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x10d800, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000280)={0x7, 0x0, 0x3, @remote, 'eql\x00'}) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000005c0)={{0x2, 0x4e21, @multicast2}, {0x0, @random="5b58109c890b"}, 0x4, {0x2, 0x4e22, @broadcast}, 'ip6gretap0\x00'}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) bind$alg(r4, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha224-ssse3,adiantum(ecb-aes-ce,fcrypt-generic))\x00'}, 0x58) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x92, "50f95b78429575ef7594701eb52174b00ae10f1517db2797d9cdb477c278755e9df0949df203dc7939ef3d800d8d6bfd83fd5ea5b4985211690b2c79679bb6a3eb6a64b7fc3d2e1f7b71ebb93ac77ac0ef6b5b4b528373f4414b70a83c18483c09345ce04ceb2fc17703bd6f11ba11ebd43a0a4706229539b82fdff98aff682af2a01ee77528ce62cc8ccdb2bafcc3d58866"}, &(0x7f0000000500)=0x9a) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000540)={r5, 0x364a}, &(0x7f0000000580)=0x8) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 10:35:32 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x3f000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1350.312883][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 10:35:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:33 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000ddeff8)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000004ffe0)=[{&(0x7f0000000000)=""/128, 0x80}], 0x1000000000000155) timer_create(0x2, &(0x7f000004c000)={0x0, 0x19, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x7}}, 0x0) msync(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x6) 10:35:33 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/\x00'], 0x2) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x7a07, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x44000, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0) r1 = getuid() lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000080)='./file1\x00', r1, r2, 0x1800) syz_open_pts(r0, 0x54000) 10:35:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:33 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:33 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x40000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) 10:35:33 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:33 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x400f, 0x100, 0x4, 0xe163}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x8) 10:35:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:33 executing program 3: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) 10:35:33 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x40260000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$isdn(0x22, 0x3, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x9, 0x6, 0x7fffffff, 0xfff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x1}}) accept4$inet(r2, 0x0, &(0x7f0000000040), 0x80000) 10:35:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:33 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x400f, 0x100, 0x4, 0xe163}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x8) 10:35:34 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x400f, 0x100, 0x4, 0xe163}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x8) 10:35:34 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:34 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x8cffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:34 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:34 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x400000) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0485619, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x1, 0x8, [], &(0x7f00000000c0)=0x6}) 10:35:34 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x400f, 0x100, 0x4, 0xe163}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x8) 10:35:34 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:34 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xc0ed0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000000)) 10:35:34 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x400f, 0x100, 0x4, 0xe163}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) 10:35:34 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0) setuid(0xee01) rmdir(&(0x7f0000000100)='./file0/file1\x00') 10:35:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:35 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x400f, 0x100, 0x4, 0xe163}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:35 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:35 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xf4ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x357, 0x0, 0x100032, &(0x7f0000000240)=ANY=[]) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x8, @mcast2, 0x6}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in6={0xa, 0x4e24, 0x28e53376, @mcast1, 0x57}], 0x54) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/59) 10:35:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:35 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x400f, 0x100, 0x4, 0xe163}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:35 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:35 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000200)=""/140, 0x8c}, {0x0}], 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000480)) preadv(r0, &(0x7f0000000700), 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000700)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x120) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$setperm(0x5, 0x0, 0xc2000) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) 10:35:35 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:36 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:36 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:36 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:36 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:36 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xf5ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5429, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x8400) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)) 10:35:36 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:36 executing program 5: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:36 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x60) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='cpu&00&&\n\x00\x01\b\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00'/289) 10:35:36 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xf6ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:36 executing program 5: r0 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:37 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:37 executing program 5: r0 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:37 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xf9fdffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:37 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x60) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='cpu&00&&\n\x00\x01\b\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00'/289) 10:35:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:37 executing program 5: r0 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:37 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x60) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='cpu&00&&\n\x00\x01\b\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00'/289) 10:35:37 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfbffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:37 executing program 5: syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:38 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:38 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xf6ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:38 executing program 5: syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:38 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfeffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:38 executing program 5: syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(cast6)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000552bf12b3a03361262a16f77abe6d4696ca18d03009c838133feb50210db69044000cbdba4ef99bf9b3eb9558d9f9b4fa9f8f77eac7c065f9107003e892e704ebeed974050a000000000000033cacbf60b7590389b4785c27eeb0b920435f4e4", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000040005000800010000000000"], 0x20}}, 0x0) recvfrom(r1, &(0x7f0000003240)=""/4096, 0x7df271b5928a551f, 0x0, 0x0, 0xfffffffffffffc78) 10:35:38 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xff0f0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:38 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 10:35:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:39 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:39 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 10:35:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, 0x8, {0x7fff}}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0x81785501, 0x0) 10:35:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:39 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfffff000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:39 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 10:35:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:39 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 10:35:39 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfffffdf9, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:39 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) [ 1357.220030][T26759] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1357.233342][T26762] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 10:35:40 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:40 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xfb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000340)={@empty}, &(0x7f0000000380)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000640)={0x0, 0xffffffffffffff81, 0x3}, &(0x7f0000000680)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r2, 0xff}, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) 10:35:40 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:40 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfffffe00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:40 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:40 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xffffff8c, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:40 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, 0x0, 0x1dd) 10:35:40 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x0, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:41 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000008c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x294000, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @remote}, {0x307, @local}, 0x10, {0x2, 0x4e24, @rand_addr=0xffffffffffffffa5}, 'syz_tun\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000140)={{0x4, 0x6}, {0x3, 0x7}, 0x8, 0x7, 0x7fff}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc038563b, &(0x7f0000000000)) 10:35:41 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x0, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:41 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfffffff4, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:41 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)='\x00', 0xffffffffffffffd1}], 0x10000000000000ad) 10:35:41 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x0, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:41 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfffffff5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:41 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x0, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:41 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000180)='./file1\x00') r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file1\x00', 0x0) syz_mount_image$hfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) [ 1359.316383][T27346] overlayfs: missing 'lowerdir' [ 1359.366692][T27368] overlayfs: missing 'lowerdir' 10:35:42 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:42 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) ppoll(&(0x7f0000000000)=[{r1, 0x41a}], 0x1, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = creat(0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000240)={0x1, 0xfffffffffffffffc, 0x7f, 0xfe7, 0xfffffffffffff3b0}) r5 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) 10:35:42 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x0, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:42 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfffffff6, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:42 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x0, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:42 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfffffffb, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:42 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000700)={"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"}) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/120, 0x78}], 0x1}}], 0x1, 0x0, 0x0) [ 1360.181499][T27617] FAULT_INJECTION: forcing a failure. [ 1360.181499][T27617] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.205595][T27617] CPU: 1 PID: 27617 Comm: syz-executor.5 Not tainted 5.1.0-rc4+ #67 [ 1360.213604][T27617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1360.223670][T27617] Call Trace: [ 1360.226978][T27617] dump_stack+0x172/0x1f0 [ 1360.231344][T27617] should_fail.cold+0xa/0x15 [ 1360.235934][T27617] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1360.241747][T27617] ? ___might_sleep+0x163/0x280 [ 1360.246609][T27617] __should_failslab+0x121/0x190 [ 1360.251530][T27617] should_failslab+0x9/0x14 [ 1360.256168][T27617] kmem_cache_alloc_node_trace+0x270/0x720 [ 1360.261981][T27617] ? kasan_check_read+0x11/0x20 [ 1360.266833][T27617] __kmalloc_node+0x3d/0x70 [ 1360.271326][T27617] kvmalloc_node+0x68/0x100 [ 1360.275847][T27617] video_usercopy+0x454/0x10d0 [ 1360.280609][T27617] ? v4l_s_fmt+0xab0/0xab0 [ 1360.285024][T27617] ? tomoyo_init_request_info+0x105/0x1d0 [ 1360.290729][T27617] ? v4l_enumstd+0x70/0x70 [ 1360.295148][T27617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1360.301388][T27617] ? tomoyo_path_number_perm+0x263/0x520 [ 1360.307016][T27617] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1360.312836][T27617] ? video_usercopy+0x10d0/0x10d0 [ 1360.317864][T27617] video_ioctl2+0x2d/0x35 [ 1360.322209][T27617] v4l2_ioctl+0x156/0x1b0 [ 1360.326556][T27617] ? video_devdata+0xa0/0xa0 [ 1360.331149][T27617] do_vfs_ioctl+0xd6e/0x1390 [ 1360.335727][T27617] ? ioctl_preallocate+0x210/0x210 [ 1360.340843][T27617] ? selinux_file_mprotect+0x620/0x620 [ 1360.346354][T27617] ? __fget+0x381/0x550 [ 1360.350511][T27617] ? ksys_dup3+0x3e0/0x3e0 [ 1360.354934][T27617] ? tomoyo_file_ioctl+0x23/0x30 [ 1360.359872][T27617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1360.366121][T27617] ? security_file_ioctl+0x93/0xc0 [ 1360.371236][T27617] ksys_ioctl+0xab/0xd0 [ 1360.375382][T27617] __x64_sys_ioctl+0x73/0xb0 10:35:43 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:43 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfffffffe, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) [ 1360.379970][T27617] do_syscall_64+0x103/0x610 [ 1360.384571][T27617] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1360.390469][T27617] RIP: 0033:0x458c29 [ 1360.394361][T27617] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1360.414134][T27617] RSP: 002b:00007fa66ea8bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1360.422558][T27617] RAX: ffffffffffffffda RBX: 00007fa66ea8bc90 RCX: 0000000000458c29 [ 1360.430533][T27617] RDX: 0000000020000080 RSI: 00000000c100565c RDI: 0000000000000003 [ 1360.438517][T27617] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1360.446499][T27617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa66ea8c6d4 [ 1360.454562][T27617] R13: 00000000004c37cc R14: 00000000004d6cc8 R15: 0000000000000004 10:35:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:43 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) 10:35:43 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x10000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:43 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:43 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x2, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) 10:35:43 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xedc000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:44 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x8000, 0x7, 0x7, 0xbdee}, {0x7fff, 0x27, 0x2, 0x170a}, {0x7fffffff, 0x4, 0x9, 0x1}, {0x3, 0x7fff, 0x4, 0x4}, {0x0, 0x5, 0x4, 0x326}, {0x1, 0x80, 0x5, 0x7fffffff}, {0x83c, 0x200, 0x0, 0x3ff}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updsa={0x104, 0x1a, 0x205, 0x0, 0x0, {{@in6=@mcast1, @in=@loopback}, {@in=@remote, 0x0, 0x2b}, @in=@multicast1=0xe0000008, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@dev}]}, 0x104}}, 0x0) 10:35:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) 10:35:44 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:44 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x1000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:44 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4b49, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:44 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x100, 0x1cc) syz_open_dev$loop(0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000300)={@ethernet={0x7}, {&(0x7f0000000280)=""/28, 0x1c}, &(0x7f00000002c0), 0x40}, 0xa0) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x4c) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200)=0x0) write$P9_RGETLOCK(r2, &(0x7f0000000240)={0x39, 0x37, 0x1, {0x1, 0x81, 0x8, r3, 0x1b, 'cpuseteth0securitykeyring/$'}}, 0x39) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0xf, 0x4}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x3feb, 0x76}]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) ptrace$getsig(0x4202, r4, 0x1, &(0x7f0000000140)) 10:35:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0), 0xc) 10:35:44 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x541b, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0), 0xc) 10:35:44 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x7ffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:44 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:44 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5421, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0), 0xc) 10:35:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket(0x400000000010, 0x3, 0x0) r2 = getpgid(0x0) fcntl$setown(r1, 0x8, r2) write(r1, &(0x7f0000000180)="2400000018002551075c0165ff0ffc02802000030011000500e1000c080002008000a000bc0000008f3943793a5ea67658cb22d90000000000000059b97dc8f8b550e66a2bff77c4931da84157f7a733686a22fd8169f6b6b4f464000000000000000085ea2b85d32b3583d87124da3b0861e2cc000000dcce1fb4ac2cbd48c8378a3ad82a5b83c01295723da595c4831f65123819e204853d48a5a6bd525801f1cae983cf4544a9c4c396f36e85787a8efc32e0015c85ead2b748bc6a5fefc4e53543f9f65e3da31a110af1ac968ce510c7a70723741b34981d1b182deb7904", 0xe0) io_setup(0x5, &(0x7f0000000000)=0x0) r4 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xea, 0x200081) io_cancel(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xae4, r0, &(0x7f0000000040)="a692db477935903796324f9401a9be025e707a3dca94c1c4c22a571454ccb2351c7678404e54a79bf60cb56de51d7fadae553cf73503192107f007f0b46853ce243167d5ce64ba6169b98d8f2a4d804f661cb1b939c683d52e194bd57fc2e534a2d27fa99f68f8ddf0fc2df91733251be82d1e8dafd78646f37a246c75bb3c85ebea0aa64576c850b2712a934a430b0c0b7f9fc3ccd9c1b0069b78f9553708e394300480842688152aadef4dd92b4b00b08ed3a401f4fa730d5cd8c0bdd39e417ad92eddcd338b5fe90d1bc217814c29c9ad3d46483225", 0xd7, 0x1000, 0x0, 0x0, r4}, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={r5, 0x1, 0x20}, 0xc) 10:35:44 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x10000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:45 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5450, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:45 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:45 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5451, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:45 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 10:35:45 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5452, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:35:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:45 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:45 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xf0ffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:45 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5460, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:45 executing program 3: mkdir(&(0x7f0000639000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000000)={0x9, 0x7, 0x1466, 'queue0\x00', 0x5}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0) 10:35:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x801}, 0xc) 10:35:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40049409, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:46 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xfffffc34) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r2, 0xfffffe) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f00000005c0)}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeefffdef) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) close(r1) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x20000) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f00000000c0)={0x3, 0x1, [0x1, 0x7fff, 0x0, 0x100000000, 0x8, 0x100000001, 0x3, 0x3]}) 10:35:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x801}, 0xc) 10:35:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40086602, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:46 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfeffff00000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x40087602, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:46 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:46 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) lseek(r1, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) truncate(&(0x7f0000000080)='./bus\x00', 0x200) keyctl$set_reqkey_keyring(0xe, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000002c0)='./bus\x00') sendfile(r2, r2, &(0x7f0000000240), 0x808100000000) 10:35:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x801}, 0xc) 10:35:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x4020940d, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:46 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x100000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:46 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x80086601, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x8, 0x0, 0x801}, 0xc) 10:35:47 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x200000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:47 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0x80087601, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:47 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0xf0, 0x0, 0x801}, 0xc) 10:35:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:47 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:47 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x2000, 0x0, 0x801}, 0xc) 10:35:47 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x300000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x0) 10:35:47 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:47 executing program 3: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000006c0)={{0x3ff, 0x3ff}, 'port1\x00', 0x0, 0x80000, 0x575, 0x8, 0xffffffffffffff1c, 0x0, 0xfffffffffffffff9, 0x0, 0x6, 0x8}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x60000, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000280)='threaded\x00', 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) syz_open_dev$swradio(&(0x7f00000004c0)='/dev/swradio#\x00', 0x1, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) timer_create(0x5, &(0x7f0000000400)={0x0, 0x31, 0x5, @thr={&(0x7f0000000340)="3dfa41e4bcf6f7ecafcc93536e2af27f809200f3a0a1f39d74a719029c6dcd2ef6f61c3f3e124027eb44eea3817c85f754cb1b961863ddd4d06087e1ee2af4ccfeee7af5449bbef8f0b45be1dd026beea41d0ef74aa962f36666f9c6fcacbc8cf9caf3564a04b5f70e9430ddf677b08f07dd9294f93dbb4b6dc4815084c519e24b0ad18de32dd5858c065a9999b3ec39f6e22ad2622c1424aae6034f219bf1c0ef0d6f3807b1ede1176d4af97fc871e4786d49", &(0x7f00000002c0)="568aa911ac5e365b5701cbb3722a526de591c3"}}, &(0x7f0000000440)=0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f00000007c0)={{0x0, 0x1c9c380}, {r4, r5+30000000}}, &(0x7f0000000800)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\xff\xff\xff\xe4\x00', 0x4005}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') fchdir(r1) perf_event_open$cgroup(&(0x7f0000001c40)={0x0, 0x70, 0x7ff, 0x1000, 0x0, 0x0, 0x0, 0x100000000, 0x46800, 0x0, 0x0, 0x4, 0x6, 0xfffffffeffffffff, 0x0, 0x6a, 0x3, 0x0, 0x4, 0x0, 0x3ff, 0x3f, 0x5, 0x8, 0x800, 0x5e, 0x4ed2, 0x0, 0x0, 0x1, 0xffff, 0x0, 0x38000000, 0x5c5, 0x1, 0x80, 0x100000000, 0x0, 0x0, 0x9, 0x5, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x9, 0xbcfb, 0x6}, r2, 0x1f, 0xffffffffffffffff, 0x2) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000001cc0)=""/71) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000040)={'ifb0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFINDEX(r7, 0x400454da, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) 10:35:48 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:48 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x500000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x65af, 0x0, 0x801}, 0xc) 10:35:48 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:48 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:48 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0xaf65, 0x0, 0x801}, 0xc) 10:35:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x118c, 0x12, 0x5, 0x300, 0x70bd28, 0x25dfdbfb, {0xf, 0x0, 0x6}, [@generic="f0f8dedf15ac4826eb51b38d6a500f0c3001b01e63a345e13c4fbff01659881740a198326fe18bad57f4e514a503691b64c84903bb5cc6d3844c36ef20553f49427705e5474775f96f0f7025fe51e796e4b97082df4d45b342362d1a71a1b6c67c998657c8b380e9f568f00096fede3df121e16846a08e90ee411959e35bfebfd54c7f86b630e2ac1d40d08dda37891ac6eb3c99c8ed74afedba35f562d1b3d5b7382b0a83780d438ecac794d614a78399d50a00b781599ea4cc8fcc0cf3ac47993e4020e5eb54c5247d25e10bed0e649db47262f8db12", @generic="de2548852d03501fe076444e25eadfe684cea1e0b7d69d426bb45516758a59d41bbd1ede67524a4f9e5dfb98b68f92d2c6b15cfd2c70fb9adee22e37473ae7da5e22c67101fced486ffa18e26bb6c6b4bd09bfd86cdea2eab34491a53de3af23a8583ff7714fac27fa7ec215586a3578d4295b24c04693546c43499fc090e4574e56c05ffbb3923cede05885cf2a87d405", @nested={0x1004, 0x3e, [@generic="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"]}, @typed={0xc, 0x87, @u64=0x100}]}, 0x118c}}, 0x4001) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x170fe71befd01034}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4b0}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x5}, 0x40080) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f00000000c0)=0x100000001, 0x4) 10:35:48 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x600000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:48 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:48 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x2010, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x0, 0xe, 0x0, &(0x7f0000000040)=0x15b) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x5, 0x20000) 10:35:48 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0xf000, 0x0, 0x801}, 0xc) 10:35:49 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x700000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1366.416276][ T26] audit: type=1400 audit(1555238149.004:169): avc: denied { map } for pid=30042 comm="syz-executor.3" path="/dev/vga_arbiter" dev="devtmpfs" ino=7 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_misc_device_t:s0 tclass=chr_file permissive=1 10:35:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7fffffff, 0x90200) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000040)="fd5309c88f8b8a3936b2d39c95ae67cef811a1082f25e6021b318b57acd53e0b4a85c01df97a1b6896e2d9a9e584bf5d750f8bbfdcb1b1b144326b9966c8774894757bdb1f1aee71c69ed3079117b16f8c6f13fc3cfda4db8f95faf288ea1c293b977077", 0x64, 0x2c) ioctl(r1, 0xffffffffbfffbfb5, 0x0) 10:35:49 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:49 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0xf0ffff, 0x0, 0x801}, 0xc) 10:35:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:49 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x900000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) r2 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x2) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}}, 0x80, 0x0, 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0) 10:35:49 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:49 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x1000000, 0x0, 0x801}, 0xc) 10:35:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, 0x0, 0x0) r2 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x2) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}}, 0x80, 0x0, 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0) 10:35:50 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc1005667, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:50 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x2000000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x8000000, 0x0, 0x801}, 0xc) 10:35:50 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:50 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x03\x00', 0x19, 0x1, 0x138, [0x20000540, 0x0, 0x0, 0x20000570, 0x200005a0], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000004100000000000300736630000010000000000000000064756d6d793000000000000000000000696662300000000000000000000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff00000000000000007000000070000000a80000006172707265706c7900000000000000000000000000000000000000000000000010000000000000007e3d900b9e4c0000ffffffff00000000"]}, 0x1b0) 10:35:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x20000000, 0x0, 0x801}, 0xc) 10:35:50 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x2010000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:50 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:50 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x100000000000003b, 0x0, 0x0) [ 1368.255522][T30834] x_tables: eb_tables: arpreply target: only valid in nat table, not nat 10:35:50 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2000, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getrusage(0x3, &(0x7f0000000080)) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 10:35:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x9effffff, 0x0, 0x801}, 0xc) 10:35:51 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1000000, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:51 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x2300000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:51 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:51 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2000000, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') getdents(r1, &(0x7f0000000100)=""/46, 0x2e) 10:35:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0xaf650000, 0x0, 0x801}, 0xc) 10:35:51 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x3f00000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup2(r2, r1) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f00000002c0)={0x2b}) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r3, &(0x7f00000001c0)={0x90, 0x0, 0x8, {0x0, 0x0, 0xfffffffffffff3e6, 0x80000000, 0x1f7a6575, 0xc456, {0x2, 0x40, 0x7, 0x7, 0x7fff, 0x0, 0x1, 0x9, 0x99, 0xe4fa, 0x2, r4, r5, 0x0, 0xfffffffffffffff8}}}, 0x90) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) get_thread_area(&(0x7f0000000280)={0x70f9328e, 0x20000800, 0xffffffffffffffff, 0xff, 0x80, 0x8001, 0x8, 0xc4, 0x7, 0x9}) ioctl$KVM_ENABLE_CAP_CPU(r6, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x140], [0xc2]}) 10:35:51 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x20000000, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0xf0ffffff, 0x0, 0x801}, 0xc) 10:35:52 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x100000000000000, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:52 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x4000000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff8}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x0, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r1}) 10:35:52 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:52 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x200000000000000, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0xfffff000, 0x0, 0x801}, 0xc) 10:35:52 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x4026000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:52 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x2a6) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x5, 0x12) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2c}]}, 0x1e4) 10:35:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:52 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2000000000000000, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) exit(0x101) timer_delete(0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x3, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x18, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'netdevsim0\x00'}}}}, ["", ""]}, 0x34}}, 0x20000080) 10:35:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0xffffff9e, 0x0, 0x801}, 0xc) 10:35:53 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10002, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:53 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x7fffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:53 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x12000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:53 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0xfffffff0, 0x0, 0x801}, 0xc) 10:35:53 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x100000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:53 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x8000000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:53 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x3000000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:53 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r1, 0x8, 0x30, 0x4, 0xff}, &(0x7f0000000100)=0x18) setsockopt(r0, 0x8, 0x7fff, &(0x7f0000000140)="688d5d216eab20d2459745dfe4e9203fa38be2eb4c1be40854cfa6acaf65790bff191f24aa0edddcc29f68f2fc2305ca8e7a261549b9983aed33f6973593fd7c", 0x40) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xc0, 0x99, {"1364d9010bda577f730f953a32660e8198857f464eee73401c5463457f6ffe56ead94bcca8e79aec274af2fd6f119f5fd870d6ad67f5fcde1b4c74f6286363fafdcba58923b391cd4f566bf2e6f7f1fd5bf338551af652f54b3b18adfdbfd19517d89b6d57e2562371f481747950b84d29adea565240d62a076b1f6840d0df1bea2c28bafa8534d799789b11790afa04e40dacc8dce982a997aeb477f9b537594b5370c7a371f8"}}, {0x0, "e329213df2f0cbe666650e1a010f1bdb96d4c759e6a3c8b079eb9a55a648a6340786d991b3b1edc31c2eb596ab69672ba149aa1c646baa57d32a0ce3c2dc6272d37fd4fa850d865cb8db20539e1990e2e168dc66d8c007d6c2d8d13127739b715572"}}, &(0x7f0000000340)=""/72, 0x124, 0x48, 0x1}, 0x20) fadvise64(r2, 0x0, 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000400)=0x800, 0x4) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000480)={0x2}) pread64(r0, &(0x7f00000004c0), 0x0, 0x0) r3 = socket(0x8, 0x6, 0x5) r4 = creat(&(0x7f0000000500)='./file0\x00', 0x41) ioctl$RTC_UIE_OFF(r4, 0x7004) sendto$ax25(r0, &(0x7f0000000540)="56e1123ae14fb7e6f43ba3d364a454c5e24e92cbadd40e3ab508b01def0a7ba0f000344fbbfcd1f2510fec45b6a7195914", 0x31, 0x1, &(0x7f0000000580)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast]}, 0x48) recvfrom$rxrpc(r0, &(0x7f0000000600)=""/46, 0x2e, 0x40000141, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000640)) r5 = accept4(r3, &(0x7f0000000680)=@nfc, &(0x7f0000000700)=0x80, 0x80800) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000740)=""/130, &(0x7f0000000800)=0x82) fallocate(r4, 0x9, 0x659, 0xc256) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={0xffffffffffffffff, r0, 0x0, 0x7, &(0x7f0000000840)='md5sum\x00'}, 0x30) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f00000008c0)={0x2}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000900)={'nat\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000980)={r1, @in6={{0xa, 0x4e21, 0x6, @loopback, 0x5}}}, 0x84) creat(&(0x7f0000000a40)='./file0\x00', 0x2) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000a80)={0x3, 0x100, 0x0, 0x10000}, 0x10) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000b, 0x7, 0x40000) ioctl$KIOCSOUND(r0, 0x4b2f, 0x4) 10:35:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0xf0ffffffffffff, 0x0, 0x801}, 0xc) 10:35:54 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x80010020, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:54 executing program 3: mknod(&(0x7f0000000080)='./file0\x00', 0x5124, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats_percpu\x00') setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="5f6fa25a07340664f45dede9390e7b36", 0x10) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000000c0)=""/23) read(r0, &(0x7f0000000100)=""/7, 0x7) write$binfmt_aout(r0, &(0x7f0000000680)=ANY=[], 0x0) 10:35:54 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x8cffffff00000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:54 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x10, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x100000000000000, 0x0, 0x801}, 0xc) 10:35:54 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000001400)={0x98f904}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'rose0\x00', 0x600}) 10:35:54 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x300, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:54 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xf4ffffff00000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:54 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0xffffff1f, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:54 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000001400)={0x98f904}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'rose0\x00', 0x600}) 10:35:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x800000000000000, 0x0, 0x801}, 0xc) 10:35:54 executing program 3: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000280)='./file1/file0\x00', 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000080)={0x80000000000000, 0x5001, 0x5, 0x2, 0x5}) setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x4c, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 10:35:55 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x2000000000000000, 0x0, 0x801}, 0xc) [ 1372.508306][ T486] overlayfs: './file0' not a directory 10:35:55 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:55 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:55 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xf5ffffff00000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v2={0x7, 0x3, 0x2, 0x5d, 0xda, "6c7a6ed4c5defaeadaf9efdc4f933277ec1f9e3d2ed4c90025b0982cd4ddc918abd5afa82f3cbdfabb4101e74a8bb760758991a844736dbf280e1a7efdff2a919f42bac871d6f75cd1c152ceea931d4e4603dbf6ab2e1758e6be65321b55536676c14aaa07545c10726656a0687d4bea5ac565c5bb5fa2b5539540efc5c76d81934fd6ff7917d1847dd93a39b7cc8f1ea12345fe186769684f4c9330cd56ac1da3f82d15529cea2ef007bd209612d5fbfa672b57fcbc5a44d264a5c04214ad3a24ddb641b57f7225212fdb861e8aeb46a92c467a950a99dbc62b"}, 0xe4, 0x1) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4005eed) fallocate(r1, 0x20, 0x2000, 0x100008000) 10:35:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x9effffff00000000, 0x0, 0x801}, 0xc) 10:35:55 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:55 executing program 3: mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, r0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x16) 10:35:55 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xf6ffffff00000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:55 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0xaf65000000000000, 0x0, 0x801}, 0xc) 10:35:56 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:56 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:56 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0xf0ffffff00000000, 0x0, 0x801}, 0xc) 10:35:56 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xf9fdffff00000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:56 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mbind(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x2, &(0x7f00000000c0)=0x2, 0x7ff, 0x4) 10:35:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0xfffffffffffff000, 0x0, 0x801}, 0xc) 10:35:56 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfbffffff00000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:57 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:57 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0xfffffffffffffff9, 0x82) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581) r1 = dup2(r0, r0) write$P9_RLINK(r1, 0x0, 0xffffffdf) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r3 = syz_open_dev$video(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x400, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) chdir(0x0) recvmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/64, 0x40}], 0x1, &(0x7f0000000240)=""/70, 0x46}, 0x40002000) sync() r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000340)={0x10001, 0x9c3, 0x9, 0x5, 0x9}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_init_net_socket$ax25(0x3, 0x7, 0xcd) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) write$P9_RSYMLINK(r4, &(0x7f0000000000)={0x14}, 0x14) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) time(&(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x8c, 0x18, 0xfa00, {0x10000000000, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5) 10:35:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x8, 0x801}, 0xc) 10:35:57 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:57 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x2, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:57 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfeffffff00000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0xf0, 0x801}, 0xc) 10:35:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:57 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0xfffffffffffffff9, 0x82) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000581) r1 = dup2(r0, r0) write$P9_RLINK(r1, 0x0, 0xffffffdf) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r3 = syz_open_dev$video(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x400, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) chdir(0x0) recvmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/64, 0x40}], 0x1, &(0x7f0000000240)=""/70, 0x46}, 0x40002000) sync() r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000340)={0x10001, 0x9c3, 0x9, 0x5, 0x9}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) syz_init_net_socket$ax25(0x3, 0x7, 0xcd) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) write$P9_RSYMLINK(r4, &(0x7f0000000000)={0x14}, 0x14) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) time(&(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x8c, 0x18, 0xfa00, {0x10000000000, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5) 10:35:57 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x3, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x2000, 0x801}, 0xc) 10:35:57 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xff0f000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x65af, 0x801}, 0xc) 10:35:58 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x5, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:58 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x6, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:58 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:58 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xffffffff00000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0xaf65, 0x801}, 0xc) 10:35:58 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x7, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:58 executing program 3: mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) fcntl$setpipe(r0, 0x407, 0x0) r1 = dup2(r0, r0) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20}, 0x20) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x21) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 10:35:58 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x8, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0xf000, 0x801}, 0xc) 10:35:58 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xffffffffffff0700, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:59 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x9, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffdfa) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) 10:35:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0xf0ffff, 0x801}, 0xc) [ 1376.501168][ T2488] input: syz1 as /devices/virtual/input/input14 [ 1376.590016][ T2644] input: syz1 as /devices/virtual/input/input15 10:35:59 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0xa, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:59 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xfffffffffffff000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x1000000, 0x801}, 0xc) 10:35:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:35:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffdfa) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) 10:35:59 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0xb, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:35:59 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xffffffffffffff7f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:35:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x8000000, 0x801}, 0xc) 10:35:59 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0xc, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) [ 1377.316079][ T2881] input: syz1 as /devices/virtual/input/input16 10:36:00 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0xd, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:36:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffdfa) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) 10:36:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x20000000, 0x801}, 0xc) 10:36:00 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1377.563510][ T3118] input: syz1 as /devices/virtual/input/input17 10:36:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:00 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0xe, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:36:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x9effffff, 0x801}, 0xc) 10:36:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffdfa) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) 10:36:00 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='rootfs\x00', 0x800020, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:00 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:36:00 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) [ 1378.364238][ T3397] input: syz1 as /devices/virtual/input/input18 10:36:01 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:36:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0xaf650000, 0x801}, 0xc) 10:36:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffdfa) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:01 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x10900}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4060900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000080), 0x7) r1 = dup3(r0, r0, 0x80000) ioctl$RTC_UIE_ON(r1, 0x7003) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x6, 0x0, [], [{0x4, 0x85d, 0x2, 0x3c, 0x7eb, 0x1}, {0x1, 0xff, 0x4000800, 0x2, 0x10001, 0x609a}], [[], [], [], [], [], []]}) [ 1378.577714][ T3622] input: syz1 as /devices/virtual/input/input19 10:36:01 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:01 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:36:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0xf0ffffff, 0x801}, 0xc) 10:36:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:01 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{0x100000001}, {0x6, 0x3}, 0x9, 0x0, 0x8}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept(r1, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80) 10:36:01 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:36:01 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) [ 1379.254564][ T3873] input: syz1 as /devices/virtual/input/input20 10:36:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0xfffff000, 0x801}, 0xc) 10:36:02 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:36:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:02 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) [ 1379.530306][ T4181] input: syz1 as /devices/virtual/input/input21 10:36:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:02 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/184) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2f63eb81f46c620000000022c143000000"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x101800, 0x0) ioctl$sock_ifreq(r1, 0x8930, &(0x7f0000000240)={'bond_slave_1\x00', @ifru_addrs=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x3}}}) 10:36:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0xffffff9e, 0x801}, 0xc) 10:36:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:02 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db67c23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:36:02 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x101, 0x20000) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2b, 'pids'}, {0x2b, 'memory'}]}, 0xe) clone(0xa2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="2f64656f0b11be7f00003000"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) prctl$PR_SET_ENDIAN(0x14, 0x2) 10:36:02 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7024d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) [ 1380.253151][ T4314] input: syz1 as /devices/virtual/input/input22 10:36:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0xfffffff0, 0x801}, 0xc) 10:36:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:03 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402602f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:36:03 executing program 4: mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x4) r0 = syz_init_net_socket$ax25(0x3, 0x7, 0xcf) finit_module(r0, &(0x7f0000000080)='btrfs\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1380.484353][ T4534] input: syz1 as /devices/virtual/input/input23 10:36:03 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:03 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x2]}) 10:36:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0xf0ffffffffffff, 0x801}, 0xc) 10:36:03 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) signalfd4(r0, &(0x7f0000000080)={0x101}, 0x8, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:03 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x2000]}) 10:36:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:03 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x1000000]}) 10:36:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x100000000000000, 0x801}, 0xc) 10:36:04 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x2000000]}) 10:36:04 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x17) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f6465762a6e756ce0e66436622fd7550c99bfdfe7a76c623000b0cc86171981000000000000005290346274ec2404db4601b64f056ff065c4fa301db189df96ae345e937f118616bec8172829dd3503bb248300a0f335c0498cf6eb1878a60a9f6ccb3249f5ddc0e05794763fca6b9bc71a6990eedba631abc39725af84fe8e172d33b8443c2ded523185984499536518b393fff477e7a571b74b390cd4d81f72cbebfd051740a3"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000440)=""/4096) 10:36:04 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:04 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x20000000]}) 10:36:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x800000000000000, 0x801}, 0xc) 10:36:04 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xc4, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x440, 0x0, 0x210, 0x108, 0x0, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x20, "2cd743db8c407d70b3f8b4c34b796ac8166238129a7ce855aca058ab98be"}}}, {{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x7fffffff, 0x202}}}, {{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x0, 0x9}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d6, 0x4d2, 0x80000001, 0x9, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x8, "d901b70a93948796d7dae038631b44f64fa0f14db2d65ecd356de6a68362"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:04 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x100000000000000]}) 10:36:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x2000000000000000, 0x801}, 0xc) 10:36:04 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/12], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) sync_file_range(r0, 0x1, 0x5e80000000000, 0x1) pipe(&(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x1000000003}, {0x6, 0x7}, 0x7fff, 0x0, 0x9}) 10:36:04 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x200000000000000]}) [ 1382.257700][ T5429] e Filesystem requires source device 10:36:04 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x2000000000000000]}) 10:36:05 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x9effffff00000000, 0x801}, 0xc) 10:36:05 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x2]}) 10:36:05 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) r0 = syz_open_dev$swradio(&(0x7f00000004c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCSIG(r0, 0x40045436, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000480)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000081}, 0xc, &(0x7f0000000440)={&(0x7f0000000b00)={0x248, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xab1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x574}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd835}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe0}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}]}, 0xbbe027da18d1e62b}}, 0x4000090) rt_sigtimedwait(&(0x7f00000000c0)={0x99e}, 0x0, &(0x7f0000000180)={r1, r2+30000000}, 0x8) creat(&(0x7f0000000080)='./file0\x00', 0x98) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:05 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x2000]}) 10:36:05 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000480)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0040000c0000000000533a811cf3"], 0xe) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='btrfs\x00', 0x222400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xffff, 0xa8800) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) sendmsg$netlink(r3, &(0x7f0000002100)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc, &(0x7f0000002080)=[{&(0x7f0000000640)={0x164, 0x3a, 0x100, 0x70bd25, 0x25dfdbff, "", [@typed={0xc, 0x1a, @u64=0x40}, @typed={0xe4, 0x33, @binary="9766cfe00bf844a989866eaa61e56bf14f99d8c925c9fcae139c36e19bb49fcfef91f7ce4c1e56ce173b6a57c146fc3086c7800c33a54023cc803b4b468ee5f351df4669d7ceb77e4c9f69d3be974d380c2f1a7e9bbc38705ceaadc73fc3df4925826ab05c769eda8591cd1b57844a4129a79e14738490b6bdf134b4930748568dd9994df98c1fbf275088b7fbafe95480cb8164147dce0e20632a23a930f737587e45a3893b1299f4b6faa4e2515b11ddf08c6dc26c2848fd4741d455c43a650fd93c9ec6913788894e47954d4eed006cede10b269fcfd0b89b59ce7d7025ab"}, @typed={0x4, 0x61}, @nested={0x60, 0x3d, [@typed={0x8, 0x44, @uid=r4}, @generic="6c3bb93162d24e", @typed={0x8, 0x7d, @fd=r3}, @generic="89c0c0f8eef7f6317f20dfee92042ebd5401a1db93d3090879aa0e2986b05682e609d4edf92a739e1b771bc4aa6ea255f3747ad37c41ba967a5e4d340c3a3fd293165c"]}]}, 0x164}, {&(0x7f0000000340)={0x30, 0x3b, 0x610, 0x2, 0x25dfdbff, "", [@typed={0x14, 0x25, @ipv6=@mcast2}, @typed={0xc, 0x31, @u64=0x9}]}, 0x30}, {&(0x7f0000000940)={0x4bc, 0x20, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x48, 0x2e, [@typed={0xc, 0x5c, @u64=0x7ff}, @typed={0x14, 0x4d, @ipv6=@mcast1}, @typed={0x20, 0x4c, @binary="5b94dc959e65ffce7ce8815104a4e09722a1f7e36f235ad65b"}, @typed={0x4, 0x78}]}, @nested={0x7c, 0x71, [@generic="82e74667ab55826f2dbe5df7a5547a46ba08b3ca4f417770ea2206271e9b43cfb8d47b7f0e5e55db1560f5b20aacf3cad85d8ad5efc79e5b0ce165fe7614931783ec59435adf7585631f01cdf895f1a630212def25568f2daef0b2b83af42ce8537747fe298a7a0e4c24a3b569b578aaa42516c3b390f6"]}, @typed={0x8, 0x14, @uid=r5}, @generic="4e0b9d6f5b7beb020c9f2ab9398ff0d2229ed273ad0ce7051baf73edb9386429cd860c3feccd95d4d228fa3dbede7b5e496cf2cf7f332f904529e5f19847c9aab72e5715b47126d0", @nested={0x25c, 0x61, [@generic="41ee3ae116dd374ba98732f2347fe870dde5c6fea4490d636643c18d85e32972119913dda8c2556cfbfa1a1677efd42872d2f4523fe559b7c522c49ff28f5ea4c36b912a93ed893e3ae8f226b5e67dee8ba3823ebe74dcd57c9e49477e22b822f8f39b63f0a15e6d6bb1cdc579553abee4550593cedcee2ef67647342ff1e225dd1d4cc1adcfcfa14b3f22ea3c55192292fc938388f633cd3c190bfa90aef903bddd0395aabc8d03329148ba45d50d8b34eaeabb6529fc5871bc015fde5faa3c639f5b58018566f8a202bd17a5d87ddc2e2a2b194f502da3a59b2d", @typed={0x14, 0x80, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic="94b38cf32ddaeda988a52da8ed16c94621db4dee803e7697962dfaafab708a19d0ffbcae99ffc26ed5d2a2aa62b9e203dc356ad23839994b7d20de65b019206a31b605fcf203dc5050794da1741ccb94d1748628bf20df7e597c882dc3a391e779abe4f22d1fd10a931e9855a04861ffce04e005cad2cebe1e97b4948ba59d13d56a14070b39942850adc0bce61367c432522bd3938270bd013de3bc3267558e37e3b3f7ed3c8f0edbbeb8d52880e7d7a8e37ea83d7930e4e3581b84e8cb5b39107610bb0317c6a8cba69e", @typed={0x68, 0x78, @binary="6332810b4ed092f3cc0a48b43ea1eccfeb118fecd6a666a838773df30696581e45d2fcc82e2673541d53e493a7cd2c37fc8eb40b8632f56ded9543d7f276ef6738f2d6b1cb174891b5492e7a77a8bace6669b9cccc22587c711fecaf309c53382797"}, @typed={0x8, 0x66, @ipv4=@broadcast}, @generic="15a9c78cd035304c50fb77e0ebed8a4aa5fa08a7a5b7288e", @typed={0x8, 0x6f, @uid=r6}, @typed={0x8, 0x7f, @ipv4=@rand_addr=0x8000}, @typed={0x4, 0x44}]}, @typed={0xc, 0x1c, @u64=0x4}, @generic="9df87f21246cf231d52eb5c3c13ca760cc0325951dc05325dcc3776205113e7ddb67be29b1d57d26b5e58b2220e15dfebd703d3e2ac994ed6b3597922364312ceedfb579d9175689e00fb92766a90f68a2f92bc16d70c143af6419d681f6ccec0477e9c80f7196d95f75f14163c296ba1de02853bf402f6432f0c7165181ed", @typed={0x8, 0x25, @u32=0xfffffffffffffffc}, @generic="fa4d8395c16f1953d637810fd902163c0d785df9ccf759e537ba2439697850511838fce103876b0dc5db34d34b28b094bb806fb0ccb2bd7b370565501e0bf682d3faccaf73b9057c2f5e222796e1bd69c21589eb950fea4a7d0559117c21687240c790ea31c194b184df55a424ede1f606fa4dda2e8a416b037835a08c38bf602b1185722a06179a1102e0c2d45c17ddefc2ccd12a76228b26f39ae20f169a9ce31bef3c283db9e1"]}, 0x4bc}, {&(0x7f0000000e00)={0x1114, 0x23, 0x24, 0x70bd26, 0x25dfdbfc, "", [@nested={0xfc, 0x6, [@generic="16ae3b73944771f105df97473d8760d8cb75ae9f084098e07d2a02648d2f02b9b5351cc7962249229f52802383ad326c0d3560e9958875f919dc0fa386fad3", @generic="abf47c530ca1313db06196b1de5f9e27126eb7b2ee74fe834786259225da79e1fc2d1326aafcf4c7dd4c36b8de47296535056ccf09ebd819db506beb9b22eaa2cf6785bacaef91a8b8498d609af374fa42951a02d909f29da28c178b6111ac823ccf8550adcc92981e94ebb2a82983cf39bd6946e6639b2f120a8482c90d35b34f63c61fd6db644a63fe2270e93cb98e99ba50dde5d13d40c29c96abd4e7bebce60a667e75bacd0b807a1f86bb3c4d97", @typed={0x8, 0x69, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}]}, @typed={0x8, 0x6c, @fd=r0}, @generic="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"]}, 0x1114}, {&(0x7f0000000440)={0x18, 0x1a, 0xbeecf8b4d67b6134, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x42, @u32=0x2}]}, 0x18}, {&(0x7f0000001f40)={0x28, 0x2a, 0x300, 0x70bd26, 0x25dfdbfb, "", [@typed={0x18, 0x92, @str='+posix_acl_access.]\x00'}]}, 0x28}, {&(0x7f0000001f80)={0xe4, 0x3d, 0x716, 0x70bd2c, 0x25dfdbfd, "", [@generic="eb15d3b81c26a1b2e3eedeba9a451864bd097d97348a372979f44ae62223a124e3e0f141683bc5eb753d4c0aeecebc0725ee91976fee0a720f7b4193fed2e0119b1ba94082b54879c95c57affbd3f59e1235b385111c34e847d726e1a20d6dd61ffb8d0c3cf7048f9a1c4e08f1e3182d53baf630e0c3c45877adf79dd577d16310f1bb95d6afdc31ff72adcc78a028025281280a8e1357818697374eea50824c0376b4b34acc9972bd62da794eb976a145e3a410c6a839d73623cf75baa0dbe401d80ef043fb76c2f573b268d44352c313"]}, 0xe4}], 0x7, 0x0, 0x0, 0x20000800}, 0x24004841) sendto$rose(r3, &(0x7f0000000100)="8ca1d4b04e4f4b08e875", 0xa, 0x8000, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 10:36:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0xaf65000000000000, 0x801}, 0xc) 10:36:05 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x1000000]}) 10:36:05 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x2000000]}) 10:36:06 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0xf0ffffff00000000, 0x801}, 0xc) 10:36:06 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:36:06 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x20000000]}) 10:36:06 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/dullb0\x00'], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:06 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x100000000000000]}) 10:36:06 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:36:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0xfffffffffffff000, 0x801}, 0xc) 10:36:06 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:06 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x200000000000000]}) 10:36:06 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:36:07 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:07 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x2000000000000000]}) 10:36:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x802}, 0xc) 10:36:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:07 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) r1 = semget(0x3, 0x3, 0x490) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f00000000c0)=0xffffffff) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x200, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', r3}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) r4 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)="6d9c6a1e973b418e64f38f71fde4ec1e98d074e33ec4eddfc2c0a6af5d574cf52b44a2dfabdb625483f4a204bdb31313ff22200d885fb174d28150fa1c8a0e06738951ea4895790fed4e8d52411ddcaed4bf3d3502105a1bfc9c717a46c3a6583e2f4eb6b79430d2eddd2ad2f2a4fb492a25bf34badbac4e9fe03630687131c434f2de91d20e6464807d18f33fce4e6e5df426ff69cdc30b1f8793f592d13e0bdef65461fee00e1987ab1a1c08848e0300", 0xb1, 0xfffffffffffffff9) keyctl$instantiate(0xc, r4, &(0x7f00000003c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:'}, 0x19, 0xfffffffffffffffc) 10:36:07 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:07 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x2]}) 10:36:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80b}, 0xc) 10:36:07 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x1000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) r1 = dup2(r0, r0) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') 10:36:07 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x2000]}) 10:36:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:08 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x1000000]}) 10:36:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0x7) 10:36:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:08 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:08 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) r7 = getegid() setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {0x1, 0x7}, [{0x2, 0x1, r2}], {0x4, 0x5}, [{0x8, 0x5, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x3, r6}, {0x8, 0x7, r7}]}, 0x54, 0x1) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4002040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r8, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000002c0)=""/7) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:08 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x2000000]}) 10:36:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0x8) 10:36:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:08 executing program 4: mkdir(&(0x7f0000000500)='./file0\x00', 0x20) r0 = syz_open_dev$media(&(0x7f0000000380)='/dev/media#\x00', 0xc3, 0x8000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000003c0), 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000340)=""/39) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000300)=@v2={0x2000000, [{0x46ac2383, 0x3}, {0xa9, 0x4}]}, 0x14, 0x3) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000440)={0x800, 0x2, 0x2, 0x0, 0x0, [{r1, 0x0, 0x9}, {r1, 0x0, 0xf4}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000004c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/dev/nullb04'], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:08 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x20000000]}) 10:36:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xb) 10:36:08 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x7, &(0x7f0000000180)={&(0x7f0000000100)}}, 0x18) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/devlb0\x00\x00\x00\x00 '], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000280)=0x3) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:09 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x100000000000000]}) 10:36:09 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0x25) 10:36:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:09 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x200000000000000]}) 10:36:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:09 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f64647699cd5a5543433a0dd41bfd71789ce8813b34da99845497774cddd192c90905a1d914a9210aa381119ca7bb95d24bee1c74ea0ea7d388b755c3e5325d6666edbc723c65d021bc32a6e7918da9a8c875accb92f281926725abf4873d764e77ccceecd63891fe6f32ad70c35365f02ec9a5ccf7054fbffa28cfd6c7156df732179bc3bc81bc97b4b79cf48efbbe76cb8eacc4d70eb74986170d51d05379509e594a1a2e"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0x200000cc) 10:36:09 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x2000000000000000]}) 10:36:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:09 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x2]}) 10:36:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80080, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:10 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x2000]}) 10:36:10 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:10 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:10 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:10 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x1000000]}) 10:36:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000180)=""/154, 0x9a}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/128, 0x80}], 0x5, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000080)={0x4002, 0x0, 0x100000001, 0x6}) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:10 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x2000000]}) 10:36:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:10 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:10 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x20000000]}) 10:36:11 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:11 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:11 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x100000000000000]}) 10:36:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = open(&(0x7f0000000040)='./file0\x00', 0x300, 0x2) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/151) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:11 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x200000000000000]}) 10:36:11 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) mkdir(&(0x7f0000000080)='./file0\x00', 0x1f5) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x40) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 10:36:11 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x2000000000000000]}) 10:36:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:11 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x2]}) 10:36:12 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x100, 0x50000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000280)) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/de\x00\x00\x00\x00llb0\x00'], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1389.394714][ T8479] input: syz1 as /devices/virtual/input/input39 10:36:12 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:12 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x2000]}) 10:36:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:12 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x802c0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x5, 0x8008, 0x7ff, 0x40, 0xfffffffffffffffb, 0x1, 0x2, r1}, &(0x7f0000000180)=0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:12 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x80) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000100)={0x7, 0x5}) write$P9_RCLUNK(r0, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:12 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x1000000]}) 10:36:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0a9c1f123cef3e319bd070b9822e0447c35130ce2fac06f26d2459a5fd54d5b3dd8999d1f78064636b0af6b7115e7472e910adf112a0cb722e2c03b5c844ab55d2ac30f0c671e45201ffffffffffffff6486e5782bf40eb038a89793b02c955321332dca01d03fc80e8ef37ee18ee973ffa7") getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000180)=0x40) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:12 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x2000000]}) [ 1390.164380][ T8717] input: syz1 as /devices/virtual/input/input40 10:36:12 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x20000000]}) 10:36:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) finit_module(r0, &(0x7f0000000040)='\x00', 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) [ 1390.436304][ T8940] input: syz1 as /devices/virtual/input/input41 10:36:13 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:13 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 10:36:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:13 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x16, &(0x7f0000000080)='user}posix_acl_access\x00'}, 0x30) sched_rr_get_interval(r1, &(0x7f0000000100)) 10:36:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:13 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000400)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000100)={0x9, 0x6, 0x4, 0x0, 0x0, [], [], [], 0x7, 0x8}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x20, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x81}}, {@sq={'sq', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x5}}, {@timeout={'timeout', 0x3d, 0x10001}}, {@timeout={'timeout', 0x3d, 0x6}}, {@timeout={'timeout', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x9}}, {@common=@cache_none='cache=none'}, {@timeout={'timeout', 0x3d, 0x9}}], [{@fsname={'fsname', 0x3d, 'security[!-lo+[-'}}]}}) 10:36:13 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 10:36:13 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}) 10:36:13 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) [ 1391.066188][ T9066] input: syz1 as /devices/virtual/input/input42 10:36:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x52, &(0x7f0000000080)="0adc1f123c120180000000000000bcece50f6f3b210bb2d57e549637af4ecc0bf97ad183af802d39ce9a83ba1ffe53edced80369abb5ebf6e035a4ad03") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:13 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 10:36:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1391.358193][ T9244] input: syz1 as /devices/virtual/input/input43 10:36:14 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:14 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}) 10:36:14 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@nullb='/dev/nullb0\x00', &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000001c0)='ext4\x00', 0x2000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x400000) r3 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000240)=0x3) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000180)=""/140) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000280)={0x0, 0x0, 0x2080}) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x10000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000002300)) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000140)={0x19, 0xa, 0x6, 0x1, 0x5, 0xc930, 0x2, 0xb0, 0xffffffffffffffff}) 10:36:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:14 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 10:36:14 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) [ 1392.075972][ T9317] input: syz1 as /devices/virtual/input/input44 10:36:14 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x81a4, 0x2000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "c41386edb64e3749affe30b751b4c767c29f609b7d225c6e1e24749b5bf2cf6d308f4b63c8851c875c23e0964a7dfa5d8c8565af4676c204539f781c2d13c951f0f17cb61173085e37679a2a6eb7bab2fdb8d05a9adb0e05688f316f4a2a972a8a20008c743597fcd31a36fcb41deee03c66875a92d7cac7d388bbd66278c01f1b80ebfa7e0a17bd65e5647bd6d7357161a97bb7a63049abc8f8cd2ba35bb9b4ab630a1c9efa916a10bc06865d3e2b0c"}, 0xc0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0x21e) 10:36:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:36:14 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) 10:36:14 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="32906def724d76e1a65b1a81762fc5820b7a39cff8508c08fe247619fe9e28f290a6d8fbc0a8b8f02682f1f0518f07465c7697a98a5aade32f68b28392d2cfca08bc4a00ee2e3a8af646b0cc54de168dd2d9cab9cf3cec5faa89573d37654dca6e3f571d72c0a21caf5370cc9b62e04a6e907fd509ff7da5141f23196081bd40d26d1de9f94efdeb4068f69f0a0a545338def082c4c78a62df115a30c02b7f450d14e2cc222633a77ba01364"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x94801, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000000c0)=0x3) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="8b000000449684afc6c487b0e23b1ac26ac5ae187ef736f3a45876330b13ea29cdb9e7aef5e3925747dc0071c73927122f0d71171c524c98bebe01d71b496ec52ee25d4ba071aef23940b7d075f191d7ab4846bfedd4040078f3e779dc7fbb3c0841fbe936fc0a012766aabd6fd457ae6b6d4642ea5681b058df83a6fc59073c0812c7"], &(0x7f0000000100)=0x93) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x8) [ 1392.340080][ T9643] input: syz1 as /devices/virtual/input/input45 10:36:15 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:15 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000100)="130a3848f66362292841265925aca56ca4d0157a6b6b59c4f58bd5a928a7de4e83b0ea3588e069f0800d65ef832254f9019479f96e475f403502a731ad66f5f4ef8e7924fb06ec63fd1a6319df93690c18686b3b7f3873e443ba03d57c93055ff719d1b8931d6df08095d5c4531cb1bc84326209d6a75b76ce642280630842705b8fba1b6f08cd0b4577bba4af0dddd78b26", &(0x7f00000001c0)=""/4096}, 0x18) 10:36:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 10:36:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 1392.660222][ T9727] input: syz1 as /devices/virtual/input/input46 10:36:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 10:36:15 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x9}) 10:36:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4c0080, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f0000000080)={0x5, &(0x7f0000000100)="b7ca44f207d602e3f8fa1ba02b890105251f1ab57e5f08d391f2598560d0350df6b6b4b5e3233d513e1093dcdbfaf4cc219790bc0a887938914654025f54ef2429c805831980ae735e88bd"}) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 10:36:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}) [ 1393.072118][ T9785] input: syz1 as /devices/virtual/input/input47 10:36:15 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 10:36:15 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:16 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:16 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}) 10:36:16 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="8b000000732000000000006c"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 10:36:16 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/dullb0\x00'], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7, 0x4, 0x3f}, &(0x7f0000000100)=0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800020000000000000000009500"/25], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18120000de7d97fcad284ebb85b02b5aa577ec1ccff0e6f827b8571044d0476a53a5fbd69234e4be0392672768449601bd8cd39bc2907585619047dafbc500a71cb2c8851b6d55179d1208c10600d2cead33f815ddceb7f6857f80f0c3d299978fb5eefdcff5bb1aca71fd45a48a61842ea8358d5b928123ef83e2a75360879dc1b3f7087dc5ebeeb09bbfbb5c57c7e4a708e709219664adb527a4", @ANYRES32=r4, @ANYBLOB="0000000000000000850000002c000000"], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000240)=0x3, 0x4) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={r6, @empty, @multicast1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000280)={r3, 0x1, 0x36, "dac15c55b1d405b7a9b5270cfa77e67a2a5ee2f22d6bf978e6e3dd679064651b270345190cefd64d3492dcf8013eafc70dec96151d60"}, 0x3e) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={r3, @in={{0x2, 0x4e20, @rand_addr=0x1b}}, 0x401, 0xc1, 0x100000001, 0x8, 0x43f}, &(0x7f0000000200)=0x98) bind$netlink(r1, &(0x7f00000000c0), 0xfffffffffffffee5) 10:36:16 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:16 executing program 3 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:16 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 10:36:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002700)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000002800)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002840)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000002940)=0xe8) syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x9, &(0x7f0000002600)=[{&(0x7f0000000100)="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", 0xfc}, {&(0x7f0000000200)="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", 0x1000, 0x3f}, {&(0x7f0000001200)="2079b0b25a1cfcae621f71dd275b635aa106324d63ca489d50affb565b66fa2150dc274d67dac91b928cda28a8a9003ffeabb0beb3cdf6dc5f093895f8a75e7b3324832a52ab56df15bc583aa675eb40f3d3839988edec28456f9cadd3a96d0e9483af9bd02f6a77e794d393d28c855978b642002926cfb83c6eb3e2179dd9046911267bc02ad715", 0x88, 0x6}, {&(0x7f00000012c0)="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", 0x1000, 0xfffffffffffffffa}, {&(0x7f00000022c0)="03075d0e3ee3b9a4942b8b9b9fa2c543579d46c52956de506c3c05485c1bc1796e4ad80c3e8f82288581c7444513bd4101523d94707ff9556107db14a7baae794cc694ba0cb52f8eac1207913e07a6ac82a35101ee81c6e26489a91036d1bc8cbdcfba017637cee3a57c4e532b748099f44857c17c42fb167f615115c437562b936e52da214bb64cbf28446bb075da5fa03c22babe545b82bfb5f946e9aa0221006ce25b48b901fc8acd10031531da7050e2fe33266368dcf183a6f7ac996e9cfdbc6224e5971501bfd77dc7f96427ed", 0xd0, 0xa}, {&(0x7f00000023c0)="49659a25014162cb25b1c315b6515fa942266c6e640aa6c9806285d427c3359a7a42b2d761405c70681afd", 0x2b, 0x3}, {&(0x7f0000002400)="0e6a93866a14bc11ff828d32f50ab74bf97f6a2c498bfc8f381d7f86539db8a37b266b27374d17b67511802f9cfeff3b77547725fa0a2d908b36271b3e187294b0930a33e67303165395c7aff0c90183d107b400eca8a255f596014e564cdd16124eadec439dc782778e54c5", 0x6c, 0x8}, {&(0x7f0000002480)="2940d8e9769a5ae9cfe2b3888df41460cae99163e3ab7d3942ccd2da32a4e3a442c44cf1e0de18c88307bd8bb65ceda9730f3acf91ac9c207e338d0fc5d65477478356762cf1bdce9255a3d66b78694708d4cdd63ec1e2f81293e5ed8f4fc9784b0f99730010466ea681682dc0b6241f91b6e3bfbcc0ae7f737c24bb1543b1", 0x7f, 0x2}, {&(0x7f0000002500)="1b12e709d600acfbf699aa199c325b91b77669c20357b9940f5437511b5169d5a3b0a2c51b33ab3c8fd229ea3648cf645b4577ca33ed5ae461a9c8c6599f18f957688306e26eb0f20a23ce0fec2f7e0425ad4827c3e15db7e534da36eed01254374e6c441b549d2274ccf8578aef687f4b7452ba925126722e10265b8e76d4c107117c4b3dcf4630d732c12b92157ee61a543f31e98f9d35aec3d917af261ef060adc8efdeda6c70ab8951c4689ef3cf60deaae891679ced2daa3530def5d108e36a0424b0dc62f14ad5113bccae38a934b9e411b7f4eb2fb0bf729b4320", 0xde, 0x3f}], 0x2000000, &(0x7f0000002980)={[{@nouser_xattr='nouser_xattr'}, {@user_xattr='user_xattr'}, {@noacl='noacl'}, {@user_xattr='user_xattr'}, {@acl='acl'}, {@acl='acl'}, {@fault_injection={'fault_injection'}}, {@user_xattr='user_xattr'}], [{@fsname={'fsname', 0x3d, '\xfeppp0(vboxnet0\'securitymime_typekeyringppp0'}}, {@uid_gt={'uid>', r2}}, {@euid_gt={'euid>', r3}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'staff_u'}}]}) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) [ 1394.245239][T10331] input: syz1 as /devices/virtual/input/input48 [ 1394.275298][T10331] FAULT_INJECTION: forcing a failure. [ 1394.275298][T10331] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.291343][T10331] CPU: 0 PID: 10331 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #67 [ 1394.299523][T10331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1394.309601][T10331] Call Trace: [ 1394.309660][T10331] dump_stack+0x172/0x1f0 [ 1394.309685][T10331] should_fail.cold+0xa/0x15 [ 1394.309717][T10331] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1394.317335][T10331] ? ___might_sleep+0x163/0x280 [ 1394.317357][T10331] __should_failslab+0x121/0x190 [ 1394.317373][T10331] should_failslab+0x9/0x14 [ 1394.317396][T10331] __kmalloc_track_caller+0x2d8/0x740 [ 1394.347596][T10331] ? pointer+0xa30/0xa30 [ 1394.351859][T10331] ? __lock_acquire+0x548/0x3fb0 [ 1394.356826][T10331] ? kasprintf+0xbb/0xf0 [ 1394.361056][T10331] kvasprintf+0xc8/0x170 [ 1394.365288][T10331] ? bust_spinlocks+0xe0/0xe0 [ 1394.369967][T10331] ? debug_check_no_obj_freed+0x200/0x464 [ 1394.375708][T10331] kasprintf+0xbb/0xf0 [ 1394.379872][T10331] ? kvasprintf_const+0x190/0x190 [ 1394.384911][T10331] ? input_default_getkeycode+0x520/0x520 [ 1394.390619][T10331] input_devnode+0x4c/0x90 [ 1394.395064][T10331] device_get_devnode+0x175/0x2e0 [ 1394.400099][T10331] ? refcount_sub_and_test_checked+0x154/0x200 [ 1394.406268][T10331] devtmpfs_delete_node+0xaa/0x1a0 [ 1394.411398][T10331] ? devtmpfs_create_node+0x250/0x250 [ 1394.416776][T10331] ? __device_link_free_srcu+0x120/0x120 [ 1394.422404][T10331] ? refcount_dec_and_test_checked+0x1b/0x20 [ 1394.428383][T10331] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1394.434715][T10331] ? kobject_put+0x84/0xe0 [ 1394.439230][T10331] ? __device_link_free_srcu+0x120/0x120 [ 1394.444866][T10331] ? klist_children_put+0x4a/0x60 [ 1394.449988][T10331] ? klist_put+0xdc/0x180 [ 1394.454323][T10331] device_del+0x8b4/0xc40 [ 1394.458657][T10331] ? __device_links_no_driver+0x250/0x250 [ 1394.464387][T10331] ? mark_held_locks+0xa4/0xf0 [ 1394.469158][T10331] ? _raw_spin_unlock_irq+0x28/0x90 [ 1394.474345][T10331] ? __input_unregister_device+0x153/0x4a0 [ 1394.480137][T10331] ? _raw_spin_unlock_irq+0x28/0x90 [ 1394.485353][T10331] cdev_device_del+0x1a/0x80 [ 1394.489943][T10331] evdev_disconnect+0x42/0xb0 [ 1394.494697][T10331] __input_unregister_device+0x200/0x4a0 [ 1394.500537][T10331] input_unregister_device+0xc5/0x110 [ 1394.505912][T10331] uinput_destroy_device+0x1f4/0x250 [ 1394.511193][T10331] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1394.517078][T10331] ? tomoyo_domain+0xc5/0x160 [ 1394.521772][T10331] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1394.527960][T10331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1394.534193][T10331] ? tomoyo_path_number_perm+0x263/0x520 [ 1394.539819][T10331] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1394.545618][T10331] ? ___might_sleep+0x163/0x280 [ 1394.550483][T10331] uinput_ioctl+0x4a/0x60 [ 1394.554802][T10331] ? uinput_compat_ioctl+0x90/0x90 [ 1394.559903][T10331] do_vfs_ioctl+0xd6e/0x1390 [ 1394.564484][T10331] ? ioctl_preallocate+0x210/0x210 [ 1394.569579][T10331] ? selinux_file_mprotect+0x620/0x620 [ 1394.575018][T10331] ? __fget+0x381/0x550 [ 1394.579183][T10331] ? ksys_dup3+0x3e0/0x3e0 [ 1394.583608][T10331] ? tomoyo_file_ioctl+0x23/0x30 [ 1394.588531][T10331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1394.594823][T10331] ? security_file_ioctl+0x93/0xc0 [ 1394.599935][T10331] ksys_ioctl+0xab/0xd0 [ 1394.604084][T10331] __x64_sys_ioctl+0x73/0xb0 [ 1394.608664][T10331] do_syscall_64+0x103/0x610 [ 1394.613239][T10331] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1394.619129][T10331] RIP: 0033:0x458c29 [ 1394.623020][T10331] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:36:17 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:17 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) 10:36:17 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2000, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4102000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000100)=@ethtool_dump={0x42}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) [ 1394.642634][T10331] RSP: 002b:00007f8855b61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1394.651055][T10331] RAX: ffffffffffffffda RBX: 00007f8855b61c90 RCX: 0000000000458c29 [ 1394.659030][T10331] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1394.667009][T10331] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1394.674988][T10331] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8855b626d4 [ 1394.683247][T10331] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 10:36:17 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) r0 = request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='securitymd5sumI\x00', 0xfffffffffffffffb) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000380)) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0x7, 0xffffffffffff8001}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'sha256_mb\x00'}}, &(0x7f00000001c0)="2d433e26cd3058b6a7c8264645f1b5a937ab6413ac03be5f2c93ae62ca8743f1dbac", &(0x7f0000000300)=""/113) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:17 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 10:36:17 executing program 3 (fault-call:4 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1394.931417][T10526] input: syz1 as /devices/virtual/input/input49 [ 1394.963509][T10526] FAULT_INJECTION: forcing a failure. [ 1394.963509][T10526] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.985483][T10526] CPU: 0 PID: 10526 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #67 [ 1394.993583][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1395.003671][T10526] Call Trace: [ 1395.006983][T10526] dump_stack+0x172/0x1f0 [ 1395.011342][T10526] should_fail.cold+0xa/0x15 [ 1395.016357][T10526] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1395.022269][T10526] ? ___might_sleep+0x163/0x280 [ 1395.027135][T10526] __should_failslab+0x121/0x190 [ 1395.032081][T10526] should_failslab+0x9/0x14 [ 1395.036608][T10526] kmem_cache_alloc_trace+0x2d1/0x760 [ 1395.041994][T10526] ? mutex_trylock+0x1e0/0x1e0 [ 1395.046778][T10526] ? kasan_check_write+0x14/0x20 [ 1395.051748][T10526] kobject_uevent_env+0x2fb/0x1030 [ 1395.056916][T10526] ? wait_for_completion+0x440/0x440 [ 1395.062220][T10526] kobject_uevent+0x20/0x26 [ 1395.066743][T10526] device_del+0x758/0xc40 [ 1395.071537][T10526] ? __device_links_no_driver+0x250/0x250 [ 1395.077272][T10526] ? _raw_spin_unlock_irq+0x28/0x90 [ 1395.082488][T10526] ? __input_unregister_device+0x153/0x4a0 [ 1395.088307][T10526] ? _raw_spin_unlock_irq+0x28/0x90 [ 1395.088331][T10526] cdev_device_del+0x1a/0x80 [ 1395.088348][T10526] evdev_disconnect+0x42/0xb0 [ 1395.088365][T10526] __input_unregister_device+0x200/0x4a0 [ 1395.088386][T10526] input_unregister_device+0xc5/0x110 [ 1395.098370][T10526] uinput_destroy_device+0x1f4/0x250 [ 1395.098390][T10526] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1395.098404][T10526] ? tomoyo_domain+0xc5/0x160 [ 1395.098420][T10526] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1395.098438][T10526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1395.098459][T10526] ? tomoyo_path_number_perm+0x263/0x520 [ 1395.149938][T10526] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1395.155748][T10526] ? ___might_sleep+0x163/0x280 [ 1395.160614][T10526] uinput_ioctl+0x4a/0x60 [ 1395.164951][T10526] ? uinput_compat_ioctl+0x90/0x90 [ 1395.170063][T10526] do_vfs_ioctl+0xd6e/0x1390 [ 1395.174653][T10526] ? ioctl_preallocate+0x210/0x210 [ 1395.179748][T10526] ? selinux_file_mprotect+0x620/0x620 [ 1395.185206][T10526] ? __fget+0x381/0x550 [ 1395.189357][T10526] ? ksys_dup3+0x3e0/0x3e0 [ 1395.193779][T10526] ? tomoyo_file_ioctl+0x23/0x30 [ 1395.198710][T10526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1395.204942][T10526] ? security_file_ioctl+0x93/0xc0 [ 1395.210046][T10526] ksys_ioctl+0xab/0xd0 [ 1395.214204][T10526] __x64_sys_ioctl+0x73/0xb0 [ 1395.218808][T10526] do_syscall_64+0x103/0x610 [ 1395.223395][T10526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1395.229371][T10526] RIP: 0033:0x458c29 [ 1395.233260][T10526] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1395.252862][T10526] RSP: 002b:00007f8855b61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1395.261290][T10526] RAX: ffffffffffffffda RBX: 00007f8855b61c90 RCX: 0000000000458c29 [ 1395.269422][T10526] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1395.277403][T10526] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 10:36:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:17 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 10:36:17 executing program 0: sysfs$2(0x2, 0x8f25, &(0x7f0000000040)=""/122) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x64, 0x1, 0x0, "92039b989a45e9008f7aa804ff27cc2e", "6518adeece3ce4076724de2c9a4587e8a9aff1eebe6153d4357b61b572b725f9e40a0d0f0b14a2bc10b0118951425cd4da92aff9f560a09c39037e14bf39393b605d1628d0e82b4547dcd253f3d938"}, 0x64, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:17 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x109002, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000280)=0x4) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000180)=0x78) [ 1395.285369][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8855b626d4 [ 1395.293360][T10526] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 10:36:17 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}) 10:36:18 executing program 3 (fault-call:4 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1395.516887][T10800] input: syz1 as /devices/virtual/input/input50 [ 1395.549058][T10800] FAULT_INJECTION: forcing a failure. [ 1395.549058][T10800] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1395.562419][T10800] CPU: 0 PID: 10800 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #67 [ 1395.570415][T10800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1395.580483][T10800] Call Trace: [ 1395.583884][T10800] dump_stack+0x172/0x1f0 [ 1395.588234][T10800] should_fail.cold+0xa/0x15 [ 1395.592846][T10800] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1395.598668][T10800] ? __lock_acquire+0x548/0x3fb0 [ 1395.603626][T10800] ? trace_hardirqs_on+0x67/0x230 [ 1395.608714][T10800] should_fail_alloc_page+0x50/0x60 [ 1395.613930][T10800] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1395.619329][T10800] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1395.625156][T10800] ? find_held_lock+0x35/0x130 [ 1395.625185][T10800] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1395.625209][T10800] cache_grow_begin+0x9c/0x860 [ 1395.625233][T10800] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1395.635830][T10800] kmem_cache_alloc_trace+0x67f/0x760 [ 1395.652195][T10800] ? mutex_trylock+0x1e0/0x1e0 [ 1395.656985][T10800] ? kasan_check_write+0x14/0x20 [ 1395.662051][T10800] kobject_uevent_env+0x2fb/0x1030 [ 1395.667182][T10800] ? wait_for_completion+0x440/0x440 [ 1395.672479][T10800] kobject_uevent+0x20/0x26 [ 1395.676974][T10800] device_del+0x758/0xc40 [ 1395.681306][T10800] ? __device_links_no_driver+0x250/0x250 [ 1395.687019][T10800] ? _raw_spin_unlock_irq+0x28/0x90 [ 1395.692224][T10800] ? __input_unregister_device+0x153/0x4a0 [ 1395.698288][T10800] ? _raw_spin_unlock_irq+0x28/0x90 [ 1395.703519][T10800] cdev_device_del+0x1a/0x80 [ 1395.708104][T10800] evdev_disconnect+0x42/0xb0 [ 1395.712827][T10800] __input_unregister_device+0x200/0x4a0 [ 1395.718457][T10800] input_unregister_device+0xc5/0x110 [ 1395.723954][T10800] uinput_destroy_device+0x1f4/0x250 [ 1395.729251][T10800] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1395.735146][T10800] ? tomoyo_domain+0xc5/0x160 [ 1395.739830][T10800] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1395.745892][T10800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1395.752127][T10800] ? tomoyo_path_number_perm+0x263/0x520 [ 1395.757771][T10800] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1395.763603][T10800] ? ___might_sleep+0x163/0x280 [ 1395.768446][T10800] uinput_ioctl+0x4a/0x60 [ 1395.772778][T10800] ? uinput_compat_ioctl+0x90/0x90 [ 1395.777918][T10800] do_vfs_ioctl+0xd6e/0x1390 [ 1395.782537][T10800] ? ioctl_preallocate+0x210/0x210 [ 1395.787644][T10800] ? selinux_file_mprotect+0x620/0x620 [ 1395.793118][T10800] ? __fget+0x381/0x550 [ 1395.797266][T10800] ? ksys_dup3+0x3e0/0x3e0 [ 1395.801675][T10800] ? tomoyo_file_ioctl+0x23/0x30 [ 1395.806605][T10800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1395.812842][T10800] ? security_file_ioctl+0x93/0xc0 [ 1395.817953][T10800] ksys_ioctl+0xab/0xd0 [ 1395.822097][T10800] __x64_sys_ioctl+0x73/0xb0 [ 1395.826691][T10800] do_syscall_64+0x103/0x610 [ 1395.831315][T10800] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1395.837193][T10800] RIP: 0033:0x458c29 [ 1395.841205][T10800] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:36:18 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:18 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 10:36:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000040)={0x633, "1d2c1f1721ff651c70d398e3b3eaeaa4a1c9c4ff1c82bdba405cd57445842f5f", 0x3, 0x1, 0x6, 0x320004, 0xe}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:18 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1395.861123][T10800] RSP: 002b:00007f8855b61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1395.869574][T10800] RAX: ffffffffffffffda RBX: 00007f8855b61c90 RCX: 0000000000458c29 [ 1395.877558][T10800] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1395.885538][T10800] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1395.893677][T10800] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8855b626d4 [ 1395.901659][T10800] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 10:36:18 executing program 3 (fault-call:4 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:18 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}) [ 1396.104005][T11016] input: syz1 as /devices/virtual/input/input51 [ 1396.145463][T11016] FAULT_INJECTION: forcing a failure. [ 1396.145463][T11016] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.198423][T11016] CPU: 0 PID: 11016 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #67 [ 1396.206465][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1396.216544][T11016] Call Trace: [ 1396.219852][T11016] dump_stack+0x172/0x1f0 [ 1396.224207][T11016] should_fail.cold+0xa/0x15 [ 1396.228845][T11016] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1396.228872][T11016] ? ___might_sleep+0x163/0x280 [ 1396.228895][T11016] __should_failslab+0x121/0x190 [ 1396.228913][T11016] should_failslab+0x9/0x14 [ 1396.228932][T11016] __kmalloc_track_caller+0x2d8/0x740 [ 1396.228947][T11016] ? pointer+0xa30/0xa30 [ 1396.228965][T11016] ? kasprintf+0xbb/0xf0 [ 1396.228980][T11016] kvasprintf+0xc8/0x170 [ 1396.228993][T11016] ? bust_spinlocks+0xe0/0xe0 [ 1396.229015][T11016] ? pointer+0xa30/0xa30 [ 1396.229031][T11016] kasprintf+0xbb/0xf0 [ 1396.229044][T11016] ? kvasprintf_const+0x190/0x190 [ 1396.229064][T11016] ? cleanup_uevent_env+0x50/0x50 [ 1396.229087][T11016] ? input_default_getkeycode+0x520/0x520 [ 1396.229105][T11016] input_devnode+0x4c/0x90 [ 1396.239810][T11016] device_get_devnode+0x175/0x2e0 [ 1396.239829][T11016] dev_uevent+0x3e8/0x580 [ 1396.239843][T11016] ? device_get_devnode+0x2e0/0x2e0 [ 1396.239859][T11016] ? kobject_uevent_env+0x2fb/0x1030 [ 1396.239892][T11016] ? rcu_read_lock_sched_held+0x110/0x130 [ 1396.239912][T11016] ? device_get_devnode+0x2e0/0x2e0 [ 1396.331544][T11016] kobject_uevent_env+0x487/0x1030 [ 1396.336659][T11016] ? wait_for_completion+0x440/0x440 [ 1396.341964][T11016] kobject_uevent+0x20/0x26 [ 1396.346478][T11016] device_del+0x758/0xc40 [ 1396.350842][T11016] ? __device_links_no_driver+0x250/0x250 [ 1396.356555][T11016] ? _raw_spin_unlock_irq+0x28/0x90 [ 1396.361739][T11016] ? __input_unregister_device+0x153/0x4a0 [ 1396.367541][T11016] ? _raw_spin_unlock_irq+0x28/0x90 [ 1396.372741][T11016] cdev_device_del+0x1a/0x80 [ 1396.377437][T11016] evdev_disconnect+0x42/0xb0 [ 1396.382125][T11016] __input_unregister_device+0x200/0x4a0 [ 1396.387831][T11016] input_unregister_device+0xc5/0x110 [ 1396.393195][T11016] uinput_destroy_device+0x1f4/0x250 [ 1396.398726][T11016] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1396.404698][T11016] ? tomoyo_domain+0xc5/0x160 [ 1396.409479][T11016] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1396.415640][T11016] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1396.421864][T11016] ? tomoyo_path_number_perm+0x263/0x520 [ 1396.427506][T11016] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1396.433411][T11016] ? ___might_sleep+0x163/0x280 [ 1396.438271][T11016] uinput_ioctl+0x4a/0x60 [ 1396.442602][T11016] ? uinput_compat_ioctl+0x90/0x90 [ 1396.447811][T11016] do_vfs_ioctl+0xd6e/0x1390 [ 1396.452410][T11016] ? ioctl_preallocate+0x210/0x210 [ 1396.457545][T11016] ? selinux_file_mprotect+0x620/0x620 [ 1396.462993][T11016] ? __fget+0x381/0x550 [ 1396.467223][T11016] ? ksys_dup3+0x3e0/0x3e0 [ 1396.471630][T11016] ? tomoyo_file_ioctl+0x23/0x30 [ 1396.476556][T11016] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1396.482817][T11016] ? security_file_ioctl+0x93/0xc0 [ 1396.488038][T11016] ksys_ioctl+0xab/0xd0 [ 1396.492205][T11016] __x64_sys_ioctl+0x73/0xb0 [ 1396.496789][T11016] do_syscall_64+0x103/0x610 [ 1396.501491][T11016] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1396.507461][T11016] RIP: 0033:0x458c29 [ 1396.511477][T11016] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1396.531903][T11016] RSP: 002b:00007f8855b61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1396.540313][T11016] RAX: ffffffffffffffda RBX: 00007f8855b61c90 RCX: 0000000000458c29 10:36:19 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x120) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:19 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 10:36:19 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) write$selinux_validatetrans(r1, &(0x7f0000000280)={'system_u:object_r:pam_exec_t:s0', 0x20, 'system_u:object_r:udev_var_run_t:s0', 0x20, 0x0, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x77) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="04122993bcd05df0b1fd37a674e61c9866e51c24b2b466bc3dcd74bfe434d2a5f52147e3dd87aed95ca99c4a"], 0xd, 0x2) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x28c000, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x319) [ 1396.548286][T11016] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1396.556279][T11016] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1396.564413][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8855b626d4 [ 1396.572426][T11016] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 10:36:19 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 10:36:19 executing program 3 (fault-call:4 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1396.863421][T11250] input: syz1 as /devices/virtual/input/input52 [ 1396.891266][T11250] FAULT_INJECTION: forcing a failure. [ 1396.891266][T11250] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.939272][T11250] CPU: 0 PID: 11250 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #67 [ 1396.947298][T11250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1396.958849][T11250] Call Trace: [ 1396.962171][T11250] dump_stack+0x172/0x1f0 [ 1396.966551][T11250] should_fail.cold+0xa/0x15 [ 1396.972067][T11250] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1396.987732][T11250] ? ___might_sleep+0x163/0x280 [ 1396.992609][T11250] __should_failslab+0x121/0x190 [ 1396.997557][T11250] should_failslab+0x9/0x14 [ 1397.002063][T11250] __kmalloc_track_caller+0x2d8/0x740 [ 1397.002081][T11250] ? pointer+0xa30/0xa30 [ 1397.002099][T11250] ? kasprintf+0xbb/0xf0 [ 1397.002115][T11250] kvasprintf+0xc8/0x170 [ 1397.002133][T11250] ? bust_spinlocks+0xe0/0xe0 [ 1397.025339][T11250] ? pointer+0xa30/0xa30 [ 1397.029684][T11250] kasprintf+0xbb/0xf0 [ 1397.033776][T11250] ? kvasprintf_const+0x190/0x190 [ 1397.038853][T11250] ? cleanup_uevent_env+0x50/0x50 [ 1397.043902][T11250] ? input_default_getkeycode+0x520/0x520 [ 1397.049659][T11250] input_devnode+0x4c/0x90 [ 1397.054180][T11250] device_get_devnode+0x175/0x2e0 [ 1397.059218][T11250] dev_uevent+0x3e8/0x580 [ 1397.063587][T11250] ? device_get_devnode+0x2e0/0x2e0 [ 1397.068817][T11250] ? kobject_uevent_env+0x2fb/0x1030 [ 1397.074109][T11250] ? rcu_read_lock_sched_held+0x110/0x130 [ 1397.079965][T11250] ? device_get_devnode+0x2e0/0x2e0 [ 1397.085351][T11250] kobject_uevent_env+0x487/0x1030 [ 1397.090651][T11250] ? wait_for_completion+0x440/0x440 [ 1397.096673][T11250] kobject_uevent+0x20/0x26 [ 1397.101186][T11250] device_del+0x758/0xc40 [ 1397.105527][T11250] ? __device_links_no_driver+0x250/0x250 [ 1397.111294][T11250] ? _raw_spin_unlock_irq+0x28/0x90 [ 1397.116502][T11250] ? __input_unregister_device+0x153/0x4a0 [ 1397.122321][T11250] ? _raw_spin_unlock_irq+0x28/0x90 [ 1397.127710][T11250] cdev_device_del+0x1a/0x80 [ 1397.132313][T11250] evdev_disconnect+0x42/0xb0 [ 1397.132332][T11250] __input_unregister_device+0x200/0x4a0 [ 1397.132351][T11250] input_unregister_device+0xc5/0x110 [ 1397.132371][T11250] uinput_destroy_device+0x1f4/0x250 [ 1397.132390][T11250] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1397.142681][T11250] ? tomoyo_domain+0xc5/0x160 [ 1397.142698][T11250] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1397.142717][T11250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1397.142729][T11250] ? tomoyo_path_number_perm+0x263/0x520 [ 1397.142746][T11250] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1397.142784][T11250] ? ___might_sleep+0x163/0x280 [ 1397.195297][T11250] uinput_ioctl+0x4a/0x60 [ 1397.199637][T11250] ? uinput_compat_ioctl+0x90/0x90 [ 1397.204792][T11250] do_vfs_ioctl+0xd6e/0x1390 [ 1397.209410][T11250] ? ioctl_preallocate+0x210/0x210 [ 1397.214541][T11250] ? selinux_file_mprotect+0x620/0x620 [ 1397.220096][T11250] ? __fget+0x381/0x550 [ 1397.224272][T11250] ? ksys_dup3+0x3e0/0x3e0 [ 1397.228709][T11250] ? tomoyo_file_ioctl+0x23/0x30 [ 1397.233661][T11250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1397.239922][T11250] ? security_file_ioctl+0x93/0xc0 [ 1397.245076][T11250] ksys_ioctl+0xab/0xd0 [ 1397.249240][T11250] __x64_sys_ioctl+0x73/0xb0 [ 1397.260080][T11250] do_syscall_64+0x103/0x610 [ 1397.265128][T11250] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1397.271199][T11250] RIP: 0033:0x458c29 [ 1397.275100][T11250] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1397.295775][T11250] RSP: 002b:00007f8855b61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1397.305349][T11250] RAX: ffffffffffffffda RBX: 00007f8855b61c90 RCX: 0000000000458c29 [ 1397.313800][T11250] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1397.321799][T11250] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1397.329794][T11250] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8855b626d4 10:36:19 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:19 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) 10:36:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000002, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000240)) syz_open_dev$rtc(&(0x7f0000000280)='/dev/rtc#\x00', 0x3, 0x81) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x4, @remote}}, [0x1, 0x434, 0x100000001, 0x84, 0x1f, 0x9, 0x3b, 0x2, 0x8, 0x9066, 0xec, 0x80000001, 0x0, 0x1f00000000000, 0x5]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200)={r3, 0x8}, 0x8) 10:36:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) 10:36:19 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="2f6465762f6e756c6c62300038b1d747c822175c62ce37f61a4bc6ce35133b609b003578f64c4ff8884856fd237a51c7a28a3c6dda7efd92e05c592fc0ba85a6cfd2550b7629c6890364ac63d5a01cbafa4f345f87dca2ddd0420945fd99e99bbfd538764b3d6ba1852201b1a7a7373b73eda843e39f664f70eef748d0597ea8e97a3b3109f3e8257c7855bd4289d522d0d8c37a0240"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3, 0xffffffffffffff01}, {0x6, 0x3}, 0x9, 0x0, 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x440501, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000240)={0x3, 0x3}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xb60}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000440)=0x3e800000) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x803, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4095) [ 1397.338048][T11250] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 10:36:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x2, 0x1f, 0x7ff, 0x8, 0xffffffff, 0x5}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:20 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 10:36:20 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000280)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}}}, &(0x7f0000000180)=0xe8) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x4000, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@version_u='version=9p2000.u'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_lt={'uid<', r0}}, {@dont_appraise='dont_appraise'}, {@obj_type={'obj_type', 0x3d, 'btrfs\x00'}}]}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) 10:36:20 executing program 3 (fault-call:4 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd0705f66dc926a27583b73cbf2434af881f71911f8787768816200ead422a5be025b2658b70bc895d9a741384928e4034ebe49666c61068049a646f9c41198c64da26d78989422b14ec1f0ac17452e9e19e54873fe780129e7b03d394872c4eb824ff8cef566b98ff7d063d8398bcdd39004d2da3755d3f39234d8bd28c0cca2283c1904cb3759ef131f7184fd387337250cde7022f7fd2cf2ac11affdfe53a268a79bbf480ac597be1d01") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x80) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000080)={0xa, {0x0, 0x9, 0x9, 0x4}, {0x1027, 0x1ff, 0xfffffffffffffffb, 0x7}, {0x6, 0xe036}}) ioctl$TIOCNOTTY(r2, 0x5422) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0x4, 0x0, 0xea8, [], &(0x7f0000000100)={0xbb09fd, 0x95, [], @value=0xf57}}) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:20 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) [ 1397.689918][T11644] input: syz1 as /devices/virtual/input/input53 [ 1397.724391][T11644] FAULT_INJECTION: forcing a failure. [ 1397.724391][T11644] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.750790][T11644] CPU: 0 PID: 11644 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #67 [ 1397.758895][T11644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1397.769123][T11644] Call Trace: [ 1397.772433][T11644] dump_stack+0x172/0x1f0 [ 1397.776801][T11644] should_fail.cold+0xa/0x15 [ 1397.781404][T11644] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1397.787223][T11644] ? ___might_sleep+0x163/0x280 [ 1397.787247][T11644] __should_failslab+0x121/0x190 [ 1397.787266][T11644] should_failslab+0x9/0x14 [ 1397.801523][T11644] kmem_cache_alloc_node+0x264/0x710 [ 1397.806852][T11644] ? find_held_lock+0x35/0x130 [ 1397.811621][T11644] __alloc_skb+0xd5/0x5e0 [ 1397.815950][T11644] ? skb_trim+0x190/0x190 [ 1397.820270][T11644] ? kasan_check_read+0x11/0x20 [ 1397.825108][T11644] alloc_uevent_skb+0x83/0x1e2 [ 1397.829870][T11644] kobject_uevent_env+0xa63/0x1030 [ 1397.834987][T11644] ? wait_for_completion+0x440/0x440 [ 1397.840267][T11644] kobject_uevent+0x20/0x26 [ 1397.844802][T11644] device_del+0x758/0xc40 [ 1397.849132][T11644] ? __device_links_no_driver+0x250/0x250 [ 1397.854849][T11644] ? _raw_spin_unlock_irq+0x28/0x90 [ 1397.860047][T11644] ? __input_unregister_device+0x153/0x4a0 [ 1397.865930][T11644] ? _raw_spin_unlock_irq+0x28/0x90 [ 1397.872334][T11644] cdev_device_del+0x1a/0x80 [ 1397.876969][T11644] evdev_disconnect+0x42/0xb0 [ 1397.881659][T11644] __input_unregister_device+0x200/0x4a0 [ 1397.887301][T11644] input_unregister_device+0xc5/0x110 [ 1397.892676][T11644] uinput_destroy_device+0x1f4/0x250 [ 1397.897973][T11644] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1397.903964][T11644] ? tomoyo_domain+0xc5/0x160 [ 1397.908650][T11644] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1397.914850][T11644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1397.921161][T11644] ? tomoyo_path_number_perm+0x263/0x520 [ 1397.926805][T11644] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1397.932622][T11644] ? ___might_sleep+0x163/0x280 [ 1397.937661][T11644] uinput_ioctl+0x4a/0x60 [ 1397.941982][T11644] ? uinput_compat_ioctl+0x90/0x90 [ 1397.947125][T11644] do_vfs_ioctl+0xd6e/0x1390 [ 1397.951807][T11644] ? ioctl_preallocate+0x210/0x210 [ 1397.956926][T11644] ? selinux_file_mprotect+0x620/0x620 [ 1397.962418][T11644] ? __fget+0x381/0x550 [ 1397.966570][T11644] ? ksys_dup3+0x3e0/0x3e0 [ 1397.971016][T11644] ? tomoyo_file_ioctl+0x23/0x30 [ 1397.975948][T11644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1397.982214][T11644] ? security_file_ioctl+0x93/0xc0 [ 1397.987351][T11644] ksys_ioctl+0xab/0xd0 [ 1397.991494][T11644] __x64_sys_ioctl+0x73/0xb0 [ 1397.996173][T11644] do_syscall_64+0x103/0x610 [ 1398.000750][T11644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1398.006654][T11644] RIP: 0033:0x458c29 [ 1398.010568][T11644] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1398.030422][T11644] RSP: 002b:00007f8855b61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1398.038838][T11644] RAX: ffffffffffffffda RBX: 00007f8855b61c90 RCX: 0000000000458c29 [ 1398.046880][T11644] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1398.054844][T11644] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1398.062838][T11644] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8855b626d4 [ 1398.070898][T11644] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 10:36:20 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:20 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{0xeb}, {0x6, 0x40000000000003}, 0xd, 0x0, 0x8}) 10:36:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000a00)="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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:20 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}) 10:36:20 executing program 3 (fault-call:4 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:36:20 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) [ 1398.347434][T11846] input: syz1 as /devices/virtual/input/input54 [ 1398.391494][T11846] FAULT_INJECTION: forcing a failure. [ 1398.391494][T11846] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.411936][T11846] CPU: 0 PID: 11846 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #67 [ 1398.420032][T11846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1398.430109][T11846] Call Trace: [ 1398.433474][T11846] dump_stack+0x172/0x1f0 [ 1398.437865][T11846] should_fail.cold+0xa/0x15 [ 1398.442478][T11846] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1398.448296][T11846] ? ___might_sleep+0x163/0x280 [ 1398.448318][T11846] __should_failslab+0x121/0x190 [ 1398.448341][T11846] should_failslab+0x9/0x14 [ 1398.462607][T11846] kmem_cache_alloc_node_trace+0x270/0x720 [ 1398.462636][T11846] __kmalloc_node_track_caller+0x3d/0x70 [ 1398.462659][T11846] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1398.462678][T11846] __alloc_skb+0x10b/0x5e0 [ 1398.483965][T11846] ? skb_trim+0x190/0x190 [ 1398.488316][T11846] ? kasan_check_read+0x11/0x20 [ 1398.493191][T11846] alloc_uevent_skb+0x83/0x1e2 [ 1398.497941][T11846] kobject_uevent_env+0xa63/0x1030 [ 1398.503041][T11846] ? wait_for_completion+0x440/0x440 [ 1398.508552][T11846] kobject_uevent+0x20/0x26 [ 1398.513047][T11846] device_del+0x758/0xc40 [ 1398.517657][T11846] ? __device_links_no_driver+0x250/0x250 [ 1398.523474][T11846] ? _raw_spin_unlock_irq+0x28/0x90 [ 1398.528937][T11846] ? __input_unregister_device+0x153/0x4a0 [ 1398.534756][T11846] ? _raw_spin_unlock_irq+0x28/0x90 [ 1398.539989][T11846] cdev_device_del+0x1a/0x80 [ 1398.544586][T11846] evdev_disconnect+0x42/0xb0 [ 1398.549271][T11846] __input_unregister_device+0x200/0x4a0 [ 1398.554888][T11846] input_unregister_device+0xc5/0x110 [ 1398.560248][T11846] uinput_destroy_device+0x1f4/0x250 [ 1398.565518][T11846] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1398.571407][T11846] ? tomoyo_domain+0xc5/0x160 [ 1398.576090][T11846] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1398.582173][T11846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1398.588447][T11846] ? tomoyo_path_number_perm+0x263/0x520 [ 1398.594091][T11846] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1398.599911][T11846] ? ___might_sleep+0x163/0x280 [ 1398.604788][T11846] uinput_ioctl+0x4a/0x60 [ 1398.609123][T11846] ? uinput_compat_ioctl+0x90/0x90 [ 1398.614259][T11846] do_vfs_ioctl+0xd6e/0x1390 [ 1398.618837][T11846] ? ioctl_preallocate+0x210/0x210 [ 1398.623955][T11846] ? selinux_file_mprotect+0x620/0x620 [ 1398.629416][T11846] ? __fget+0x381/0x550 [ 1398.633563][T11846] ? ksys_dup3+0x3e0/0x3e0 [ 1398.637999][T11846] ? tomoyo_file_ioctl+0x23/0x30 [ 1398.642929][T11846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1398.649168][T11846] ? security_file_ioctl+0x93/0xc0 [ 1398.654353][T11846] ksys_ioctl+0xab/0xd0 [ 1398.658582][T11846] __x64_sys_ioctl+0x73/0xb0 [ 1398.663268][T11846] do_syscall_64+0x103/0x610 [ 1398.667852][T11846] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1398.673727][T11846] RIP: 0033:0x458c29 [ 1398.677637][T11846] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1398.697243][T11846] RSP: 002b:00007f8855b61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1398.705808][T11846] RAX: ffffffffffffffda RBX: 00007f8855b61c90 RCX: 0000000000458c29 [ 1398.713792][T11846] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1398.721790][T11846] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1398.729785][T11846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8855b626d4 10:36:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf={0x11, &(0x7f0000000040)="c0bbab6b69d4a8ac150dd03c45ae836c50"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x20000, 0x40) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000100)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x76}) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) 10:36:21 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) ioctl$KDDISABIO(r0, 0x4b37) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) 10:36:21 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000000000003d162cdc58cdb6d227f0f717a261dc849089ba8e55213e2bea9c075efa15c665625d3651f7edc2bf0182f670023b675e5ba30a0b1c405e9a6662a9b08a0451d3850611879c8e7d9ca566dc8857d00ffdd4df4eb805cb816895ea24ddae64df0a05ac203d12f38fd9abbaaeed99a1175e24a1863b99ac500dd316010000ab5d6758671555026881de088d9563e8ce9013201146fb5d8b55b96ee5c0fa96dca238aaaf21d7757bc5b627d804e102d63bd54680a9ca0b01e9ce9997bd26b48f8c1948a79508a903f63a372ecd4e6d1e0f2f1a48aeb5af6885f8ce1fd2472bf28269425f80d48049079d21dd45140bfbd08f8862115129748ea71b920aea976834dc19d39a0f0f400e866044384d38196b"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) [ 1398.737790][T11846] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 10:36:21 executing program 3 (fault-call:4 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1398.880328][T11997] e Filesystem requires source device 10:36:21 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000180)='./file0\x00', r0}, 0x10) r2 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000001c0)={r0, r0, 0xaa}) [ 1398.946855][T12212] input: syz1 as /devices/virtual/input/input55 [ 1399.018432][T12212] FAULT_INJECTION: forcing a failure. [ 1399.018432][T12212] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.058353][T12212] CPU: 0 PID: 12212 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #67 [ 1399.066470][T12212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1399.076535][T12212] Call Trace: [ 1399.079854][T12212] dump_stack+0x172/0x1f0 [ 1399.084205][T12212] should_fail.cold+0xa/0x15 [ 1399.084226][T12212] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1399.084251][T12212] ? ___might_sleep+0x163/0x280 [ 1399.094639][T12212] __should_failslab+0x121/0x190 [ 1399.094657][T12212] should_failslab+0x9/0x14 [ 1399.094676][T12212] kmem_cache_alloc_trace+0x2d1/0x760 [ 1399.094692][T12212] ? kasan_check_write+0x14/0x20 [ 1399.094717][T12212] kobject_uevent_env+0x2fb/0x1030 [ 1399.124384][T12212] ? wait_for_completion+0x440/0x440 [ 1399.129694][T12212] kobject_uevent+0x20/0x26 [ 1399.134205][T12212] device_del+0x758/0xc40 [ 1399.138538][T12212] ? __device_links_no_driver+0x250/0x250 [ 1399.144263][T12212] ? trace_hardirqs_on+0x67/0x230 [ 1399.151340][T12212] __input_unregister_device+0x3a4/0x4a0 [ 1399.157087][T12212] input_unregister_device+0xc5/0x110 [ 1399.162453][T12212] uinput_destroy_device+0x1f4/0x250 [ 1399.167755][T12212] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1399.173698][T12212] ? tomoyo_domain+0xc5/0x160 [ 1399.178374][T12212] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1399.184558][T12212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1399.190825][T12212] ? tomoyo_path_number_perm+0x263/0x520 [ 1399.196618][T12212] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1399.202415][T12212] ? ___might_sleep+0x163/0x280 [ 1399.207251][T12212] uinput_ioctl+0x4a/0x60 [ 1399.211568][T12212] ? uinput_compat_ioctl+0x90/0x90 [ 1399.216680][T12212] do_vfs_ioctl+0xd6e/0x1390 [ 1399.221267][T12212] ? ioctl_preallocate+0x210/0x210 [ 1399.226564][T12212] ? selinux_file_mprotect+0x620/0x620 [ 1399.232010][T12212] ? __fget+0x381/0x550 [ 1399.236167][T12212] ? ksys_dup3+0x3e0/0x3e0 [ 1399.240680][T12212] ? tomoyo_file_ioctl+0x23/0x30 [ 1399.245836][T12212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1399.252073][T12212] ? security_file_ioctl+0x93/0xc0 [ 1399.257413][T12212] ksys_ioctl+0xab/0xd0 [ 1399.261560][T12212] __x64_sys_ioctl+0x73/0xb0 [ 1399.266145][T12212] do_syscall_64+0x103/0x610 [ 1399.270733][T12212] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1399.276608][T12212] RIP: 0033:0x458c29 [ 1399.280499][T12212] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1399.300399][T12212] RSP: 002b:00007f8855b61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1399.308851][T12212] RAX: ffffffffffffffda RBX: 00007f8855b61c90 RCX: 0000000000458c29 10:36:22 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x82000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0xc0, 0x2, 0x303f, 0x0, 0xa, 0xf, 0x2, 0x5}}) r1 = eventfd2(0x68d1, 0x80800) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x400000002, r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x100010, r0, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000180), 0x2) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0xfffffffffffff801, 0x4, 0x3009, 0x5, 0x7, 0x6, 0x0, 0x3}}) 10:36:22 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) 10:36:22 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:36:22 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x3}, {0x6, 0x3}, 0x9, 0x0, 0x8}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x80000001, 0x9}, {0x50ce2258, 0xfff}, 0x5, 0x4, 0x4}) [ 1399.316866][T12212] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1399.324859][T12212] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1399.333332][T12212] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8855b626d4 [ 1399.341467][T12212] R13: 00000000004c349c R14: 00000000004d6950 R15: 0000000000000005 [ 1399.399735][T12155] ================================================================== [ 1399.408507][T12155] BUG: KASAN: use-after-free in string+0x208/0x230 [ 1399.415015][T12155] Read of size 1 at addr ffff8880a83d85c0 by task syz-executor.3/12155 [ 1399.423257][T12155] [ 1399.425596][T12155] CPU: 0 PID: 12155 Comm: syz-executor.3 Not tainted 5.1.0-rc4+ #67 [ 1399.433568][T12155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1399.443627][T12155] Call Trace: 10:36:22 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000c80)='/dev/bus/usb/00#/00#\x00', 0x9, 0x80000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000cc0)={&(0x7f0000000180)='./file0\x00', r0}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000002c0)={0xa, @vbi={0x1f, 0x9, 0x4, 0x31324d4e, [0x7, 0x80000000], [0x5, 0x8], 0x2}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() getsockname$tipc(r0, &(0x7f0000001000)=@name, &(0x7f0000001040)=0x10) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000006c0)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f00000007c0)=0xe8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/dsp\x00', 0x80100, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000dc0)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000c40)=0xe8) fstat(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000940)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000a40)=0xe8) r12 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, 0x0}, &(0x7f0000000ac0)=0xc) lstat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000010002000000000002000600", @ANYRES32=r2, @ANYBLOB="02000500", @ANYRES32=r3, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB="02000000", @ANYRES32=r5, @ANYBLOB="02000700", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB="02000300", @ANYRES32=r8, @ANYBLOB="02000100", @ANYRES32=r9, @ANYBLOB="02000400", @ANYRES32=r10, @ANYBLOB="797a0f9775f3bba01b37245315", @ANYRES32=r11, @ANYBLOB="040001000000000008000100", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=r13, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="10000600000000002000000000000000"], 0x94, 0x1) getpeername$unix(r0, &(0x7f0000000f00), &(0x7f0000000f80)=0x6e) r16 = syz_open_dev$vbi(&(0x7f0000000ec0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r16, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) [ 1399.443677][T12155] dump_stack+0x172/0x1f0 [ 1399.443691][T12155] ? string+0x208/0x230 [ 1399.443708][T12155] print_address_description.cold+0x7c/0x20d [ 1399.443719][T12155] ? string+0x208/0x230 [ 1399.443731][T12155] ? string+0x208/0x230 [ 1399.443743][T12155] kasan_report.cold+0x1b/0x40 [ 1399.443757][T12155] ? string+0x208/0x230 [ 1399.443789][T12155] __asan_report_load1_noabort+0x14/0x20 [ 1399.484396][T12155] string+0x208/0x230 [ 1399.488404][T12155] ? widen_string+0x2e0/0x2e0 [ 1399.493098][T12155] ? console_unlock+0x68b/0xed0 [ 1399.497959][T12155] ? find_held_lock+0x35/0x130 [ 1399.502741][T12155] vsnprintf+0xbfc/0x1af0 [ 1399.507183][T12155] ? pointer+0xa30/0xa30 [ 1399.511547][T12155] ? string+0x1cc/0x230 [ 1399.511568][T12155] add_uevent_var+0x14d/0x310 [ 1399.511585][T12155] ? cleanup_uevent_env+0x50/0x50 [ 1399.511601][T12155] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1399.511625][T12155] ? input_dev_uevent+0x110/0x890 [ 1399.520468][T12155] input_dev_uevent+0x163/0x890 [ 1399.520484][T12155] ? input_add_uevent_bm_var+0x150/0x150 10:36:22 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x10000, 0x1, {0x4, @raw_data="69aa3e38db5cc23a7b356f46d44a8aa8cc787618548fb582ab29cdc8d6f251679059b5dd9ee859bd097939feb67fc30292faa7004d7834402600f61850dc3296f9f6eef08c9891beed70389a7ca3a4fe4a48509a9fffa5ff1dc57c5daf999a64bd60ac36bf455b2bb885ab68269cb153a376f966fc7bfaa677d916a0b7de39a1288f79a18a9fb1cffd3823121f9c09a9581e9270f2d95cab080a501f5b0cbc156d92690b3a8790bc22ff48200ab3c8a4ae8d828ab247f4eb8a8ca2c273824165f6e72f7d4c53a66f"}}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0xb, @raw_data="9e8e52d3fc03f7b7a669ce7054e281303d2a389ba6230a1c5a02fd9926443220cfd8a50faf5d9883e13d01e6e1f808efbd5e4b10f2749fd7e8713c2c42484343441ce35310c288728f911ebf2a39e8c459c1094746dd656f8ac6743e49b9dbcecfbe5229866dffa4805f42b1eb07039581d4a74ab1b22d56e7893b817716455dd1139bed6faebf6840c1b697f132af8ed7df2b54477da7c80af44c0707217ca8c9d9dd21d7b93c3fe3d1a8e34aed57dc48634ce4dcb4c4889dd00038c525c87ae60e345fce8a010a"}) [ 1399.520500][T12155] dev_uevent+0x312/0x580 [ 1399.520513][T12155] ? device_get_devnode+0x2e0/0x2e0 [ 1399.520527][T12155] ? kobject_uevent_env+0x2fb/0x1030 [ 1399.520550][T12155] ? rcu_read_lock_sched_held+0x110/0x130 [ 1399.567965][T12155] ? kobject_uevent_env+0x37d/0x1030 [ 1399.573265][T12155] ? device_get_devnode+0x2e0/0x2e0 [ 1399.578492][T12155] kobject_uevent_env+0x487/0x1030 [ 1399.583614][T12155] ? release_nodes+0x548/0x9c0 [ 1399.588390][T12155] kobject_uevent+0x20/0x26 [ 1399.593090][T12155] kobject_put.cold+0x177/0x2ec [ 1399.598038][T12155] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 1399.604033][T12155] put_device+0x20/0x30 [ 1399.604051][T12155] evdev_free+0x51/0x70 [ 1399.604067][T12155] device_release+0x7d/0x210 [ 1399.604083][T12155] kobject_put.cold+0x28f/0x2ec [ 1399.604106][T12155] cdev_default_release+0x41/0x50 [ 1399.612403][T12155] kobject_put.cold+0x28f/0x2ec [ 1399.631709][T12155] cdev_put.part.0+0x39/0x50 [ 1399.636397][T12155] cdev_put+0x20/0x30 [ 1399.640389][T12155] __fput+0x6df/0x8d0 [ 1399.644388][T12155] ____fput+0x16/0x20 [ 1399.648381][T12155] task_work_run+0x14a/0x1c0 [ 1399.652992][T12155] exit_to_usermode_loop+0x273/0x2c0 [ 1399.658293][T12155] do_syscall_64+0x52d/0x610 [ 1399.662908][T12155] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1399.668919][T12155] RIP: 0033:0x4129e1 [ 1399.672821][T12155] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1399.692435][T12155] RSP: 002b:00007ffe2f6ed2d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1399.700949][T12155] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004129e1 [ 1399.708928][T12155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1399.716909][T12155] RBP: 000000000073c900 R08: 000000000dd04fd3 R09: 000000000dd04fd7 [ 1399.724979][T12155] R10: 00007ffe2f6ed3a0 R11: 0000000000000293 R12: 0000000000000001 [ 1399.732962][T12155] R13: 000000000073c900 R14: 00000000001558cd R15: 000000000073bf0c [ 1399.740954][T12155] [ 1399.743288][T12155] Allocated by task 12212: [ 1399.747824][T12155] save_stack+0x45/0xd0 [ 1399.751991][T12155] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1399.757732][T12155] kasan_kmalloc+0x9/0x10 [ 1399.762077][T12155] __kmalloc_track_caller+0x158/0x740 [ 1399.767641][T12155] kstrndup+0x5f/0xf0 [ 1399.767653][T12155] uinput_dev_setup+0x1d4/0x310 [ 1399.767666][T12155] uinput_ioctl_handler.isra.0+0x12b8/0x1cc0 [ 1399.767684][T12155] uinput_ioctl+0x4a/0x60 [ 1399.782488][T12155] do_vfs_ioctl+0xd6e/0x1390 [ 1399.782501][T12155] ksys_ioctl+0xab/0xd0 [ 1399.782514][T12155] __x64_sys_ioctl+0x73/0xb0 [ 1399.782536][T12155] do_syscall_64+0x103/0x610 [ 1399.804753][T12155] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1399.810660][T12155] [ 1399.813015][T12155] Freed by task 12212: [ 1399.817098][T12155] save_stack+0x45/0xd0 [ 1399.821280][T12155] __kasan_slab_free+0x102/0x150 [ 1399.826224][T12155] kasan_slab_free+0xe/0x10 [ 1399.830731][T12155] kfree+0xcf/0x230 [ 1399.834560][T12155] uinput_destroy_device+0xf8/0x250 [ 1399.839785][T12155] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 1399.845692][T12155] uinput_ioctl+0x4a/0x60 [ 1399.850028][T12155] do_vfs_ioctl+0xd6e/0x1390 [ 1399.854621][T12155] ksys_ioctl+0xab/0xd0 [ 1399.858792][T12155] __x64_sys_ioctl+0x73/0xb0 [ 1399.863406][T12155] do_syscall_64+0x103/0x610 [ 1399.868009][T12155] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1399.873889][T12155] [ 1399.876201][T12155] The buggy address belongs to the object at ffff8880a83d85c0 [ 1399.876201][T12155] which belongs to the cache kmalloc-32 of size 32 [ 1399.890187][T12155] The buggy address is located 0 bytes inside of [ 1399.890187][T12155] 32-byte region [ffff8880a83d85c0, ffff8880a83d85e0) [ 1399.903281][T12155] The buggy address belongs to the page: [ 1399.908940][T12155] page:ffffea0002a0f600 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff8880a83d8fc1 [ 1399.919108][T12155] flags: 0x1fffc0000000200(slab) [ 1399.924172][T12155] raw: 01fffc0000000200 ffffea000293d9c8 ffffea0002a30188 ffff88812c3f01c0 [ 1399.932855][T12155] raw: ffff8880a83d8fc1 ffff8880a83d8000 000000010000003e 0000000000000000 [ 1399.941536][T12155] page dumped because: kasan: bad access detected [ 1399.941542][T12155] [ 1399.941546][T12155] Memory state around the buggy address: [ 1399.941559][T12155] ffff8880a83d8480: 00 00 00 fc fc fc fc fc 00 00 fc fc fc fc fc fc [ 1399.941567][T12155] ffff8880a83d8500: 00 00 04 fc fc fc fc fc 00 00 00 04 fc fc fc fc [ 1399.941576][T12155] >ffff8880a83d8580: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 1399.941582][T12155] ^ [ 1399.941590][T12155] ffff8880a83d8600: fb fb fb fb fc fc fc fc 00 00 01 fc fc fc fc fc [ 1399.941599][T12155] ffff8880a83d8680: 00 02 fc fc fc fc fc fc 00 02 fc fc fc fc fc fc [ 1399.941603][T12155] ================================================================== [ 1399.941608][T12155] Disabling lock debugging due to kernel taint [ 1399.945853][T12155] Kernel panic - not syncing: panic_on_warn set ... [ 1400.023518][T12155] CPU: 0 PID: 12155 Comm: syz-executor.3 Tainted: G B 5.1.0-rc4+ #67 [ 1400.032969][T12155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1400.043020][T12155] Call Trace: [ 1400.046317][T12155] dump_stack+0x172/0x1f0 [ 1400.050634][T12155] panic+0x2cb/0x65c [ 1400.054531][T12155] ? __warn_printk+0xf3/0xf3 [ 1400.059155][T12155] ? string+0x208/0x230 [ 1400.063319][T12155] ? preempt_schedule+0x4b/0x60 [ 1400.068157][T12155] ? ___preempt_schedule+0x16/0x18 [ 1400.073251][T12155] ? trace_hardirqs_on+0x5e/0x230 [ 1400.078259][T12155] ? string+0x208/0x230 [ 1400.082408][T12155] end_report+0x47/0x4f [ 1400.086632][T12155] ? string+0x208/0x230 [ 1400.090776][T12155] kasan_report.cold+0xe/0x40 [ 1400.095563][T12155] ? string+0x208/0x230 [ 1400.099705][T12155] __asan_report_load1_noabort+0x14/0x20 [ 1400.105347][T12155] string+0x208/0x230 [ 1400.109317][T12155] ? widen_string+0x2e0/0x2e0 [ 1400.114006][T12155] ? console_unlock+0x68b/0xed0 [ 1400.118852][T12155] ? find_held_lock+0x35/0x130 [ 1400.123718][T12155] vsnprintf+0xbfc/0x1af0 [ 1400.128067][T12155] ? pointer+0xa30/0xa30 [ 1400.132303][T12155] ? string+0x1cc/0x230 [ 1400.136446][T12155] add_uevent_var+0x14d/0x310 [ 1400.141108][T12155] ? cleanup_uevent_env+0x50/0x50 [ 1400.146155][T12155] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1400.152389][T12155] ? input_dev_uevent+0x110/0x890 [ 1400.157405][T12155] input_dev_uevent+0x163/0x890 [ 1400.162250][T12155] ? input_add_uevent_bm_var+0x150/0x150 [ 1400.167897][T12155] dev_uevent+0x312/0x580 [ 1400.172250][T12155] ? device_get_devnode+0x2e0/0x2e0 [ 1400.177429][T12155] ? kobject_uevent_env+0x2fb/0x1030 [ 1400.182716][T12155] ? rcu_read_lock_sched_held+0x110/0x130 [ 1400.188443][T12155] ? kobject_uevent_env+0x37d/0x1030 [ 1400.193719][T12155] ? device_get_devnode+0x2e0/0x2e0 [ 1400.198922][T12155] kobject_uevent_env+0x487/0x1030 [ 1400.204107][T12155] ? release_nodes+0x548/0x9c0 [ 1400.208863][T12155] kobject_uevent+0x20/0x26 [ 1400.213380][T12155] kobject_put.cold+0x177/0x2ec [ 1400.218221][T12155] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 1400.224183][T12155] put_device+0x20/0x30 [ 1400.228336][T12155] evdev_free+0x51/0x70 [ 1400.232477][T12155] device_release+0x7d/0x210 [ 1400.237310][T12155] kobject_put.cold+0x28f/0x2ec [ 1400.242237][T12155] cdev_default_release+0x41/0x50 [ 1400.247279][T12155] kobject_put.cold+0x28f/0x2ec [ 1400.252154][T12155] cdev_put.part.0+0x39/0x50 [ 1400.256733][T12155] cdev_put+0x20/0x30 [ 1400.260827][T12155] __fput+0x6df/0x8d0 [ 1400.264792][T12155] ____fput+0x16/0x20 [ 1400.268873][T12155] task_work_run+0x14a/0x1c0 [ 1400.273557][T12155] exit_to_usermode_loop+0x273/0x2c0 [ 1400.278847][T12155] do_syscall_64+0x52d/0x610 [ 1400.283457][T12155] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1400.289349][T12155] RIP: 0033:0x4129e1 [ 1400.293225][T12155] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1400.312834][T12155] RSP: 002b:00007ffe2f6ed2d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1400.321272][T12155] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004129e1 [ 1400.329231][T12155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1400.337275][T12155] RBP: 000000000073c900 R08: 000000000dd04fd3 R09: 000000000dd04fd7 [ 1400.345322][T12155] R10: 00007ffe2f6ed3a0 R11: 0000000000000293 R12: 0000000000000001 [ 1400.353299][T12155] R13: 000000000073c900 R14: 00000000001558cd R15: 000000000073bf0c [ 1400.361958][T12155] Kernel Offset: disabled [ 1400.366337][T12155] Rebooting in 86400 seconds..