[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.966367][ T26] audit: type=1800 audit(1567554975.875:25): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 56.005179][ T26] audit: type=1800 audit(1567554975.875:26): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 56.053889][ T26] audit: type=1800 audit(1567554975.885:27): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.19' (ECDSA) to the list of known hosts. 2019/09/03 23:56:25 fuzzer started 2019/09/03 23:56:26 dialing manager at 10.128.0.26:35015 2019/09/03 23:56:26 syscalls: 2487 2019/09/03 23:56:26 code coverage: enabled 2019/09/03 23:56:26 comparison tracing: enabled 2019/09/03 23:56:26 extra coverage: extra coverage is not supported by the kernel 2019/09/03 23:56:26 setuid sandbox: enabled 2019/09/03 23:56:26 namespace sandbox: enabled 2019/09/03 23:56:26 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/03 23:56:26 fault injection: enabled 2019/09/03 23:56:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/03 23:56:26 net packet injection: enabled 2019/09/03 23:56:26 net device setup: enabled 23:56:27 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffeeb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f0000000200)={0x8}) 23:56:27 executing program 1: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) syzkaller login: [ 67.557337][ T8837] IPVS: ftp: loaded support on port[0] = 21 23:56:27 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) [ 67.673829][ T8839] IPVS: ftp: loaded support on port[0] = 21 [ 67.784051][ T8837] chnl_net:caif_netlink_parms(): no params data found 23:56:27 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}]}}, &(0x7f0000000080)=""/250, 0x32, 0xfa, 0x1}, 0x20) [ 67.938271][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.946658][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.955570][ T8837] device bridge_slave_0 entered promiscuous mode [ 67.964531][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.973133][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.981824][ T8837] device bridge_slave_1 entered promiscuous mode [ 68.021374][ T8839] chnl_net:caif_netlink_parms(): no params data found [ 68.039895][ T8837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.061605][ T8843] IPVS: ftp: loaded support on port[0] = 21 [ 68.068510][ T8837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.148491][ T8837] team0: Port device team_slave_0 added [ 68.180070][ T8837] team0: Port device team_slave_1 added [ 68.214217][ T8839] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.225977][ T8845] IPVS: ftp: loaded support on port[0] = 21 [ 68.235504][ T8839] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.243523][ T8839] device bridge_slave_0 entered promiscuous mode 23:56:28 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 68.318021][ T8837] device hsr_slave_0 entered promiscuous mode [ 68.435810][ T8837] device hsr_slave_1 entered promiscuous mode 23:56:28 executing program 5: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) [ 68.524228][ T8839] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.532543][ T8839] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.542923][ T8839] device bridge_slave_1 entered promiscuous mode [ 68.599183][ T8839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.600687][ T8847] IPVS: ftp: loaded support on port[0] = 21 [ 68.612214][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.621561][ T8837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.629678][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.636841][ T8837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.666318][ T8839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.705783][ T8849] IPVS: ftp: loaded support on port[0] = 21 [ 68.708945][ T8839] team0: Port device team_slave_0 added [ 68.720174][ T8839] team0: Port device team_slave_1 added [ 68.757147][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.776140][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.907446][ T8839] device hsr_slave_0 entered promiscuous mode [ 68.955542][ T8839] device hsr_slave_1 entered promiscuous mode [ 69.015283][ T8839] debugfs: Directory 'hsr0' with parent '/' already present! [ 69.092978][ T8843] chnl_net:caif_netlink_parms(): no params data found [ 69.104921][ T8845] chnl_net:caif_netlink_parms(): no params data found [ 69.213474][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.222083][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.230305][ T8845] device bridge_slave_0 entered promiscuous mode [ 69.239420][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.246601][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.254452][ T8845] device bridge_slave_1 entered promiscuous mode [ 69.264473][ T8843] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.271673][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.279593][ T8843] device bridge_slave_0 entered promiscuous mode [ 69.301842][ T8847] chnl_net:caif_netlink_parms(): no params data found [ 69.326010][ T8843] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.333108][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.341621][ T8843] device bridge_slave_1 entered promiscuous mode [ 69.401099][ T8845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.418487][ T8845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.452372][ T8849] chnl_net:caif_netlink_parms(): no params data found [ 69.469060][ T8845] team0: Port device team_slave_0 added [ 69.477977][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.485365][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.493113][ T8847] device bridge_slave_0 entered promiscuous mode [ 69.501809][ T8843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.513510][ T8843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.529075][ T8845] team0: Port device team_slave_1 added [ 69.539405][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.547303][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.555556][ T8847] device bridge_slave_1 entered promiscuous mode [ 69.611718][ T8843] team0: Port device team_slave_0 added [ 69.619952][ T8843] team0: Port device team_slave_1 added [ 69.629594][ T8837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.708324][ T8845] device hsr_slave_0 entered promiscuous mode [ 69.745605][ T8845] device hsr_slave_1 entered promiscuous mode [ 69.805294][ T8845] debugfs: Directory 'hsr0' with parent '/' already present! [ 69.816029][ T8849] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.823133][ T8849] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.831762][ T8849] device bridge_slave_0 entered promiscuous mode [ 69.840610][ T8849] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.848088][ T8849] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.855881][ T8849] device bridge_slave_1 entered promiscuous mode [ 69.864208][ T8847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.882312][ T8847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.909614][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.919077][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.949274][ T8847] team0: Port device team_slave_0 added [ 69.960640][ T8847] team0: Port device team_slave_1 added [ 69.970473][ T8837] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.050118][ T8843] device hsr_slave_0 entered promiscuous mode [ 70.085723][ T8843] device hsr_slave_1 entered promiscuous mode [ 70.125250][ T8843] debugfs: Directory 'hsr0' with parent '/' already present! [ 70.148205][ T8849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.162023][ T8839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.239406][ T8847] device hsr_slave_0 entered promiscuous mode [ 70.285469][ T8847] device hsr_slave_1 entered promiscuous mode [ 70.335332][ T8847] debugfs: Directory 'hsr0' with parent '/' already present! [ 70.343915][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.352821][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.361556][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.368716][ T8851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.377214][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.386015][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.394341][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.401454][ T8851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.409032][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.427725][ T8849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.448785][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.458185][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.468894][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.477975][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.506358][ T8849] team0: Port device team_slave_0 added [ 70.512693][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.520962][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.530155][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.539044][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.551799][ T8839] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.566462][ T8849] team0: Port device team_slave_1 added [ 70.576802][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.586188][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.595551][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.602634][ T8851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.610393][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.619004][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.629554][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.659242][ T8837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.671700][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.689673][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.698446][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.706991][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.714037][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.724400][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.733290][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.741689][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.817433][ T8849] device hsr_slave_0 entered promiscuous mode [ 70.855626][ T8849] device hsr_slave_1 entered promiscuous mode [ 70.915905][ T8849] debugfs: Directory 'hsr0' with parent '/' already present! [ 70.944760][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.954480][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.963618][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.973119][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.992813][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.003863][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.023054][ T8839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.033722][ T8839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.053507][ T8837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.067523][ T8845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.083357][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.091989][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.107201][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.116045][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.134202][ T8845] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.150164][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.158407][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.170622][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.189351][ T8839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.225641][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.234297][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.243598][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.250806][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.258658][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.267969][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.276590][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.283668][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.292809][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.323975][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.332315][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.341287][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.350209][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.359368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.368249][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.376986][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.385700][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.394492][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.423084][ T8845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.434799][ T8845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.487454][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.506379][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.534617][ T8845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.548491][ T8849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.581474][ T8843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.613786][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.632941][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.648414][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.660297][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.686202][ T8849] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.713743][ T8847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.732763][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.759815][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.775825][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.782968][ T8850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.807295][ T8843] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.832148][ T8847] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.840801][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.856262][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.866717][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.876978][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.884072][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.892939][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.902051][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.916292][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.924346][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.967551][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.982936][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.000119][ T8880] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.007347][ T8880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.020118][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.036449][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 23:56:32 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}]}}, &(0x7f0000000080)=""/250, 0x32, 0xfa, 0x1}, 0x20) [ 72.061148][ T8880] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.068330][ T8880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.091532][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.116035][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.131846][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.154497][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 23:56:32 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}]}}, &(0x7f0000000080)=""/250, 0x32, 0xfa, 0x1}, 0x20) [ 72.181938][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.199055][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.212600][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 23:56:32 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}]}}, &(0x7f0000000080)=""/250, 0x32, 0xfa, 0x1}, 0x20) [ 72.242725][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.264143][ T8880] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.271325][ T8880] bridge0: port 1(bridge_slave_0) entered forwarding state 23:56:32 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000100), 0x8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 23:56:32 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffeeb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f0000000200)={0x8}) [ 72.384528][ T8843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.414875][ T8843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.462728][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.474434][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.489441][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.502247][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.514672][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.530422][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.537608][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.552193][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.561752][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.576665][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.592438][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.602176][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.617551][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.631125][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.642024][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.658090][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.671581][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.682893][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.710060][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.724544][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.739411][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.751150][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.764391][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.779850][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.788929][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.797926][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.806760][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.817913][ T8849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.847403][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.860397][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.874270][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.889974][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.901343][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.929874][ T8847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.993025][ T8849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.010890][ T8843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.034973][ T8847] 8021q: adding VLAN 0 to HW filter on device batadv0 23:56:33 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000100), 0x8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 23:56:33 executing program 5: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) [ 73.530001][ C1] hrtimer: interrupt took 27315 ns [ 73.622003][ T8929] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 23:56:34 executing program 1: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:34 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:34 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffeeb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f0000000200)={0x8}) 23:56:34 executing program 5: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:34 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:34 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000100), 0x8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 23:56:34 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:34 executing program 5: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:34 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:34 executing program 1: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:35 executing program 4: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:35 executing program 5: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:35 executing program 1: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:35 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:35 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffeeb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f0000000200)={0x8}) 23:56:35 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000100), 0x8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 23:56:35 executing program 5: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:35 executing program 4: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:35 executing program 1: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:36 executing program 5: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:36 executing program 1: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:36 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:36 executing program 4: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:36 executing program 2: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:36 executing program 4: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:36 executing program 5: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:37 executing program 1: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:37 executing program 3: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:37 executing program 5: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:37 executing program 2: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:37 executing program 4: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:37 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:37 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:37 executing program 5: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:37 executing program 4: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:37 executing program 3: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:37 executing program 2: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:37 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:37 executing program 3: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 23:56:37 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:38 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:38 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:38 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:38 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:38 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:38 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:38 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:39 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:39 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:39 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:39 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:39 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:39 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:39 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:40 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:40 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:40 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:40 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:41 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:41 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:41 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:41 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:41 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:41 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:41 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:41 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:41 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:41 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:42 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:42 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:42 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:42 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:42 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:42 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:42 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:42 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:42 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:43 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:43 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:43 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:43 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:43 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:43 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:43 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:43 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:43 executing program 3: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:43 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:43 executing program 0: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:43 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:43 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:44 executing program 3: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:44 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000002c0)=0x8) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz1\x00', {0x9, 0x1, 0x6a}, 0x3f, [0x1, 0x0, 0x0, 0x5a, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3f, 0x20, 0x434, 0x401, 0x7, 0x0, 0xc0, 0x0, 0x7, 0x100000001, 0x5, 0x400, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x6, 0xb15, 0xfffffffffffffffe, 0x5, 0x0, 0x5, 0x101, 0x100000001, 0x0, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x0, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x2, 0x7, 0x8000, 0x1000, 0x1f, 0xbe, 0x100000000, 0x1, 0x1, 0x95, 0x5c67, 0x0, 0x80000001, 0x8ffe, 0x1, 0x0, 0xe27, 0xe3, 0x9, 0x100, 0x1, 0x8, 0x0, 0x0, 0xffffffff80000001, 0x7ff, 0x6, 0x40, 0x7fff, 0xfffffffffffffffb, 0x80000000, 0x2, 0x8001, 0x100, 0x0, 0x1ff, 0x0, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x0, 0x100000000, 0x5, 0x3ae9, 0x6, 0x1000, 0x4, 0x9, 0x2, 0x7, 0x8000, 0x0, 0x8, 0xab0, 0x8], [0x0, 0x1f, 0xfff, 0x4, 0x5a, 0x7, 0x0, 0x200, 0x5, 0x4, 0x0, 0x0, 0xc5, 0x7f, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0xff, 0x1, 0x400, 0x9, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x6, 0x20, 0x4, 0xffffffff, 0x0, 0xffffffffffff7fff, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffffb, 0x3, 0x7, 0x800, 0x0, 0x0, 0x100000000, 0x7ff, 0x0, 0x101, 0x0, 0x8000, 0xa7a, 0x7fff, 0x0, 0x9, 0x800, 0x2], [0x2, 0x0, 0x5d, 0x0, 0x10000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x401, 0xe16, 0x0, 0x7, 0x0, 0x1, 0x200, 0x401, 0x0, 0x5, 0x9, 0x0, 0x1c8, 0x40, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x56e4, 0x0, 0x3, 0x10000, 0x0, 0x1, 0x0, 0x10000000, 0x1, 0x1, 0x6, 0x0, 0x6878000000000000, 0x9, 0x3ff, 0x0, 0x6, 0x2, 0x2, 0x9, 0x8, 0x60ef, 0x8, 0xffffffffafd63bfb, 0x80, 0x7fffffff, 0x0, 0x0, 0x2, 0x100, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 23:56:44 executing program 5: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:44 executing program 0: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:44 executing program 3: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:44 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 23:56:44 executing program 0: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:44 executing program 5: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:44 executing program 3: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:44 executing program 4: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:44 executing program 0: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:44 executing program 5: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:44 executing program 3: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:45 executing program 1: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:45 executing program 2: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:45 executing program 4: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:45 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000100), 0x8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 23:56:45 executing program 0: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:45 executing program 3: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:45 executing program 2: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:45 executing program 1: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:45 executing program 4: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:45 executing program 0: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:45 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000100), 0x8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 23:56:45 executing program 1: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:45 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000100), 0x8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 23:56:45 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffeeb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f0000000200)={0x8}) 23:56:45 executing program 2: gettid() write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/59, 0xfec6, 0x1) 23:56:46 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000100), 0x8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 23:56:46 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffeeb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f0000000200)={0x8}) 23:56:46 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffeeb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f0000000200)={0x8}) 23:56:46 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000100), 0x8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 23:56:46 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000100), 0x8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 23:56:46 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffeeb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f0000000200)={0x8}) 23:56:47 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000100), 0x8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 23:56:47 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffeeb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f0000000200)={0x8}) 23:56:47 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000100), 0x8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 23:56:47 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffeeb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f0000000200)={0x8}) 23:56:47 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000100), 0x8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 23:56:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) 23:56:48 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffeeb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f0000000200)={0x8}) 23:56:48 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e7, &(0x7f0000000000)) 23:56:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r1, {0xffffff7f}}}, 0x24}}, 0x0) 23:56:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) 23:56:48 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e7, &(0x7f0000000000)) 23:56:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r1, {0xffffff7f}}}, 0x24}}, 0x0) 23:56:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) 23:56:49 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffeeb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f0000000200)={0x8}) 23:56:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) 23:56:49 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e7, &(0x7f0000000000)) 23:56:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r1, {0xffffff7f}}}, 0x24}}, 0x0) 23:56:49 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffeeb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f0000000200)={0x8}) 23:56:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r1, {0xffffff7f}}}, 0x24}}, 0x0) 23:56:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r1, {0xffffff7f}}}, 0x24}}, 0x0) 23:56:50 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e7, &(0x7f0000000000)) 23:56:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r1, {0xffffff7f}}}, 0x24}}, 0x0) 23:56:50 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e7, &(0x7f0000000000)) 23:56:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) 23:56:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r1, {0xffffff7f}}}, 0x24}}, 0x0) 23:56:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) 23:56:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r1, {0xffffff7f}}}, 0x24}}, 0x0) 23:56:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) 23:56:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) 23:56:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) 23:56:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1}, 0x0) 23:56:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) 23:56:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r1, {0xffffff7f}}}, 0x24}}, 0x0) 23:56:51 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e7, &(0x7f0000000000)) 23:56:51 executing program 0: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r1, {0xffffff7f}}}, 0x24}}, 0x0) 23:56:51 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e7, &(0x7f0000000000)) 23:56:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:51 executing program 0: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1}, 0x0) 23:56:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:51 executing program 1: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:51 executing program 4: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1}, 0x0) 23:56:52 executing program 0: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1}, 0x0) 23:56:52 executing program 4: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:52 executing program 5: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1}, 0x0) 23:56:52 executing program 1: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1}, 0x0) 23:56:52 executing program 0: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:52 executing program 2: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1}, 0x0) 23:56:52 executing program 4: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:52 executing program 1: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:52 executing program 3: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:52 executing program 5: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:53 executing program 2: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:53 executing program 3: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:53 executing program 5: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:53 executing program 2: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 23:56:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 23:56:53 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180), 0x4) 23:56:53 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150004008178a80016000f000400e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 23:56:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1000, 0x550) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000000)="150300000600400000000233000000c21975e697f170e8927c422fcddad802006f11876d52b84a35756b662100080027471cc5470a66e79f60d8b33deae307d0057461100000000000000000dee83436ff5b039bf5ec322cf481b1d9c325f5f4bcec657fe4841da2a747e6", 0x4c, 0x48800, 0x0, 0xffffffffffffffe3) 23:56:53 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, 0x0) 23:56:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 23:56:53 executing program 3: write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1000000000000194, 0x0, 0xfffffffffffffd09}, 0x4001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x26969601565eebc, 0x1}}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 93.885857][ T9682] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:56:53 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180), 0x4) 23:56:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1000, 0x550) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000000)="150300000600400000000233000000c21975e697f170e8927c422fcddad802006f11876d52b84a35756b662100080027471cc5470a66e79f60d8b33deae307d0057461100000000000000000dee83436ff5b039bf5ec322cf481b1d9c325f5f4bcec657fe4841da2a747e6", 0x4c, 0x48800, 0x0, 0xffffffffffffffe3) 23:56:54 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, 0x0) 23:56:54 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150004008178a80016000f000400e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 23:56:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 23:56:54 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180), 0x4) 23:56:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) [ 94.184117][ T9703] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:56:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1000, 0x550) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000000)="150300000600400000000233000000c21975e697f170e8927c422fcddad802006f11876d52b84a35756b662100080027471cc5470a66e79f60d8b33deae307d0057461100000000000000000dee83436ff5b039bf5ec322cf481b1d9c325f5f4bcec657fe4841da2a747e6", 0x4c, 0x48800, 0x0, 0xffffffffffffffe3) 23:56:54 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150004008178a80016000f000400e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 23:56:54 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, 0x0) 23:56:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 23:56:54 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180), 0x4) 23:56:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) [ 94.438182][ T9720] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:56:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1000, 0x550) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000000)="150300000600400000000233000000c21975e697f170e8927c422fcddad802006f11876d52b84a35756b662100080027471cc5470a66e79f60d8b33deae307d0057461100000000000000000dee83436ff5b039bf5ec322cf481b1d9c325f5f4bcec657fe4841da2a747e6", 0x4c, 0x48800, 0x0, 0xffffffffffffffe3) 23:56:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 23:56:54 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, 0x0) 23:56:54 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150004008178a80016000f000400e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 23:56:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 23:56:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) [ 94.756425][ T9744] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:56:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 23:56:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 23:56:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 23:56:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 23:56:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150004008178a80016000f000400e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 23:56:54 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, 0x0) 23:56:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) [ 95.066673][ T9765] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 23:56:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 23:56:55 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, 0x0) 23:56:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 23:56:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 23:56:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150004008178a80016000f000400e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 23:56:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 23:56:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) 23:56:55 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, 0x0) 23:56:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) [ 95.375582][ T9787] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 23:56:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150004008178a80016000f000400e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 23:56:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1000, 0x550) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000000)="150300000600400000000233000000c21975e697f170e8927c422fcddad802006f11876d52b84a35756b662100080027471cc5470a66e79f60d8b33deae307d0057461100000000000000000dee83436ff5b039bf5ec322cf481b1d9c325f5f4bcec657fe4841da2a747e6", 0x4c, 0x48800, 0x0, 0xffffffffffffffe3) 23:56:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1000, 0x550) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000000)="150300000600400000000233000000c21975e697f170e8927c422fcddad802006f11876d52b84a35756b662100080027471cc5470a66e79f60d8b33deae307d0057461100000000000000000dee83436ff5b039bf5ec322cf481b1d9c325f5f4bcec657fe4841da2a747e6", 0x4c, 0x48800, 0x0, 0xffffffffffffffe3) 23:56:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1000, 0x550) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000000)="150300000600400000000233000000c21975e697f170e8927c422fcddad802006f11876d52b84a35756b662100080027471cc5470a66e79f60d8b33deae307d0057461100000000000000000dee83436ff5b039bf5ec322cf481b1d9c325f5f4bcec657fe4841da2a747e6", 0x4c, 0x48800, 0x0, 0xffffffffffffffe3) 23:56:55 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180), 0x4) [ 95.638933][ T9804] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 23:56:55 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfebff000) 23:56:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1000, 0x550) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000000)="150300000600400000000233000000c21975e697f170e8927c422fcddad802006f11876d52b84a35756b662100080027471cc5470a66e79f60d8b33deae307d0057461100000000000000000dee83436ff5b039bf5ec322cf481b1d9c325f5f4bcec657fe4841da2a747e6", 0x4c, 0x48800, 0x0, 0xffffffffffffffe3) 23:56:55 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180), 0x4) 23:56:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1000, 0x550) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000000)="150300000600400000000233000000c21975e697f170e8927c422fcddad802006f11876d52b84a35756b662100080027471cc5470a66e79f60d8b33deae307d0057461100000000000000000dee83436ff5b039bf5ec322cf481b1d9c325f5f4bcec657fe4841da2a747e6", 0x4c, 0x48800, 0x0, 0xffffffffffffffe3) 23:56:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000340)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@noacl='noacl'}]}) 23:56:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1000, 0x550) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000000)="150300000600400000000233000000c21975e697f170e8927c422fcddad802006f11876d52b84a35756b662100080027471cc5470a66e79f60d8b33deae307d0057461100000000000000000dee83436ff5b039bf5ec322cf481b1d9c325f5f4bcec657fe4841da2a747e6", 0x4c, 0x48800, 0x0, 0xffffffffffffffe3) 23:56:55 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180), 0x4) 23:56:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1000, 0x550) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000000)="150300000600400000000233000000c21975e697f170e8927c422fcddad802006f11876d52b84a35756b662100080027471cc5470a66e79f60d8b33deae307d0057461100000000000000000dee83436ff5b039bf5ec322cf481b1d9c325f5f4bcec657fe4841da2a747e6", 0x4c, 0x48800, 0x0, 0xffffffffffffffe3) [ 96.105345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 96.111501][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 96.141606][ T9834] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 23:56:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1000, 0x550) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000000)="150300000600400000000233000000c21975e697f170e8927c422fcddad802006f11876d52b84a35756b662100080027471cc5470a66e79f60d8b33deae307d0057461100000000000000000dee83436ff5b039bf5ec322cf481b1d9c325f5f4bcec657fe4841da2a747e6", 0x4c, 0x48800, 0x0, 0xffffffffffffffe3) [ 96.141606][ T9834] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 96.141606][ T9834] 23:56:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) 23:56:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1000, 0x550) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000000)="150300000600400000000233000000c21975e697f170e8927c422fcddad802006f11876d52b84a35756b662100080027471cc5470a66e79f60d8b33deae307d0057461100000000000000000dee83436ff5b039bf5ec322cf481b1d9c325f5f4bcec657fe4841da2a747e6", 0x4c, 0x48800, 0x0, 0xffffffffffffffe3) [ 96.254146][ T9834] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 23:56:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) [ 96.349473][ T9834] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 96.349473][ T9834] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 96.349473][ T9834] [ 96.497532][ T9834] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 23:58:24 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfebff000) 23:58:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) 23:58:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) 23:58:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xfc, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1000}, &(0x7f0000000180)) 23:58:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) 23:58:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000340)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@noacl='noacl'}]}) 23:58:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) [ 184.746686][ T9876] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 184.746686][ T9876] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 184.746686][ T9876] 23:58:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) [ 184.814248][ T9876] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 23:58:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) 23:58:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xfc, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1000}, &(0x7f0000000180)) 23:58:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000340)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@noacl='noacl'}]}) 23:58:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) [ 185.264010][ T9904] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 185.264010][ T9904] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 185.264010][ T9904] [ 185.334594][ T9904] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 186.089583][ T9916] IPVS: ftp: loaded support on port[0] = 21 [ 186.229672][ T9916] chnl_net:caif_netlink_parms(): no params data found [ 186.328352][ T9916] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.335621][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.343355][ T9916] device bridge_slave_0 entered promiscuous mode [ 186.418735][ T9916] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.426331][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.434082][ T9916] device bridge_slave_1 entered promiscuous mode [ 186.454333][ T9916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.467151][ T8933] device bridge_slave_1 left promiscuous mode [ 186.473684][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.528938][ T8933] device bridge_slave_0 left promiscuous mode [ 186.535854][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.435859][ T8933] device hsr_slave_0 left promiscuous mode [ 188.475413][ T8933] device hsr_slave_1 left promiscuous mode [ 188.539053][ T8933] team0 (unregistering): Port device team_slave_1 removed [ 188.554046][ T8933] team0 (unregistering): Port device team_slave_0 removed [ 188.568639][ T8933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.621431][ T8933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.713424][ T8933] bond0 (unregistering): Released all slaves [ 188.849804][ T9916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.873022][ T9916] team0: Port device team_slave_0 added [ 188.880339][ T9916] team0: Port device team_slave_1 added [ 188.948324][ T9916] device hsr_slave_0 entered promiscuous mode [ 188.985598][ T9916] device hsr_slave_1 entered promiscuous mode [ 189.025319][ T9916] debugfs: Directory 'hsr0' with parent '/' already present! [ 189.077104][ T9916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.096510][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.104646][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.116500][ T9916] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.160861][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.170674][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.179234][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.186444][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.208296][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.217140][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.228360][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.238216][ T8880] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.245358][ T8880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.254007][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.263800][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.272973][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.294577][ T9916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.306577][ T9916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.322133][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.332037][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.340947][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.352070][ T2998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.373061][ T9916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.382799][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:59:26 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfebff000) 23:59:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xfc, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1000}, &(0x7f0000000180)) 23:59:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) 23:59:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xfc, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1000}, &(0x7f0000000180)) 23:59:26 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfebff000) 23:59:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000340)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000003c0)={[{@noacl='noacl'}]}) 23:59:26 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfebff000) [ 246.667186][ T9931] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 246.667186][ T9931] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 246.667186][ T9931] [ 246.731371][ T9931] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities 23:59:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xfc, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1000}, &(0x7f0000000180)) 23:59:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xfc, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1000}, &(0x7f0000000180)) 23:59:26 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfebff000) 23:59:26 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0xfebff000) 23:59:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xfc, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1000}, &(0x7f0000000180)) [ 399.796960][ T1064] INFO: task syz-executor.1:9935 can't die for more than 143 seconds. [ 399.828057][ T1064] syz-executor.1 R running task 27416 9935 8839 0x80004006 [ 399.860140][ T1064] Call Trace: [ 399.863557][ T1064] __schedule+0x76e/0x17a0 [ 399.886221][ T1064] ? __sched_text_start+0x8/0x8 [ 399.891116][ T1064] ? preempt_schedule_irq+0x8d/0x160 [ 399.915162][ T1064] ? lockdep_hardirqs_on+0x418/0x5d0 [ 399.920492][ T1064] ? trace_hardirqs_on+0x67/0x240 [ 399.948643][ T1064] preempt_schedule_irq+0xb5/0x160 [ 399.953807][ T1064] retint_kernel+0x1b/0x2b [ 399.976960][ T1064] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 399.983589][ T1064] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 400.082417][ T1064] RSP: 0018:ffff888090f37b68 EFLAGS: 00010206 ORIG_RAX: ffffffffffffff13 [ 400.095919][ T1064] RAX: 0000000000040000 RBX: ffff8880913dc000 RCX: 0000000000000800 [ 400.103921][ T1064] RDX: 0000000000001000 RSI: ffffc90013d01800 RDI: ffff8880913dc800 [ 400.159906][ T1064] RBP: ffff888090f37b98 R08: ffff88809b73a440 R09: ffff8880aa402000 [ 400.199513][ T1064] R10: 0000000000000000 R11: ffffea000244f707 R12: 0000000000001000 [ 400.231096][ T1064] R13: 00007ffffffff000 R14: ffffc90013d19000 R15: ffff88809b73a440 [ 400.271571][ T1064] ? __probe_kernel_read+0xf5/0x1d0 [ 400.280118][ T1064] read_mem+0xfc/0x2c0 [ 400.284220][ T1064] do_iter_read+0x4a4/0x660 [ 400.321184][ T1064] ? dup_iter+0x260/0x260 [ 400.344986][ T1064] vfs_readv+0xf0/0x160 [ 400.349734][ T1064] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 400.371121][ T1064] ? __kasan_check_read+0x11/0x20 [ 400.376619][ T1064] ? ksys_dup3+0x3e0/0x3e0 [ 400.381045][ T1064] ? __kasan_check_read+0x11/0x20 [ 400.421472][ T1064] ? _copy_to_user+0x118/0x160 [ 400.451697][ T1064] ? __fget_light+0x1a9/0x230 [ 400.472007][ T1064] do_preadv+0x1c4/0x280 [ 400.485604][ T1064] ? do_readv+0x330/0x330 [ 400.489957][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 400.526547][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 400.532049][ T1064] ? do_syscall_64+0x26/0x760 [ 400.567319][ T1064] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.573413][ T1064] ? do_syscall_64+0x26/0x760 [ 400.617948][ T1064] __x64_sys_preadv+0x9a/0xf0 [ 400.622660][ T1064] do_syscall_64+0xfa/0x760 [ 400.647003][ T1064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.652925][ T1064] RIP: 0033:0x459879 [ 400.691909][ T1064] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.767130][ T1064] RSP: 002b:00007efccf93cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 400.815056][ T1064] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459879 [ 400.823067][ T1064] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000003 [ 400.867360][ T1064] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 400.897036][ T1064] R10: 00000000febff000 R11: 0000000000000246 R12: 00007efccf93d6d4 [ 400.920065][ T1064] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 00000000ffffffff [ 400.962244][ T1064] INFO: task syz-executor.4:9939 can't die for more than 144 seconds. [ 400.997344][ T1064] syz-executor.4 R running task 27416 9939 9916 0x80004006 [ 401.028530][ T1064] Call Trace: [ 401.031861][ T1064] __schedule+0x76e/0x17a0 [ 401.046102][ T1064] ? __sched_text_start+0x8/0x8 [ 401.050974][ T1064] ? retint_kernel+0x2b/0x2b [ 401.079545][ T1064] ? trace_hardirqs_on_caller+0x6a/0x240 [ 401.099437][ T1064] ? lockdep_hardirqs_on+0x418/0x5d0 [ 401.104751][ T1064] ? trace_hardirqs_on+0x67/0x240 [ 401.119297][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 401.124779][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.167790][ T1064] ? preempt_schedule_irq+0xf3/0x160 [ 401.173281][ T1064] ? retint_kernel+0x2b/0x2b [ 401.196724][ T1064] ? copy_user_enhanced_fast_string+0xe/0x20 [ 401.202756][ T1064] ? __probe_kernel_read+0xf5/0x1d0 [ 401.227863][ T1064] ? read_mem+0xfc/0x2c0 [ 401.232166][ T1064] ? do_iter_read+0x4a4/0x660 [ 401.251444][ T1064] ? dup_iter+0x260/0x260 [ 401.279134][ T1064] ? vfs_readv+0xf0/0x160 [ 401.283496][ T1064] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 401.299129][ T1064] ? __kasan_check_read+0x11/0x20 [ 401.304192][ T1064] ? ksys_dup3+0x3e0/0x3e0 [ 401.327359][ T1064] ? __kasan_check_read+0x11/0x20 [ 401.332419][ T1064] ? _copy_to_user+0x118/0x160 [ 401.356815][ T1064] ? __fget_light+0x1a9/0x230 [ 401.361541][ T1064] ? do_preadv+0x1c4/0x280 [ 401.389617][ T1064] ? do_readv+0x330/0x330 [ 401.393998][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 401.418013][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 401.423506][ T1064] ? do_syscall_64+0x26/0x760 [ 401.455949][ T1064] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.467103][ T1064] ? do_syscall_64+0x26/0x760 [ 401.471813][ T1064] ? __x64_sys_preadv+0x9a/0xf0 [ 401.496321][ T1064] ? do_syscall_64+0xfa/0x760 [ 401.525388][ T1064] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.532655][ T1064] INFO: task syz-executor.2:9942 can't die for more than 145 seconds. [ 401.601051][ T1064] syz-executor.2 R running task 27416 9942 8843 0x80004006 [ 401.624095][ T1064] Call Trace: [ 401.636985][ T1064] __schedule+0x76e/0x17a0 [ 401.641441][ T1064] ? __sched_text_start+0x8/0x8 [ 401.665093][ T1064] ? preempt_schedule_irq+0x8d/0x160 [ 401.670422][ T1064] ? lockdep_hardirqs_on+0x418/0x5d0 [ 401.708041][ T1064] ? trace_hardirqs_on+0x67/0x240 [ 401.713116][ T1064] preempt_schedule_irq+0xb5/0x160 [ 401.736944][ T1064] retint_kernel+0x1b/0x2b [ 401.741392][ T1064] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 401.766589][ T1064] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 401.828040][ T1064] RSP: 0018:ffff88808fa4fb68 EFLAGS: 00010206 ORIG_RAX: ffffffffffffff13 [ 401.855360][ T1064] RAX: 0000000000040000 RBX: ffff88809190e000 RCX: 0000000000000c00 [ 401.863367][ T1064] RDX: 0000000000001000 RSI: ffffc90013e25400 RDI: ffff88809190e400 [ 401.895081][ T1064] RBP: ffff88808fa4fb98 R08: ffff88809b752240 R09: ffff8880aa402000 [ 401.903096][ T1064] R10: 0000000000000000 R11: ffffea0002464387 R12: 0000000000001000 [ 401.947965][ T1064] R13: 00007ffffffff000 R14: ffffc90013e2f000 R15: ffff88809b752240 [ 401.979356][ T1064] ? __probe_kernel_read+0xf5/0x1d0 [ 401.984681][ T1064] read_mem+0xfc/0x2c0 [ 401.998268][ T1064] do_iter_read+0x4a4/0x660 [ 402.002808][ T1064] ? dup_iter+0x260/0x260 [ 402.026223][ T1064] vfs_readv+0xf0/0x160 [ 402.030465][ T1064] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 402.055332][ T1064] ? __kasan_check_read+0x11/0x20 [ 402.060404][ T1064] ? ksys_dup3+0x3e0/0x3e0 [ 402.064832][ T1064] ? __kasan_check_read+0x11/0x20 [ 402.106641][ T1064] ? _copy_to_user+0x118/0x160 [ 402.111441][ T1064] ? __fget_light+0x1a9/0x230 [ 402.157532][ T1064] do_preadv+0x1c4/0x280 [ 402.161818][ T1064] ? do_readv+0x330/0x330 [ 402.198279][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 402.203776][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 402.228398][ T1064] ? do_syscall_64+0x26/0x760 [ 402.233146][ T1064] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.266892][ T1064] ? do_syscall_64+0x26/0x760 [ 402.271620][ T1064] __x64_sys_preadv+0x9a/0xf0 [ 402.295133][ T1064] do_syscall_64+0xfa/0x760 [ 402.299675][ T1064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.328895][ T1064] RIP: 0033:0x459879 [ 402.332849][ T1064] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.399214][ T1064] RSP: 002b:00007fcdb9922c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 402.417305][ T1064] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459879 [ 402.448599][ T1064] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000003 [ 402.481803][ T1064] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 402.490286][ T1064] R10: 00000000febff000 R11: 0000000000000246 R12: 00007fcdb99236d4 [ 402.510230][ T1064] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 00000000ffffffff [ 402.546137][ T1064] INFO: task syz-executor.3:9953 can't die for more than 146 seconds. [ 402.554336][ T1064] syz-executor.3 R running task 27416 9953 8845 0x80004006 [ 402.595114][ T1064] Call Trace: [ 402.598450][ T1064] __schedule+0x76e/0x17a0 [ 402.602877][ T1064] ? __sched_text_start+0x8/0x8 [ 402.635543][ T1064] ? preempt_schedule_irq+0x8d/0x160 [ 402.640874][ T1064] ? lockdep_hardirqs_on+0x418/0x5d0 [ 402.669546][ T1064] ? trace_hardirqs_on+0x67/0x240 [ 402.674659][ T1064] preempt_schedule_irq+0xb5/0x160 [ 402.698469][ T1064] retint_kernel+0x1b/0x2b [ 402.702921][ T1064] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 402.737490][ T1064] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 402.798398][ T1064] RSP: 93e7c180:ffffc90013eb7000 EFLAGS: 7ffffffff000 ORIG_RAX: 000000001fffdf00 [ 402.826589][ T1064] RAX: 0000000000040000 RBX: ffff8880a447c000 RCX: 0000000000000800 [ 402.834603][ T1064] RDX: 0000000000001000 RSI: ffffc90013eb7c00 RDI: ffff8880a447cc00 [ 402.865932][ T1064] RBP: ffff888097d6fb98 R08: ffff888093e7c180 R09: ffff8880aa402000 [ 402.873955][ T1064] R10: 0000000000000000 R11: ffffea0002911f07 R12: 0000000000001000 [ 402.928540][ T1064] R13: 00007ffffffff000 R14: ffffc90013ec9000 R15: ffff888093e7c180 [ 402.937115][ T1064] ? __probe_kernel_read+0xf5/0x1d0 [ 402.942344][ T1064] read_mem+0xfc/0x2c0 [ 402.965168][ T1064] do_iter_read+0x4a4/0x660 [ 402.969702][ T1064] ? dup_iter+0x260/0x260 [ 402.974049][ T1064] vfs_readv+0xf0/0x160 [ 403.019422][ T1064] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 403.035219][ T1064] ? __kasan_check_read+0x11/0x20 [ 403.040716][ T1064] ? ksys_dup3+0x3e0/0x3e0 [ 403.068597][ T1064] ? __kasan_check_read+0x11/0x20 [ 403.073659][ T1064] ? _copy_to_user+0x118/0x160 [ 403.097378][ T1064] ? __fget_light+0x1a9/0x230 [ 403.102098][ T1064] do_preadv+0x1c4/0x280 [ 403.129524][ T1064] ? do_readv+0x330/0x330 [ 403.133897][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 403.148890][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 403.154378][ T1064] ? do_syscall_64+0x26/0x760 [ 403.178166][ T1064] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.184282][ T1064] ? do_syscall_64+0x26/0x760 [ 403.216727][ T1064] __x64_sys_preadv+0x9a/0xf0 [ 403.221473][ T1064] do_syscall_64+0xfa/0x760 [ 403.245091][ T1064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.251033][ T1064] RIP: 0033:0x459879 [ 403.254949][ T1064] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 403.338464][ T1064] RSP: 002b:00007f52f730ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 403.356439][ T1064] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459879 [ 403.364445][ T1064] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000003 [ 403.418754][ T1064] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 403.436645][ T1064] R10: 00000000febff000 R11: 0000000000000246 R12: 00007f52f730f6d4 [ 403.444650][ T1064] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 00000000ffffffff [ 403.476046][ T1064] INFO: task syz-executor.5:9956 can't die for more than 147 seconds. [ 403.484225][ T1064] syz-executor.5 R running task 27416 9956 8849 0x80004006 [ 403.538051][ T1064] Call Trace: [ 403.541380][ T1064] __schedule+0x76e/0x17a0 [ 403.546368][ T1064] ? __sched_text_start+0x8/0x8 [ 403.551239][ T1064] ? preempt_schedule_irq+0x8d/0x160 [ 403.588870][ T1064] ? lockdep_hardirqs_on+0x418/0x5d0 [ 403.594192][ T1064] ? trace_hardirqs_on+0x67/0x240 [ 403.617887][ T1064] preempt_schedule_irq+0xb5/0x160 [ 403.623035][ T1064] retint_kernel+0x1b/0x2b [ 403.646202][ T1064] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 403.652828][ T1064] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 403.727906][ T1064] RSP: 0018:ffff88806632fb68 EFLAGS: 00010206 ORIG_RAX: ffffffffffffff13 [ 403.755155][ T1064] RAX: 0000000000040000 RBX: ffff88809f192000 RCX: 0000000000000c00 [ 403.763174][ T1064] RDX: 0000000000001000 RSI: ffffc90013f4d400 RDI: ffff88809f192400 [ 403.798817][ T1064] RBP: ffff88806632fb98 R08: ffff88809a810680 R09: ffff8880aa402000 [ 403.825761][ T1064] R10: 0000000000000000 R11: ffffea00027c6487 R12: 0000000000001000 [ 403.833770][ T1064] R13: 00007ffffffff000 R14: ffffc90013f57000 R15: ffff88809a810680 [ 403.869434][ T1064] ? __probe_kernel_read+0xf5/0x1d0 [ 403.874672][ T1064] read_mem+0xfc/0x2c0 [ 403.897643][ T1064] do_iter_read+0x4a4/0x660 [ 403.902204][ T1064] ? dup_iter+0x260/0x260 [ 403.938719][ T1064] vfs_readv+0xf0/0x160 [ 403.942913][ T1064] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 403.958956][ T1064] ? __kasan_check_read+0x11/0x20 [ 403.964046][ T1064] ? ksys_dup3+0x3e0/0x3e0 [ 403.987080][ T1064] ? __kasan_check_read+0x11/0x20 [ 403.992140][ T1064] ? _copy_to_user+0x118/0x160 [ 404.015525][ T1064] ? __fget_light+0x1a9/0x230 [ 404.020240][ T1064] do_preadv+0x1c4/0x280 [ 404.024662][ T1064] ? do_readv+0x330/0x330 [ 404.066217][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 404.071716][ T1064] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 404.095893][ T1064] ? do_syscall_64+0x26/0x760 [ 404.100616][ T1064] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.125430][ T1064] ? do_syscall_64+0x26/0x760 [ 404.130149][ T1064] __x64_sys_preadv+0x9a/0xf0 [ 404.134830][ T1064] do_syscall_64+0xfa/0x760 [ 404.176466][ T1064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.182391][ T1064] RIP: 0033:0x459879 [ 404.205226][ T1064] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 404.267211][ T1064] RSP: 002b:00007f661d9e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 404.285471][ T1064] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459879 [ 404.293484][ T1064] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000003 [ 404.338169][ T1064] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 404.369332][ T1064] R10: 00000000febff000 R11: 0000000000000246 R12: 00007f661d9e26d4 [ 404.386839][ T1064] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 00000000ffffffff [ 404.394862][ T1064] [ 404.394862][ T1064] Showing all locks held in the system: [ 404.435457][ T1064] 1 lock held by khungtaskd/1064: [ 404.440503][ T1064] #0: ffffffff88fa7f00 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 404.477674][ T1064] 1 lock held by rsyslogd/8711: [ 404.482557][ T1064] #0: ffff88809483dde0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 404.518991][ T1064] 2 locks held by getty/8800: [ 404.523715][ T1064] #0: ffff888097192090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 404.556006][ T1064] #1: ffffc90005f0d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 404.588708][ T1064] 2 locks held by getty/8801: [ 404.593407][ T1064] #0: ffff88809f720090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 404.625821][ T1064] #1: ffffc90005f252e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 404.658365][ T1064] 2 locks held by getty/8802: [ 404.663063][ T1064] #0: ffff888097a22090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 404.709050][ T1064] #1: ffffc90005f1d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 404.728557][ T1064] 2 locks held by getty/8803: [ 404.733259][ T1064] #0: ffff888093d5c090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 404.786161][ T1064] #1: ffffc90005f152e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 404.819035][ T1064] 2 locks held by getty/8804: [ 404.823731][ T1064] #0: ffff88808e578090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 404.855806][ T1064] #1: ffffc90005f052e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 404.888370][ T1064] 2 locks held by getty/8805: [ 404.893067][ T1064] #0: ffff88808e424090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 404.926896][ T1064] #1: ffffc90005f292e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 404.955731][ T1064] 2 locks held by getty/8806: [ 404.960427][ T1064] #0: ffff8880a3e74090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 404.997063][ T1064] #1: ffffc90005ef12e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 405.039276][ T1064] [ 405.041636][ T1064] ============================================= [ 405.041636][ T1064] [ 405.055122][ T1064] NMI backtrace for cpu 1 [ 405.059481][ T1064] CPU: 1 PID: 1064 Comm: khungtaskd Not tainted 5.3.0-rc6-next-20190830 #75 [ 405.068153][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.078212][ T1064] Call Trace: [ 405.081659][ T1064] dump_stack+0x172/0x1f0 [ 405.085995][ T1064] nmi_cpu_backtrace.cold+0x70/0xb2 [ 405.091194][ T1064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.097435][ T1064] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 405.103070][ T1064] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 405.109052][ T1064] arch_trigger_cpumask_backtrace+0x14/0x20 [ 405.114952][ T1064] watchdog+0xc99/0x1360 [ 405.119202][ T1064] kthread+0x361/0x430 [ 405.123269][ T1064] ? reset_hung_task_detector+0x30/0x30 [ 405.128812][ T1064] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 405.135054][ T1064] ret_from_fork+0x24/0x30 [ 405.139585][ T1064] Sending NMI from CPU 1 to CPUs 0: [ 405.145332][ C0] NMI backtrace for cpu 0 [ 405.145338][ C0] CPU: 0 PID: 9942 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 405.145343][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.145347][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 405.145356][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 405.145360][ C0] RSP: 0018:ffff88808fa4fb68 EFLAGS: 00010206 [ 405.145367][ C0] RAX: 0000000000040000 RBX: ffff88809190e000 RCX: 0000000000000000 [ 405.145371][ C0] RDX: 0000000000001000 RSI: ffffc90014024000 RDI: ffff88809190f000 [ 405.145376][ C0] RBP: ffff88808fa4fb98 R08: ffff88809b752240 R09: ffff8880aa402000 [ 405.145380][ C0] R10: 0000000000000000 R11: ffffea0002464387 R12: 0000000000001000 [ 405.145385][ C0] R13: 00007ffffffff000 R14: ffffc90014023000 R15: ffff88809b752240 [ 405.145389][ C0] FS: 00007fcdb9923700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 405.145393][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.145398][ C0] CR2: ffffffffff600400 CR3: 000000009b0e3000 CR4: 00000000001406f0 [ 405.145402][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 405.145406][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 405.145409][ C0] Call Trace: [ 405.145412][ C0] ? __probe_kernel_read+0xf5/0x1d0 [ 405.145415][ C0] read_mem+0xfc/0x2c0 [ 405.145418][ C0] do_iter_read+0x4a4/0x660 [ 405.145421][ C0] ? dup_iter+0x260/0x260 [ 405.145424][ C0] vfs_readv+0xf0/0x160 [ 405.145427][ C0] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 405.145430][ C0] ? __kasan_check_read+0x11/0x20 [ 405.145433][ C0] ? ksys_dup3+0x3e0/0x3e0 [ 405.145437][ C0] ? __kasan_check_read+0x11/0x20 [ 405.145440][ C0] ? _copy_to_user+0x118/0x160 [ 405.145443][ C0] ? __fget_light+0x1a9/0x230 [ 405.145445][ C0] do_preadv+0x1c4/0x280 [ 405.145448][ C0] ? do_readv+0x330/0x330 [ 405.145452][ C0] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 405.145455][ C0] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 405.145458][ C0] ? do_syscall_64+0x26/0x760 [ 405.145462][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.145465][ C0] ? do_syscall_64+0x26/0x760 [ 405.145468][ C0] __x64_sys_preadv+0x9a/0xf0 [ 405.145471][ C0] do_syscall_64+0xfa/0x760 [ 405.145474][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.145477][ C0] RIP: 0033:0x459879 [ 405.145487][ C0] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 405.145490][ C0] RSP: 002b:00007fcdb9922c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 405.145498][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459879 [ 405.145503][ C0] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000003 [ 405.145507][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 405.145512][ C0] R10: 00000000febff000 R11: 0000000000000246 R12: 00007fcdb99236d4 [ 405.145516][ C0] R13: 00000000004c6b98 R14: 00000000004dbd88 R15: 00000000ffffffff [ 405.338716][ T1064] Kernel panic - not syncing: hung_task: blocked tasks [ 405.464103][ T1064] CPU: 1 PID: 1064 Comm: khungtaskd Not tainted 5.3.0-rc6-next-20190830 #75 [ 405.472856][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.482906][ T1064] Call Trace: [ 405.486200][ T1064] dump_stack+0x172/0x1f0 [ 405.490533][ T1064] panic+0x2dc/0x755 [ 405.494425][ T1064] ? add_taint.cold+0x16/0x16 [ 405.499103][ T1064] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 405.504734][ T1064] ? ___preempt_schedule+0x16/0x20 [ 405.509848][ T1064] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 405.515999][ T1064] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 405.522156][ T1064] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 405.528313][ T1064] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 405.534485][ T1064] watchdog+0xcaa/0x1360 [ 405.538734][ T1064] kthread+0x361/0x430 [ 405.542803][ T1064] ? reset_hung_task_detector+0x30/0x30 [ 405.548346][ T1064] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 405.554591][ T1064] ret_from_fork+0x24/0x30 [ 405.563685][ T1064] Kernel Offset: disabled [ 405.568035][ T1064] Rebooting in 86400 seconds..