1a99e99ecde4a8eb5e1a6183b95e7c2be83fe29a3b244c45252534c112333b1b2b07e1448a85adc2f75c3b70f28df94679ffa96fd1ec6eeb5919a49fcb4d007d38e138d31ebbb8b5e745b04993b6d026c7a29071caf9ce97bdefb737de") 09:41:38 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000001e0000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:38 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 09:41:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5452, &(0x7f00000002c0)) 09:41:38 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x700, r0) 09:41:38 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4c01, &(0x7f00000002c0)={0x0, r1}) 09:41:38 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000001f0000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000000)={0x7b01a49d, "5056e358ba29897012ace7a8db8cb0b0cc194202e3d8dfcf3b0ef192686b00a4", 0x2, 0x1}) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:41:38 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x704, r0) 09:41:38 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5206, &(0x7f00000002c0)={0x0, r1}) 09:41:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5460, &(0x7f00000002c0)) 09:41:38 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000200000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @remote}, &(0x7f00000000c0)=0xc) sendmsg$xdp(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x2c, 0x5, r1, 0x36}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="8649f7f446889aa52904a98df1150e4217f316ae976e55d4a7ccdac23b243807f9777c6f04042b9263c6360344f3eb88dc3d1534e8c954cb07184521339968ff49588fa47f2ecb1b3f603004bc749dbb8050825528b57eee2def90c3a56fabfc9d439c2a7fb57b778db3da32c13076f77151a5a81598829063b29d7533df713a82a7475e0c281db2f86b96fb8d9905339bbe0b0ef06461e893", 0x99}, {&(0x7f0000000280)}], 0x2, 0x0, 0x0, 0x4000}, 0x4040000) r2 = syz_open_pts(r0, 0x3fffffffffffffff) dup3(r2, r0, 0x0) personality(0x6040003) syncfs(r0) write(r2, &(0x7f0000000140)="bd5e418f638c9b6d6d488bd76d92e883e2f1c23767565a751971de4707178361cc405dc7d190042c761862d4fe69411bd15a3687145a953420c1a3111ac1b1088e885babc0a024ac79cb995f3a736656e911747c224fd2bec391ead586281018ea1c0065d149cfe6f29e46f8a7d46cb95b169c53e314a32d6088e2", 0x3d1) write$P9_RATTACH(r0, 0x0, 0x0) 09:41:39 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000210000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:39 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5385, &(0x7f00000002c0)={0x0, r1}) 09:41:39 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x804, r0) 09:41:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5501, &(0x7f00000002c0)) 09:41:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000000)={0x7b01a49d, "5056e358ba29897012ace7a8db8cb0b0cc194202e3d8dfcf3b0ef192686b00a4", 0x2, 0x1}) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:41:39 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000220000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x7f, 0x81, 0x4}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0xffff, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) 09:41:39 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x900, r0) 09:41:39 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000004000000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:39 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5411, &(0x7f00000002c0)={0x0, r1}) 09:41:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x6364, &(0x7f00000002c0)) 09:41:39 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000008000000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:39 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x904, r0) 09:41:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8902, &(0x7f00000002c0)) 09:41:40 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000001b000000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:40 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x541c, &(0x7f00000002c0)={0x0, r1}) 09:41:40 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:41:40 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000007d000000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) [ 1117.553863][T17180] FAULT_INJECTION: forcing a failure. [ 1117.553863][T17180] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.617032][T17180] CPU: 0 PID: 17180 Comm: syz-executor.4 Not tainted 5.2.0+ #90 [ 1117.624721][T17180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1117.634784][T17180] Call Trace: [ 1117.638086][T17180] dump_stack+0x172/0x1f0 [ 1117.642426][T17180] should_fail.cold+0xa/0x15 [ 1117.647025][T17180] ? fault_create_debugfs_attr+0x180/0x180 [ 1117.652844][T17180] ? ___might_sleep+0x163/0x280 [ 1117.657706][T17180] __should_failslab+0x121/0x190 [ 1117.662652][T17180] should_failslab+0x9/0x14 [ 1117.667155][T17180] __kmalloc+0x2e0/0x770 [ 1117.671402][T17180] ? tomoyo_realpath_from_path+0xc0/0x7b0 [ 1117.677125][T17180] ? rcu_read_lock_sched_held+0x110/0x130 [ 1117.682840][T17180] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1117.688568][T17180] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1117.694120][T17180] ? tomoyo_path_number_perm+0x193/0x520 [ 1117.699766][T17180] tomoyo_path_number_perm+0x1dd/0x520 [ 1117.705225][T17180] ? tomoyo_path_number_perm+0x193/0x520 [ 1117.710890][T17180] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1117.716701][T17180] ? __f_unlock_pos+0x19/0x20 [ 1117.721417][T17180] ? __fget+0x384/0x560 [ 1117.725579][T17180] ? ksys_dup3+0x3e0/0x3e0 [ 1117.729998][T17180] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1117.736244][T17180] ? fput_many+0x12c/0x1a0 [ 1117.740667][T17180] tomoyo_file_ioctl+0x23/0x30 [ 1117.745436][T17180] security_file_ioctl+0x77/0xc0 [ 1117.750379][T17180] ksys_ioctl+0x57/0xd0 [ 1117.754539][T17180] __x64_sys_ioctl+0x73/0xb0 [ 1117.759135][T17180] do_syscall_64+0xfd/0x6a0 [ 1117.763639][T17180] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1117.769527][T17180] RIP: 0033:0x459829 [ 1117.773423][T17180] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1117.793029][T17180] RSP: 002b:00007fefe570ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.801443][T17180] RAX: ffffffffffffffda RBX: 00007fefe570ac90 RCX: 0000000000459829 [ 1117.809414][T17180] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 1117.817383][T17180] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1117.825353][T17180] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fefe570b6d4 [ 1117.833320][T17180] R13: 00000000004c473d R14: 00000000004d87e8 R15: 0000000000000004 [ 1117.846360][T17180] ERROR: Out of memory at tomoyo_realpath_from_path. 09:41:40 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x4, 0x800) dup(0xffffffffffffffff) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x40, 0x20001) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000080)='gid_map\x00') ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x5, 0x9216, 0x10001, 0x4e6, 0x9, 0x6, 0x400, 0x0, 0x0, 0x8901, 0x3, 0x5, 0x8000, 0x4], 0xf005, 0x2000}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x2802, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xfffffffffffffffd, 0x0, 0x3065bb14, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r5 = syz_open_pts(r4, 0x4000000000000002) r6 = dup3(r5, r3, 0x0) write(r3, &(0x7f0000000400)="33a8b530ea0000000000000003f203b11f029f564b8f5325f74b8253c8a2797f441781f933bf31143481fccfe2a915174f7e78e201606e547870f92c088afb025f8bb60c4fa0d677ed6ff0f3227d46afdaacf58e48532a515e32bb3747c78d078b15ab3d13ff6a1690b98c66ac96051a9bc7c3e7c546852b5e76d9782a23030ae5f741597bac0b9fc7e2ce7ac75f8cc446cb32b18563f1c4347b981200a62adcf08aff61f0a7e8208b87f518a31ee16268d0914f1f3526d166ffa096e2fc88e038446ad3ee5527f9b3f8dce2f09462a9a7100a0e04db53008f0dd43d0000000000", 0xd39fbcaa31a5bc90) write$P9_RATTACH(r6, 0x0, 0x7a1c0dac46f7644f) 09:41:40 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xa00, r0) 09:41:40 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000bf000000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:40 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8912, &(0x7f00000002c0)) 09:41:40 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5421, &(0x7f00000002c0)={0x0, r1}) 09:41:40 executing program 4 (fault-call:1 fault-nth:1): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 1118.070380][T17242] FAULT_INJECTION: forcing a failure. [ 1118.070380][T17242] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1118.083658][T17242] CPU: 1 PID: 17242 Comm: syz-executor.4 Not tainted 5.2.0+ #90 [ 1118.091297][T17242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.101363][T17242] Call Trace: [ 1118.104682][T17242] dump_stack+0x172/0x1f0 [ 1118.109038][T17242] should_fail.cold+0xa/0x15 [ 1118.113652][T17242] ? fault_create_debugfs_attr+0x180/0x180 [ 1118.119477][T17242] ? lock_downgrade+0x920/0x920 [ 1118.124351][T17242] should_fail_alloc_page+0x50/0x60 [ 1118.129564][T17242] __alloc_pages_nodemask+0x1a1/0x8f0 [ 1118.134944][T17242] ? __kasan_check_read+0x11/0x20 [ 1118.139976][T17242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1118.146224][T17242] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1118.151955][T17242] ? __kasan_check_read+0x11/0x20 [ 1118.156999][T17242] ? fault_create_debugfs_attr+0x180/0x180 [ 1118.162814][T17242] cache_grow_begin+0x90/0xd20 [ 1118.167586][T17242] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1118.173309][T17242] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1118.179552][T17242] __kmalloc+0x6b2/0x770 [ 1118.179572][T17242] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1118.179590][T17242] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1118.179606][T17242] ? tomoyo_path_number_perm+0x193/0x520 [ 1118.179628][T17242] tomoyo_path_number_perm+0x1dd/0x520 [ 1118.179642][T17242] ? tomoyo_path_number_perm+0x193/0x520 [ 1118.179661][T17242] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1118.218678][T17242] ? __f_unlock_pos+0x19/0x20 [ 1118.223394][T17242] ? __fget+0x384/0x560 [ 1118.227572][T17242] ? ksys_dup3+0x3e0/0x3e0 [ 1118.231997][T17242] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1118.238238][T17242] ? fput_many+0x12c/0x1a0 [ 1118.238264][T17242] tomoyo_file_ioctl+0x23/0x30 [ 1118.247428][T17242] security_file_ioctl+0x77/0xc0 [ 1118.252385][T17242] ksys_ioctl+0x57/0xd0 [ 1118.256556][T17242] __x64_sys_ioctl+0x73/0xb0 [ 1118.261172][T17242] do_syscall_64+0xfd/0x6a0 09:41:40 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xa04, r0) 09:41:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) epoll_create1(0x80008) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x400) dup3(r1, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:41:41 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xb00, r0) [ 1118.265689][T17242] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1118.271587][T17242] RIP: 0033:0x459829 [ 1118.275484][T17242] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1118.295095][T17242] RSP: 002b:00007fefe570ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1118.303521][T17242] RAX: ffffffffffffffda RBX: 00007fefe570ac90 RCX: 0000000000459829 [ 1118.311540][T17242] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 09:41:41 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000f4010000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) [ 1118.319513][T17242] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1118.319521][T17242] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fefe570b6d4 [ 1118.319529][T17242] R13: 00000000004c473d R14: 00000000004d87e8 R15: 0000000000000004 09:41:41 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5423, &(0x7f00000002c0)={0x0, r1}) 09:41:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8933, &(0x7f00000002c0)) 09:41:41 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000001b0000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:41 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xb04, r0) 09:41:41 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000001f0000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae01, &(0x7f00000002c0)) 09:41:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:41:41 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000400000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:41 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5425, &(0x7f00000002c0)={0x0, r1}) 09:41:42 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xa200, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000080)='gid_map\x00') dup3(r2, r2, 0x80000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000000) dup3(r4, r2, 0x0) write(r3, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r2, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) 09:41:42 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xe04, r0) 09:41:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae41, &(0x7f00000002c0)) 09:41:42 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000007d0000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x2, 0x0) 09:41:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5433, &(0x7f00000002c0)={0x0, r1}) 09:41:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x10, 0x0) 09:41:42 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000bf0000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:42 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xf00, r0) [ 1119.447202][T18352] QAT: Invalid ioctl 09:41:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5450, &(0x7f00000002c0)={0x0, r1}) 09:41:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae60, &(0x7f00000002c0)) 09:41:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4b70, 0x0) [ 1120.179918][T18588] QAT: Invalid ioctl 09:41:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x82002, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:41:43 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x1100, r0) 09:41:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4c01, 0x0) 09:41:43 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000001f40000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5451, &(0x7f00000002c0)={0x0, r1}) 09:41:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae80, &(0x7f00000002c0)) 09:41:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x5385, 0x0) 09:41:43 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x2400, r0) 09:41:43 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000001000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5452, &(0x7f00000002c0)={0x0, r1}) 09:41:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae9a, &(0x7f00000002c0)) 09:41:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x5421, 0x0) 09:41:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x2) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x1e) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x7ac8d106059b2460) ioctl$TCXONC(r3, 0x540a, 0x760) 09:41:44 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000004000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:44 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x2500, r0) 09:41:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x5429, 0x0) 09:41:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5460, &(0x7f00000002c0)={0x0, r1}) 09:41:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xaf01, &(0x7f00000002c0)) 09:41:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x542e, 0x0) 09:41:44 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000008000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:44 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x2600, r0) 09:41:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x400454ca, &(0x7f00000002c0)) 09:41:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x6364, &(0x7f00000002c0)={0x0, r1}) 09:41:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x5450, 0x0) 09:41:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) dup3(r1, r2, 0x80000) 09:41:45 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000001b000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x5451, 0x0) 09:41:45 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x40000, r0) 09:41:45 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40045564, &(0x7f00000002c0)) 09:41:45 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x7706, &(0x7f00000002c0)={0x0, r1}) 09:41:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x5452, 0x0) 09:41:45 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000001f000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:45 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40045566, &(0x7f00000002c0)) 09:41:45 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8912, &(0x7f00000002c0)={0x0, r1}) 09:41:45 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x1000000, r0) 09:41:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x5460, 0x0) 09:41:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)="733e055859eb70900cf854434a157ce6cb83a1703cf0a309667bd23f51c946b267e5134ca4f8b80777984953215e148cd2496392cc7165e7628b3589fd166ae288f93bd5ca17d9ef42adbaa322e23534459df52dd405016f91c2525c3ebe3828fae05e060537c606aaee4f0696b2b6ddc0be65248d8967b988837cf62bc5e06c5138375dfeab586dc0f655420a32f7fe1441a738ac7270250346637a4a81b47113743d62fea1b9b8f2831e4738d1e588804341637228c566726ef9144f5303497d05") r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:41:46 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000040000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:46 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40049409, &(0x7f00000002c0)) 09:41:46 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x1040000, r0) 09:41:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x5462, 0x0) 09:41:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8914, &(0x7f00000002c0)={0x0, r1}) 09:41:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x5501, 0x0) 09:41:46 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000007d000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:46 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x2000000, r0) 09:41:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8918, &(0x7f00000002c0)={0x0, r1}) 09:41:46 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af07, &(0x7f00000002c0)) 09:41:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x6364, 0x0) 09:41:47 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x3d3) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e22, @rand_addr=0x1}, @in6={0xa, 0x4e21, 0x8, @mcast2, 0x3ff}, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @multicast1}, 0x6}], 0x48) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) write(r2, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r1, 0x0, 0x0) 09:41:47 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000bf000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:47 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x2040000, r0) 09:41:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x6685, 0x0) 09:41:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:41:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8933, &(0x7f00000002c0)={0x0, r1}) 09:41:47 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000001f4000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x890b, 0x0) 09:41:47 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x3000000, r0) 09:41:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008ae89, &(0x7f00000002c0)) 09:41:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8946, &(0x7f00000002c0)={0x0, r1}) 09:41:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x8912, 0x0) 09:41:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x1) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "9fc206c3373c418d", "35f021bbda358a5967d995fcdc4cd31c34eecd21e2f143b137261bf13a08540c", "0e8b2f05", "1d9473fba90fe29e"}, 0x38) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:41:48 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000fffffffd000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x8933, 0x0) 09:41:48 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x4000000, r0) 09:41:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008ae90, &(0x7f00000002c0)) 09:41:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x894b, &(0x7f00000002c0)={0x0, r1}) 09:41:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x894c, 0x0) 09:41:48 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000fffffffe000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af00, &(0x7f00000002c0)) 09:41:48 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x5000000, r0) 09:41:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x89f1, &(0x7f00000002c0)={0x0, r1}) 09:41:48 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000fdffffff000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:48 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x500, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x0, 0x100000001}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') io_uring_setup(0xff, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x2, 0xe1}) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000000)=""/10, &(0x7f00000000c0)=0xa) r2 = shmget(0x1, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r1, 0x4000000000000004) dup3(r4, r1, 0x0) write(r3, &(0x7f0000000100)="bd", 0xffffff17) prctl$PR_GET_SECCOMP(0x15) 09:41:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x89a1, 0x0) 09:41:48 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000feffffff000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af03, &(0x7f00000002c0)) 09:41:48 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x6000000, r0) 09:41:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae01, &(0x7f00000002c0)={0x0, r1}) 09:41:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xae01, 0x0) 09:41:49 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000260000000000000000000000000000000000000120a1070071756575"], 0x38) [ 1126.212796][T22905] QAT: Invalid ioctl 09:41:49 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x6040000, r0) 09:41:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:41:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae41, &(0x7f00000002c0)={0x0, r1}) 09:41:49 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000ffffff950000000000000000000000000000000000000120a1070071756575"], 0x38) [ 1126.953674][T23123] QAT: Invalid ioctl 09:41:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x400) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:41:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xae41, 0x0) 09:41:49 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x7000000, r0) 09:41:49 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000001f40000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af10, &(0x7f00000002c0)) 09:41:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae47, &(0x7f00000002c0)={0x0, r1}) 09:41:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xae80, 0x0) 09:41:50 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000ffffffff0000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae80, &(0x7f00000002c0)={0x0, r1}) 09:41:50 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x7040000, r0) 09:41:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af12, &(0x7f00000002c0)) 09:41:50 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000040000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1, 0x9, 0xfffffffffffffffe, 0x2}) r3 = dup3(r2, r0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x1, 0x0, 0x3, 0x2, 0x8000, 0x79e2}, &(0x7f0000000140)=0x20) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:41:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xae9a, 0x0) 09:41:50 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000080000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:50 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x8000000, r0) 09:41:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xaea2, &(0x7f00000002c0)={0x0, r1}) 09:41:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af13, &(0x7f00000002c0)) 09:41:50 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000001b0000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:50 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x8040000, r0) 09:41:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf02, 0x0) 09:41:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af14, &(0x7f00000002c0)) 09:41:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xaf01, &(0x7f00000002c0)={0x0, r1}) 09:41:51 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000007d0000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:51 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)='gid_map\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x200, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x80) write(r2, &(0x7f0000000140)="0bc8b4d77b50ce492aa74dc4bf94c7cfd92b6fd59ac4607c3b2b03a30c1aa4f260ac5bf4776aec563479fb3777c332659052e25e075185efefaeb232b24919ef5fc510f216027cf5005a257590e28afc48aba8adf50059aec1371d6fb6112e9c9069486d5104d73919b4fbf5c3ddeaf23d4c", 0x72) write$P9_RATTACH(r1, 0x0, 0x0) 09:41:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf03, 0x0) 09:41:51 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x9000000, r0) 09:41:51 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000bf0000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af21, &(0x7f00000002c0)) 09:41:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x400454ca, &(0x7f00000002c0)={0x0, r1}) 09:41:52 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000f40100000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf05, 0x0) 09:41:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40046207, &(0x7f00000002c0)={0x0, r1}) 09:41:52 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x9040000, r0) 09:41:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)) 09:41:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf06, 0x0) 09:41:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) ioctl$TCSBRK(r0, 0x5409, 0x9) write$P9_RATTACH(r0, 0x0, 0x0) 09:41:52 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000001b00000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:52 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xa000000, r0) 09:41:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf08, 0x0) 09:41:52 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000001f00000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af23, &(0x7f00000002c0)) 09:41:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40049409, &(0x7f00000002c0)={0x0, r1}) 09:41:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf09, 0x0) 09:41:52 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000004000000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:52 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xa040000, r0) 09:41:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af24, &(0x7f00000002c0)) 09:41:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af07, &(0x7f00000002c0)={0x0, r1}) 09:41:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x164, r2, 0x504, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffc00}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x510}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0xac, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff69f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2abb218c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3b0a12cc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r3 = syz_open_pts(r1, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r4, 0x0, 0xfffffffffffffdf0) 09:41:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf10, 0x0) 09:41:53 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000007d00000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af25, &(0x7f00000002c0)) 09:41:53 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xb000000, r0) 09:41:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)={0x0, r1}) 09:41:53 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000bf00000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf18, 0x0) 09:41:53 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xb040000, r0) 09:41:53 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000001f400000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40082406, &(0x7f00000002c0)={0x0, r1}) 09:41:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af2f, &(0x7f00000002c0)) 09:41:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)='A', 0x1) write$P9_RATTACH(r0, 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@broadcast, @local, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_getnetconf={0x24, 0x52, 0x524, 0x70bd2a, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @NETCONFA_IFINDEX={0x8, 0x1, r4}]}, 0x17}, 0x1, 0x0, 0x0, 0x800}, 0x8800) 09:41:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf63, 0x0) 09:41:54 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000010000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:54 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xe040000, r0) 09:41:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40085618, &(0x7f00000002c0)={0x0, r1}) 09:41:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af60, &(0x7f00000002c0)) 09:41:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x40044900, 0x0) 09:41:54 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000040000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:54 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xf000000, r0) 09:41:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x400c55cb, &(0x7f00000002c0)) 09:41:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008ae89, &(0x7f00000002c0)={0x0, r1}) 09:41:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x7, 0x3, 0xab88}) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:41:54 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000080000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x400454ca, 0x0) 09:41:54 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x10000000, r0) 09:41:54 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000001b0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4014563c, &(0x7f00000002c0)) 09:41:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x40045542, 0x0) 09:41:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af00, &(0x7f00000002c0)={0x0, r1}) 09:41:54 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000001f0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:55 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x11000000, r0) 09:41:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4004743d, 0x0) 09:41:55 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af03, &(0x7f00000002c0)={0x0, r1}) 09:41:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x19) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x34f) 09:41:55 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40206435, &(0x7f00000002c0)) 09:41:55 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000400000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x40047451, 0x0) 09:41:55 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x24000000, r0) 09:41:55 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)={0x0, r1}) 09:41:55 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000007d0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x40049409, 0x0) 09:41:55 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x25000000, r0) 09:41:55 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4020940d, &(0x7f00000002c0)) 09:41:55 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000bf0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:55 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af10, &(0x7f00000002c0)={0x0, r1}) 09:41:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000140)={0x3, 0xf6, "7e94952541dabcddf4d6236dc916d4dca71086e5784a8b3e9f0edec6a1ee9c539bf4595697304ec5c31634cadf206ef1d48019b8d289782c77bd2a415cc370c1311bb51f101102d01ae3ec85518d05067eaa0d6b582f7c23fc67219ae6a74d96ec57b75409170fb2a25e0a860862d3c89fee3c58db8817e1611269e906013dd9ebd3b66c823bd3cbebcda6f21b66f403f6b5cd263b789d63ddf58e3b7534a9cfa1a427c6d6dd233bbeacff50f88cc665a332b7fe8663bb1e0891922e1f4e1290f827e7c2ccf205345ced587a906e15907f1f5761c69ab1da372cbbbecaa1e56bd3ed4a6542ee918dd242879bd41f72539f4d4b858c6f"}) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000000)={0x6, 0x8}) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:41:56 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000001f40000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4004af61, 0x0) 09:41:56 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x26000000, r0) 09:41:56 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4020ae46, &(0x7f00000002c0)) 09:41:56 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af12, &(0x7f00000002c0)={0x0, r1}) 09:41:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af00, 0x0) 09:41:56 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000fffffffd0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:56 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x1000000000000, r0) 09:41:56 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af13, &(0x7f00000002c0)={0x0, r1}) 09:41:56 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4028af11, &(0x7f00000002c0)) 09:41:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af60, 0x0) 09:41:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000005) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:41:57 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000fffffffe0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:57 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x40106614, 0x0) 09:41:57 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x4000000000000, r0) 09:41:57 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4048ae9b, &(0x7f00000002c0)) 09:41:57 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af14, &(0x7f00000002c0)={0x0, r1}) 09:41:57 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000fdffffff0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:57 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x40107446, 0x0) 09:41:57 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x100000000000000, r0) 09:41:57 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af21, &(0x7f00000002c0)={0x0, r1}) 09:41:57 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x401845ff, 0x0) 09:41:57 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4080aea2, &(0x7f00000002c0)) 09:41:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12000300}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9f6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x98}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="8c1deae64c454a79e11ddf02275a9ae1"}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) 09:41:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000feffffff0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:58 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4020940d, 0x0) 09:41:58 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x104000000000000, r0) 09:41:58 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:41:58 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4090ae82, &(0x7f00000002c0)) 09:41:58 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4020ae46, 0x0) 09:41:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000400000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:58 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x200000000000000, r0) 09:41:58 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4138ae84, &(0x7f00000002c0)) 09:41:58 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af23, &(0x7f00000002c0)={0x0, r1}) 09:41:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000800000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000000c0)) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x60, 0x4, 0x2}, 0xfffffffffffffff8}}, 0x18) write$P9_RATTACH(r0, 0x0, 0x0) 09:41:59 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x40305828, 0x0) 09:41:59 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000001b00000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:59 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x204000000000000, r0) 09:41:59 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af24, &(0x7f00000002c0)={0x0, r1}) 09:41:59 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x80044327, &(0x7f00000002c0)) 09:41:59 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x40505330, 0x0) 09:41:59 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000007d00000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:41:59 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x300000000000000, r0) 09:41:59 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x800454d2, &(0x7f00000002c0)) 09:41:59 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af25, &(0x7f00000002c0)={0x0, r1}) 09:41:59 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x405c5503, 0x0) 09:42:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400000, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:42:00 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000bf00000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4090ae82, 0x0) 09:42:00 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x400000000000000, r0) 09:42:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x80086301, &(0x7f00000002c0)) 09:42:00 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af2f, &(0x7f00000002c0)={0x0, r1}) 09:42:00 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000f401000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4188aea7, 0x0) 09:42:00 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x500000000000000, r0) 09:42:00 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000001b000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x800454d2, 0x0) 09:42:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8008af00, &(0x7f00000002c0)) 09:42:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = shmget$private(0x0, 0x2000, 0x148, &(0x7f0000ffd000/0x2000)=nil) readahead(r1, 0x80000000, 0x2) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000140)=""/213) dup3(r2, r0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x4, 0x3}]}) write(r1, &(0x7f0000000100)="bd", 0xffffff17) fstatfs(r0, &(0x7f0000000240)=""/109) write$P9_RATTACH(r0, 0x0, 0xfffffffffffffe2d) 09:42:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af60, &(0x7f00000002c0)={0x0, r1}) 09:42:01 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000001f000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x80086301, 0x0) 09:42:01 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x600000000000000, r0) 09:42:01 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8040451a, &(0x7f00000002c0)) 09:42:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x8008af00, 0x0) 09:42:01 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000040000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:01 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x604000000000000, r0) 09:42:01 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8138ae83, &(0x7f00000002c0)) 09:42:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4020940d, &(0x7f00000002c0)={0x0, r1}) 09:42:01 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000007d000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:02 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x400000) write$FUSE_OPEN(r0, &(0x7f00000000c0)={0x20, 0x0, 0x1, {0x0, 0x2}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) write(r2, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r1, 0x0, 0x0) 09:42:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xc0045878, 0x0) 09:42:02 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x700000000000000, r0) 09:42:02 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, r1}) 09:42:02 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000bf000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc0045878, &(0x7f00000002c0)) 09:42:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xc0045878, 0x0) 09:42:02 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000001f4000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:02 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x704000000000000, r0) 09:42:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc0045878, &(0x7f00000002c0)) 09:42:02 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40286608, &(0x7f00000002c0)={0x0, r1}) 09:42:02 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000100230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) fgetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000140)=""/130, 0x82) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000200)="f1175b8af42a0cec687d707bf781b1321178b351ace9dcf9846eab90ea1a4942bd7ea15b43c9b54b995775314eca7714db4317ba2f84124a1d0286dff9f86c8a63c526ceea169af846dde98eaa495ed7b742434f3e1dab87e086f86533ebb36bead70b22caff1c786f713ad56b0cdda29127c73d7759421dfc22b096ed52fbd7872219fd3af221ef8de3f64a4c6a9c2cfaaf76cee8e73b6b3d441a10f65205bb590d6af96f712cfa1f3f2c79bb5b1c10ab94d9f9840a0cf76e35b0db0ac5") write$P9_RATTACH(r0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x7, 0x1, "a02efebb503bfeeb2a3ad86c76ac067dbde31b10ffc343febd7405623313b7d85d7f2a55773a7b9e79bc430d0e7c10431e1165ca959eb037b5bdeb71104c925e", "bee0453511271ea55e94d70ee78ada9692fa0b569e7399451cf169c92e2185bf99ab78a8da773fa0f9a84eab7313358f7b1625df11e9452a88c545d7f8615881", "f0f9f5a31eb9e0cd5daa95b8d6032c6fa34e2d6fd61ee931735fca71e93f9d5e", [0x0, 0x5]}) 09:42:03 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xc0189436, 0x0) 09:42:03 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x800000000000000, r0) 09:42:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4028af11, &(0x7f00000002c0)={0x0, r1}) 09:42:03 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc008ae05, &(0x7f00000002c0)) 09:42:03 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000400230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:03 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000800230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:03 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xc020660b, 0x0) 09:42:03 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x804000000000000, r0) 09:42:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40405515, &(0x7f00000002c0)={0x0, r1}) 09:42:03 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc008af12, &(0x7f00000002c0)) 09:42:03 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000001b00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:04 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x90, 0x3, 0x2}}, 0x14) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@local, 0x14, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x7}, &(0x7f0000000180)=0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) write(r2, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r1, 0x0, 0x0) 09:42:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xc0305615, 0x0) 09:42:04 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x900000000000000, r0) 09:42:04 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000001f00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:04 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4068aea3, &(0x7f00000002c0)={0x0, r1}) 09:42:04 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc010640c, &(0x7f00000002c0)) 09:42:04 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000004000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xc0345642, 0x0) 09:42:04 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x904000000000000, r0) 09:42:04 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc0189436, &(0x7f00000002c0)) 09:42:04 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4080aebf, &(0x7f00000002c0)={0x0, r1}) 09:42:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xc0bc5310, 0x0) 09:42:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0xd}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}]}, 0xfffffffffffffdbc}, 0x1, 0x0, 0x0, 0x8000}, 0x40005) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x200002, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r1, 0x4000000000000002) dup3(r3, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:42:05 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000007d00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:05 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xc0f85403, 0x0) 09:42:05 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xa00000000000000, r0) 09:42:05 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4090ae82, &(0x7f00000002c0)={0x0, r1}) 09:42:05 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc018aa3f, &(0x7f00000002c0)) 09:42:05 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xc1205531, 0x0) 09:42:05 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000bf00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:05 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xa04000000000000, r0) 09:42:05 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc020660b, &(0x7f00000002c0)) 09:42:05 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000001f400230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:05 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x41007701, &(0x7f00000002c0)={0x0, r1}) 09:42:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000fffffffd00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) close(r0) 09:42:06 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xb00000000000000, r0) 09:42:06 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x2}) 09:42:06 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x200000) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) close(r2) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r2, 0x40000) write(r2, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r1, 0x0, 0x0) 09:42:06 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x80044940, &(0x7f00000002c0)={0x0, r1}) 09:42:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:06 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xb04000000000000, r0) 09:42:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000fffffffe00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:06 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2) name_to_handle_at(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x86, 0x800, "5cb73d298b7ec9598dce13dae9761a87a738eafab5e03bd93bb43dbc259bf524dcb54ee6223b37771e6a844a8ace627e9efbeb0dc7c21c1b5171e236b976bcd3f36cd97dc4497c7eac2d7af6534f31a907d2a36230248c276ec9d3c7b87e615943e2a001cb9e1cf4ce08f507efbc0ad607a465184272f9772dc63b9eb85e"}, &(0x7f0000000300), 0x400) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xffffffff80000000}, &(0x7f00000000c0)=0x8) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={r5, 0x6}, &(0x7f0000000180)=0x8) write(r2, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r1, 0x0, 0x0) 09:42:06 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x3}) 09:42:06 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x80045400, &(0x7f00000002c0)={0x0, r1}) 09:42:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000fdffffff00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10080, 0x124) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) 09:42:06 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xe04000000000000, r0) 09:42:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000feffffff00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000004000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:06 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x800454d2, &(0x7f00000002c0)={0x0, r1}) 09:42:06 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x4}) 09:42:06 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xf00000000000000, r0) 09:42:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) clock_getres(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000001200)=[{0xbc52, 0x1, 0x2, 0xa94, @time, {0x3, 0x3f}, {0x3}, @queue={0x9, {0x8, 0x2}}}, {0x401, 0x7fff, 0x4, 0x3, @tick=0x7ff, {0x20000000, 0x400}, {0x6, 0x5751}, @raw32={[0xfff, 0x5, 0x6]}}, {0xfffffffffffffeff, 0x96, 0x5, 0x0, @time={0x77359400}, {0x1, 0x1f}, {0x3, 0x800}, @note={0xfff, 0x2, 0x1000, 0x59f9}}, {0x0, 0xfffffffffffffffc, 0x40, 0x513, @time={r3, r4+30000000}, {0xcf, 0x2}, {0x1, 0x2}, @ext={0x1000, &(0x7f0000000140)="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"}}, {0xd990, 0xff, 0xfffffffffffffffa, 0x8, @time={0x77359400}, {0x9}, {0x4, 0x1}, @note={0x40, 0x40, 0x8, 0x20, 0x7fff}}, {0x1, 0x1, 0x3, 0x0, @tick=0x400, {0x9, 0x101}, {0x3ff, 0x7}, @ext={0xa6, &(0x7f0000001140)="67287cbe6a8cc99d3a868cf752ac31247ef3536118a2d3c53a906ee9642944c791a194c7ae698c807b0e3e37e756d2031bacdc404a38e37f88fa3e7d17f941dabd28e70777836dfb75c13e1afbd761a79f614484f3bc3ec44b2089865ca0aec4c65d53a605cfba4eda235a412b50f02a0e963daa2247287ebc2a90a73dc66e1eb908a95c20145cc1c860882dd8b78ae068ff9d6b76498bedce158e0531b3204ca2a37f79b0b8"}}], 0x120) write$P9_RATTACH(r0, 0x0, 0x0) 09:42:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:07 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000008000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:07 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x5}) 09:42:07 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x80085617, &(0x7f00000002c0)={0x0, r1}) 09:42:07 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x1000000000000000, r0) 09:42:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x280040) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0xc000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x400}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="0600d000f68852e365c8fc0199563cb1cb74be44b3ebc737050000000000000088b2e715b6082d33b9afbe5f03cc8d3c1de475bd105a0501ddb8dccb9da0d216131c2bf277bde613933d241d56cbe292ae16b6a0d0aa75ad6616e66d206f456433c68aa80c0406eae3f84559c1e0d9d2d1a7a1788cce7554b14002fc7b6550709e0710d81416bc87522d48948f8f24e45e3ef4bfcb12fab4c3029ac5fcfc4b5b47bcf3119be8d7260bddfe9aaeb457a712241baaf62febedee8b8cbc6d87d1fae103949b121e03c360d6368457388ac26baaf45c2d738b6711f412d704788f17f521580ba692"], 0xd8) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x400, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x100000000, 0x8, 0x100000000000, 0x40}, {0x81, 0x4, 0x9, 0xffffffffffff368e}]}, 0x10) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r5) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x84}, 0x28, 0x2) 09:42:07 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x1100000000000000, r0) 09:42:07 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000001b000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:07 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x6}) 09:42:07 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x80086301, &(0x7f00000002c0)={0x0, r1}) 09:42:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x200000) ioctl$KVM_RUN(r1, 0xae80, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:08 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000007d000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:08 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x2400000000000000, r0) 09:42:08 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x7}) 09:42:08 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x7, @mcast2, 0x10000}}, [0x6, 0xe81f, 0x0, 0x7, 0x0, 0x4, 0x80000000, 0x9, 0x7, 0x6, 0x2, 0xe4c, 0x1, 0xbacd]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r1, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) fcntl$addseals(r0, 0x409, 0x3) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x80, {0x1, 0x4, 0x7}, 0x81, r3, r4, 0xc9da, 0x8, 0x3ab, 0x7, 0x9, 0x9, 0x9, 0x140, 0x83, 0xa476, 0x7, 0xfff, 0x4, 0xd6d, 0x7}}, 0xa0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r1, 0x4000000000000002) dup3(r5, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:42:08 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8008af00, &(0x7f00000002c0)={0x0, r1}) 09:42:08 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:08 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x2500000000000000, r0) 09:42:08 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000bf000000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:08 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x8}) 09:42:08 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x80404532, &(0x7f00000002c0)={0x0, r1}) 09:42:08 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000f4010000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:08 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x3, 0x8, 0x2}}, 0x28) 09:42:08 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x2600000000000000, r0) 09:42:09 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "fbad7528d862ad859c1ddf045051ff5409536f26"}, 0x15, 0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x5, 0x8840) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "68060cffd9caa242", "930c2a4358b3ab56c1e0e0d1dd21d5b783fc199579942a76e637fa44f68a5249", "4ed01106", "c4017ec33bebbfca"}, 0x38) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$TCSBRKP(r2, 0x5425, 0x9) 09:42:09 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x300}) 09:42:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) fsetxattr$trusted_overlay_opaque(r1, 0x0, &(0x7f0000000000)='y\x00', 0x2, 0x2) write(r1, &(0x7f0000000100)="bd", 0xffffff17) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x7f, 0x101, 0x3ff, 0x6, 0x100, 0x7ff, 0x8, 0xff, 0xfffffffffffffff9, 0x0, 0x3f, 0x180000, 0x3, 0x8b40, 0x3, 0xfffffffffffffffd], 0x2, 0x100000}) write$P9_RATTACH(r0, 0x0, 0x0) 09:42:09 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000001b0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:09 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8080aea1, &(0x7f00000002c0)={0x0, r1}) 09:42:09 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @dev}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000540)={@ll={0x11, 0x4, r1, 0x1, 0x5, 0x6, @remote}, {&(0x7f0000000480)=""/129, 0x81}, &(0x7f0000000200), 0x20}, 0xa0) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x2000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="e51b0a7d5c9df93fb4c8629249b66bdf396e987dd07f946b69e0d580441a745d8f09e2fd1c8fcc39085c4b6abb18956961a255633c665b34f0c2ee438cfc4f870825f5"], &(0x7f00000000c0)=0xa) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000001c0)=0x98) fcntl$dupfd(r2, 0x0, r2) 09:42:09 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40300, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001140)={'broute\x00', 0x0, 0x3, 0x1000, [], 0xa, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/4096}, &(0x7f00000011c0)=0x78) 09:42:09 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x500}) 09:42:09 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000280)=ANY=[@ANYBLOB="0800fa003413810bb9ccae602f347eaca40a3a3d90a5d6c6889b6511b0060157668428d71b1bdb353e830f8bacaa6948ebb06a4bbbd2465013c4e675712fc5e25bf8786247416b0b422579cbef353549eea6e5e0ca4471b454d55f611e0780086cdc3bca2495303ccaacb7f38dc36ecd3e80c29d0ca401510034c85885e26a115717c56c942531dd386c90ad0db1dfa5fe0b8c609f19f9295e1fbfd8b2b7b4a9fd446fd4ce0a0269f3c37afbdfedd9064ed60158e679d31ec6929851eacaf923ae37bb5903a4bf2eb57a8faead1cb54a8cbfb8cf65e2f973cfd5646fdc0d0da022993996668e60fc289cd6291b164af5"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x77, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000200)={0x600, 0x6, 0x7, 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}]}) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) 09:42:09 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000001f0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:09 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000140)={0x6, 0x5}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x1000, 0x2, 0x7}, &(0x7f0000000100)=0x14) 09:42:09 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x600}) 09:42:09 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x81785501, &(0x7f00000002c0)={0x0, r1}) 09:42:09 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800) ioctl$TCFLSH(r1, 0x540b, 0x81) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) getegid() 09:42:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x30401, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r3, 0x0, 0xfffffffffffffda0) 09:42:10 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000400000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:10 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x80000000, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000140)="9449ac28c4b48665f13d1a4a2176b57d9f11bb1a5abf49ea6d111dc886cc9f972ab46c3caccabc4f662de718e261d0508e8eed936c61733ccb7e777308fa4b4aa7d652042b75e22c7824dc310e2ffd4d69e018c9b98a49e2ca867baf65cb13116d279f224d4b4dedd587c22325f58dfb8df9b9848e26f513c8addd7b6a1f9b36d9b762045cf8") ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:10 executing program 2: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x3, r0) 09:42:10 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x700}) 09:42:10 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc0044308, &(0x7f00000002c0)={0x0, r1}) 09:42:10 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = dup(r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x348, 0x0, 0x160, 0x0, 0x0, 0x0, 0x278, 0x278, 0x278, 0x278, 0x278, 0x3, &(0x7f0000000180), {[{{@ipv6={@empty, @loopback, [0xffffff00, 0xff, 0xffffffff, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 'team_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x3a, 0x81, 0x2, 0x4}, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xa}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00', 0xc93b}}}, {{@ipv6={@empty, @mcast2, [0xff0000ff, 0xff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'bridge0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x3, 0x4, 0x40}, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x4a, 0x8, 0xfff, 0x0, 0x800, 0xfffffffffffffffe, 0x98, {0x0, @in6={{0xa, 0x4e24, 0x4, @mcast2, 0x6}}, 0x1, 0x8, 0x9, 0x4, 0x7}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:10 executing program 2: setrlimit(0x7, &(0x7f0000000080)={0x4, 0x2b}) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x800) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000100)="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", 0x1000}], 0x1, &(0x7f0000001140)}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="545ea6ee6cdc3f0a552f8207da284479d6d599be88dce2c3e42c139050d1a7683074d3", 0x23}, {&(0x7f00000021c0)="a18f403ef9df5eaaf81b1458dbbf3343f478d866fbde02d76d4459262ae0b8d09635aac4d93725353b9bfbb270d7b1176bfb1bcc390e8f8cfbb2fdb86fffa595fa213115fc0ddad903ddbaab88d21775499f6a9890e2c78892c2faadaa0877e4b5fec5013e4a36247d1ba770ca1501721f1eba1e7a4ea09422a4aaabb52eb1d5ba3dcf08328811fb8e90cee74ec4e085499783b1390c2c096467681aa43d056fd72682c7393bac7715ccf4", 0xab}, {&(0x7f0000002280)="e7bc783ff206d460b52732d69740321a2cef028c0842ab4a794c2e0b49", 0x1d}], 0x4}}], 0x2, 0x4c050) accept$packet(0xffffffffffffffff, &(0x7f0000007b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007bc0)=0x14) sendmmsg$inet(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000001140)="f3bad3683bdea18b5028b17e78385fe9f94913c989b6224b0409dac8e4642a747ce4266a3de49da74918e19f5ef1", 0x2e}, {&(0x7f0000002380)="6715945d25e997d1638c31062024ba6a3b0fd610c506f5e4fffb0089c8561ba488286fd44c4f8132eb293b62aeadafd00ca03944235fc1250c239bdb44097f9d8f20bae8c3b13a673e2c1e105fc9f6883966b08607a7c53c0502caccb7148be0aaf476bc2fe4def66efc8646efbfdafbf63fc14b3d95f9aa9b7f1039d2c39102e8ddfbfe7bb3bb7f03b0dc99206d1c1669e70e5a08cc1dafe6fd9eeed79ff7708aff2dcd15e864c2b01ef129d1", 0xad}, {&(0x7f0000002440)="a80c8a76bcfcbd25cb0436a4a89c2b7798a571e7a247d384039b03ebebcd0e8d96a2992863b9e266a5b686764b061f2d8d8ddb2e76afe380d54b849461b5954d29f790991538355b740e77f58810255a0ee645d3451d10cc746f170dca1eca2f545aaae5c54e4d57da0b6ed973437919112a7bb24fd05c246707d628cd412cf03d47b14cb71034ae457b790d0917dd23a3d8f6e5e6b2a0ff1fec8246d3601ed8784f53fedc3b8aa1631c2ff67ea3231cb31a1f801c3c5189163c27ff0753103e5081a58d282affaa307d8c1342a1bd926af5e556465ec70ea7a859e93daf7d3c8bbaf470471a1d540fe678642ce368c9c1725ef21006921fee3033c26bf346683ba001a0ed34a2833dfebf854c76d5c52ed6be6031faccc55854153232386a12c55d85f63039cb84be10c80c5052362832d4a709ff8a3ca99fe062fd8c18facb14ab7498a6b5a1e9543500acc6384cd57f43247f9ba2407707bf88c4239459c9837d90d0f6c653da98bb8152e273b1eb4e93e5ce06f596d4d732be26bda13733ec7a665954da2184d6e5800f88b73b760407d1676f02153e890e60de387e93c24a0e16da838dfcb8e1be4a73450f0d85ed0dad79e8740dee2e94234f1a390e5e2b892ae5861221508516c6f05522f89966c056f2ddaa5debd46bdf3ac0f171ca32a43a08b60884d33242839df3bd4d0d5d46a3b72282825b802ef7d82e226ba23071f86599d5439721b8fcebd7f7d3f05cb25c3084cb2b1180c445ae452671cb04ef22fbf62aa46744688de7f5c43b53f0c05b00a9ecb8ce359baae97a6d699f0f402eafd51c3a22a73dcf3a9c848985ca42788a800b785208455fd2d6e1b1f5e20ab9e07c59c70c7b3d6430604f0bf26ef4643218ca4b57759ba76c1ff000488de8bb4987e85b3b8b5da80a2dddcfc5c0c7a8dc09375af6d05a79e1c41e04646d95a1e79fa45e894c0003e9ee5dd9a2a98fe15cf893597028f8cc15920f3f61e098f272c835cce7f99c6e969393522089a63c79b5e33788585b3f9331821335e1170c0d031158a2674d78e9519e1515a2298920bb5608a3bfb58957fd1195c65cb04580f3ad24e578af24757b513f1ebc50f215a2ea5e5ad448b8043ee7362372023f855b84755b8e0cd7874f02b8dcc1ea46685abd394c109e51ca977301c60de531a31bc740c8b4ae00d6cce2372a116d333fb6673b2853da003a2de3ecc525cce365bf238eb550c7cbab48aca6e0cba06aeadb481e206091709769ca62d14ff3eb956be34e09683da8f8bf5519321c34f1bad4c392fb1cee5a352328a8e47035604e92ab21af2bd007401911f383a891143d89e01b6549d4c4277d47265c1f3960d8224c6df22ca94aaf8843fb8ef4c567f8675f0aa31ab8c32c38cac73f9aef009054d6670d6ed86ac74b6df8183db27f7b0f184fe1b0c72bb168e4616023b9030caeb70fe9620a29ce660a9783d3092a2df5009c527a9cff3faf8ab06ba8e6357928c43be3719a380e2736819de3c8f51d2fb86f49c76e469878c1cceb81fbf2fc70de906b8e933c4588e5805e0db19c54269e22c0f7ab862ef93885679c0ad3cc14fafe5ce150c6d73200d4497782fc6731ea340e79967611d2ba77abd0ee9b601480b06388ee78665ba41e5391abf3948124b283a41226226529f529724be4c6d70ee63938eb29f7b9adad7226e8bfe0590afd29f58ba3de21cb06d68e6172919651ec96a3ad05257689399451836b79a26da3e38dd4166aa0898b8876b00feee1c39a9601c3c3f009088f870742cb09c8afcc3867e7b92fe54fd165adde9a1f1f6ea29ce2b4b01a0e41860bef0515fba0082838e12f1fbbdda66c771cc67cf363c1e895efe93393d302aa3912e460ea5c5f4d933fb02e6a903b6c62b5f0d5f82e885ad697405798368ed66f140a1cae537982502018eb39561eabdd0e523190014a849b701b210280395641b88e2075b77254d3a5995504bf6924464cb70757eca746c21b511dc6138a9739951656f51e4dccc001dab810d95c6a2c38c34e0f5bc1ed6732a5e9f3059c530797a58a9a2e12363a14392656dba673d33e0a4e7f04e8c04ef1c036eb8ac8abd276f84c4ddab5714c2713446ef0d95a89883c19d75cf1770c2135cdd6c0b9bba8bd686be3b173beb6845cf8e718b1ec00bd67905db5e95ef8096f28d341d9d37af7c21b23ff3ad3eb71a7db2e62359ea64450dd38480efa54e12cdea8ffd834603d83bee4526d65024eb2156c5e9a4144281275b4c1c46cbb6caa7879d78854a915356be5107e690b9dc3f1c07d98eefa281817ca656262e55a4ae65244eda27ee6397f26909d9cfe38705bd18c30a4ff28ed074839f356c56ddea77d3b4006070f41d4360f5bf10d3062e99687e07618358813c7d4aeb95b543d1f41f55aba78ddd51775ad7e82e413b8d3e32b8a04f0126a729e942d6e178ada105857b0f0ea553b717f6938f73ae467d108a501737bc0125960cd8a18fa3aa079a0120e2ceb347cd19afc0f751c1e485832ffb5e32ef3a12e42f197acf7a1ad53b295c62413e97d48ea67b2135383ac4d4a9e48af61db6a54b175ebd1769876cc52b79bcaef29b0c980a6ecf18729f8967e318a61ab114c72a0a7ec0366c512a31f74ed224886f31c3d638efcd4a325da5ec9a9ee0187af548b53b21a4cc04eddff0104a3deff3e14b8d38d9a44147a05c3f8b065be44622ce2e879338be86b032ed33669b7e388d864a8878795769b4837b8a7a3bcf8e43903bf6a31884d88fa20245e508b235136664057ffda733f77765fa037c9ca0e6519bf311af30035bb541c82ccbc7f32df2a11e90014b0e0dfd0c27cf63ca15c925d26affa128b022de5933d3b0992170877ae9a4b1ad4f3b153fc7d3a64af838b2d5cea76a7c1083b5ecf53bc7ad47e3c5d5428d1c130c8042f590899631d37fc4cd228010414ba97d7124a1a265a27b82e66e738f98adde4bd2b1125522b438826711df813bdf6ce5738ed331e137c30231365a388c2befabcd061eedfb01751d127c2860544cbf91b389c23e5c4a3d353c6269e8bf49b7c3f35a0aae82fdc775cc6cde27c70f223049c2c11a24203467e504d7b823efed861c9157a92ca583d99281542f33fef1420c00c51b8f163c949812976cf4b3f4878b8135879a33b1c9bc8a33d5a245991bc64011f1e024935f6b75b3052635c064784c181f4aa877b191e67af6df2585d1a10c983067e7593a2b917bd2b747498b4c609557091a5dedd2668f59f57f434a6aeb7f51739c7f838acdfce896095eb67e8d443cee4471cd08ac33f5c9b41205cdf4af2ee9e8fb76684ca62e56ce6c23dd986c5da38b38886b97fe17299047df7cb58fd59cffddd8435e63a175b1628cd0c1b1b26c042be22bbc05c453516718f83f574d75cf801b9843a150ab191169763e8feff501854483f979d3602c1ee34dbff8fd499f85c1d48b8550b740771548ffdd823efb4a3ee6b54b44195e11d4d4fec5d0186e696a02724e9e519194eddc9ae0ed96745ef1dfc9c75361e293e4a7c5cf257b7b7f3ef2963e751d5291d8a6dc9bf64812f2c1d6febe718be678bda7eee78657d83eb23a0a5fd26093b9016c1b4857ceab778520deba00ab46f95bd12169479c2c70c1f34254368dfcf6a9347e681c0269fe0b76ac6d3cfbf1be907e9b591c201c4712eba8bd8f03d7a11e3d8d687944b31eddd157fdcede799cc567a149057f2412b37200599b6664a577a7506bcacdd5a2a3a6fac8efb1f9774f820c995efa5fc9f134a8d818c0d3a45cb981c58920e5945d4e1853f2ac4496929e17d0e59270847bb3077912714e67e1a450052bb17211fce3b40cb1201435eaa41c21ceb9f1fd8b7530edc77008f9eedae3dcb0d18d7b8bd62ae2a2db11235867aed94d37c3b99b5439a2869d29b6874eb264421332f13babd0bdf5844f82eb9b77e6b0268c8ad7c6bea6d251696c854eff98142beba1c1338e3993d151d5b5022136c77e0b401fa7b83bbeb49fde74dd06b8f38b4de63d5c2718067c2718bce95670484095c9597139a19372bc6636ec96baa3b497cde909669f9ca489a9522ac5cdc050adfd3a6f5d3ab5062804e9260d08521fdd01e51a016a5f1aa9bf106316b1ef673d593d61a3d36ee910bfe5dcc64987a36c1cd2ad78aea1dcd2e9625158b0bf721c5bfca9e436bab10878742afa758470cb08e013a11ea2a2c91de4972425a21b8f5a654b5755727282a116bc55de9dc2d5e419377af54128e711f21e2231428061a913df878b9dbbfc7aa986f79ece4ebd184d94de1d12a2ac0cf44737afbdd1a904c5c7212175460b64cbeb78fa15ab60bb618d0202c020734e418404dfa0729545b443722c8b25764fb25ff31ecd4bccfd1fe96f1bad915884863aac2c247efa7ce8c38aac35591dffbf89854cb85b336790482fab2d79eb7a0e15c41d027be35a07e35938f0205d8b056d632d8c7bc8332e09295dd5fc0f73d61a9f54947e909f05377e37e84c0152f39ecb22b4595548dfd9ded0df50a7a12e8125d27993ea8f087b5af7a2798df116efb9c1f56280fa3d5497a315245dcdd025740fe4a8837e7ae07d3c85175830b53502eef387ce32f1501437177be9d2331355b4d8fd9cd728c21f93c624cd33db73d3bb523814bee72c237a27e2528f08b167dd214ed338cb451de09e611a9da1445c53612ff395f889d3e251898bf608e81d47a417a8fc30a27ad972d92a52192560c5b13dfe212bef361507ac58ceb76129304680f56851598bf5b8c757efc338aefe4f67703628b981803074dc099b2770357334e60b3e5eff020c96e670b90dade848ee2db48d962ced1a5206029d36943a9b87bbd7dad644d81275ca7450dcc382dfd264cdeb3c5f74a41f54ce4c4a0f03635a12aeca097b62439bb6de9dc53bd9971161c3886f1ae7ac3c22d01becad7a12936fcb698a8f5cb93d2936e3ed2dc61fb1ba78988c4acc472ec67893dbe6e25630d0fb94a5337320382bdfaef95cdd58350a6f749160b160a91e2f952424832d7e941158db62ee3b305ad6ba0326fc5dec47b35c6c53b093577eff24d57a0e7ee08a58e14fdf5654e43a92b25ec6bb0a89fbb223ab97cbf259fb1c604b66a35612d701f0a36ac3d0f416f255aefff78f039932fd3f76ae9854d44c270ad85cdfe86c360d59eaf6c64bd9a7e5041195e0e3f047984051cf327fd537f4cddd5e5ade33e2080fb2a8128091b862805551766874dbb149f1e2796b0a40aefd08e801da5f4d9165d884cdc20f0457c196c76ea6b1b2e6f9b4a8ec2f05c4f451d24e558a6b79b6e1a80b07f9c7384d7f0a29f5eac68dd482e86548c8b10f417331c234b050bfa006b433085871ba076f0e9b3bab79b0d5737602c3d7e95a50d4dbd67142c412eadf99133afe9a350f4ef619f5ae78c165f08e881288fe3afc2e031ba4e16ac2a3c9a8e8d7fb98343437b46d863d137bb8f586f6c24eb66da608139fa8a7512484434f6de0bf9dc68043f6c8eb7ad1be3e242d92a633832fa3cd7c1136523c54780b20050fa2e28590836e398cc37e54cfd13c3c704231e29ff24bc5ad89d020ea1319d4985cd1fe5d55938e8c590f5fc13e14ba446b5f49198bb09be27bc0d6354d3faaa9c14add795dfb484f7210880712e61909a9cbaa3bc80709fc44b1e001e5fbc14fd2afcec2a24a1b3c733ee90fd3deb26d1e0c547ed1a995a1b1b2a164196afaeb133d01ec150601a4997e3bfbff7b68526d16cdf4166271e55e4a33ca50d5b9ae8ab6771f9cae72e7e", 0x1000}, {&(0x7f0000003440)="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", 0x1000}, {&(0x7f0000004440)="9535ec4b5d7956dde79a1a6779a273f3b91eb9c695dcf9df9226c3ec93c22e87dbb1a8d9669ba4b215d35bb10bd38b373b36d6bca6ab0bd1c699d96cd3522208a69e9025e11ac9b683e21b08135b1be548402584a432798113a14f860066dfba98a098213c4c85108533f42a054f82abaddd92789675db62c4509a93c326", 0x7e}, {&(0x7f00000044c0)="1b8be6f72cb3a2c4808186ac955281c22b44a07408383b2465e1ca838e2b7e80fbd0225d380bdaa0396958225807f34119a31506b902e0c15226ba55f741b4ec67b3017e9e85aea6c3ff5d91beec008c5846f060b2636ddbffe535d959196d38548dfbf02ef3eea4ec0e3059b6c3ec784c8ab919f515eafc51cbf035d1f598fd3876674635ba8fe1", 0x88}, {&(0x7f0000004580)="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", 0x1000}], 0x7, &(0x7f0000005600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}], 0x18}}, {{0x0, 0x0, &(0x7f0000005ac0)=[{&(0x7f0000005640)="397176f3e052347b382fd554a4b2854534a770342a57bc10c6ef2690b09f22c3c29a6426", 0x24}, {&(0x7f0000005680)="3f9c6a553a9c6625c99f00cb33bdbdb5efe8905fa6bdb54570f1d88220b36086d86b9b57d95ce94994fb5c05d5e04eb5599a0c335fe77a30108947d3e855006ebe57ab4adc2d6850a5bfb87ba847e0e648b451d438afd65731b86d3aebce1d903d475e11696b313292e61b3b23c8cafddeb2952fe3703bc232f140a02c4ae15f6bf3ad02fa6ff5e3e83229d2676006e3b6830ae5c1343d72660bd5935ecc50be184a1e6a215278ef6b01893632863718e70c04f6e459fad722642caeca30af34743221cbfcfd5a87637c7e80cb", 0xcd}, {&(0x7f0000005780)="b9055a0700e5e644b8e409ffefc9cedf36260c2b91f8f95447c8b3586e451e62dd762070307410b70d9d8f0b4c0626b30aa45ccd6676d1b6d8bae9faad09e931e22ea80a4c383d5b214a1366e3a6b6f639a4d59809cfb3e7be9087b4fff75acf04054f6c41db179d1e7c5b1a93b8a9cd0b0084a3bfb6b060ea464ef5a61e10b9807dd6e0eda3600e509603878f520e3fbc77dd547b51d1d5ebc3a5837a4a48cb8d2aca699be12e0689cd9928280dd353be9e7bb9f886106865ac5efb25183d35168dc3d5120eae", 0xc7}, {&(0x7f0000005880)="723be49fcbc4d49e9d01e0ddd3fecda2448f2f8cf8aeaf98579e93375dd8685b7a288844882a192bf305260173f99114a1700eae67ddefe0f22ac785d0e4d7e09661ab68a90ee433b9d7ca72e18687cc16", 0x51}, {&(0x7f0000005900)="8965f9b62501cb55ea76147746f64461c618026a05f1c43dfc124c09d4410f61df92b27dcbe936d0af8d8dd5d763a0e24e16408d829d5d522c21238820703268a29f45df42bda3938fd82030067b95512cd60733daa310f4605cd1c6ed8f45eb75ba93fa2714535fd9732284aa746d08eb5055ebd3107d54c829ad516136454d08fd274cd68411319741c7c446c637", 0x8f}, {&(0x7f00000059c0)="372981a3c5852bc302e5d26e0976c22deecad1dba173b720f1ac8046502587fc8c", 0x21}, {&(0x7f0000005a00)="037b5f5470e0cc1a82c58513792672d6b0b73504b73bdd305e4d1d35f50da9c109c56af0bf83979df1524166ddaf5bd77661c4a5ebd2b4cdbaef0ed2d09de2ed99bd68b81701b2fdc2b14b6091ef187b0c07e447915d5f743ae04da2af18204654434456789eae787d7b7aad240660ea4bbf141e7779b79f71bf9653c5d348c8e79157120a0c55a3bbc0aa081c9a9482824497e4062d880f390148d8c6510bd4", 0xa0}], 0x7, &(0x7f0000005b40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x9, [@multicast1, @multicast1]}, @noop]}}}], 0x38}}, {{&(0x7f0000005b80)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000005dc0)=[{&(0x7f0000005bc0)="8e8b2415b12e0c7f587d5639ce7efef51f48bbafe973c1b845dcfb4342a2fde5e054c51855d14e7945be92a9d5278695c27edc22493f5d006627b243ce2d726d919152d3a1663fa2266561de087962a2c5436389afea73675c6d9104428b567aee28818d21c85cbe577ba719aa5fc07645a238cbf3bd59abbfabc4a600055969535d87c92a5249cdd9e6f72524609473f5fb486d8f09893c979d8d7620ff2ff0f958df05b2ead6ed8f01338ffc3a06b6b47eb11cadb1f3c636bc05a694d9180c87ecbeb9a63218e9", 0xc8}, {&(0x7f0000005cc0)="9d8534b8fd104db7752ff3a06d000b65ce8e3bd5725ff563cb1fb11c9b189ec266428feb53d629a014fc4ee7caccd786ccb674521a68491533f877cfa2e19b75fd51fd2ad9fe5e3ab2a38605701f3bcc6d7a5b009b537274ddd3729332ebae7f9a8922e4ba8973e39e3886d8ca0f97ea68b108012aa6b7df39f4102ded45519d6dd7c85587c1f06ac5f62611b40f2e50b234f34c731f1a0c8c37014ca9ada9768f2b8f61db8c1fbfc354e50f23f5324cc850d3e1633ccacdfbcdd990c7b5356ef194cbd7340bc614a7bbd6d2901efe6ef4b1e5383476705a9c", 0xd9}], 0x2}}, {{&(0x7f0000005e00)={0x2, 0xf0, @broadcast}, 0x10, &(0x7f0000005f00)=[{&(0x7f0000005e40)="4bdc1e68850ae4", 0x7}, {&(0x7f0000005e80)="e8a2dc304990b788fd6c844334ef83e8b064a478e7e6a3b55cac6e2317a597cdb5708c30a59e2fb256c6607d54507f66d9aa5d7c1091d5f8ec65155ab031a71a6ef68c9bfc5f47485134f0bdd53c65285e34ab712f6e14a131c9c32545f3c08fb64dbdafdca92cdfe5d48a15f0831e980959e400faa36becf6", 0x79}], 0x2, &(0x7f0000005f40)=[@ip_retopts={{0x58, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x6, [@rand_addr=0x65d, @rand_addr=0x5]}, @ssrr={0x89, 0x1b, 0x80, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @rand_addr=0x1, @local, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x1f, 0x634, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @empty, @remote, @loopback]}]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x8, 0x2, 0x1, 0x18000, [{[], 0x8}]}, @generic={0x7, 0x9, "766d1487fd78da"}, @cipso={0x86, 0xd, 0x5, [{0x5, 0x7, "c1602d233e"}]}, @lsrr={0x83, 0x13, 0x9, [@multicast2, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x21}]}, @cipso={0x86, 0x18, 0x7, [{0x1, 0x12, "b6ed45c1cd9bda800c02960ca0df3a45"}]}, @lsrr={0x83, 0x17, 0x0, [@remote, @multicast1, @empty, @empty, @remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0xe8}}, {{&(0x7f0000006040)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000006380)=[{&(0x7f0000006080)="a87f61321c4cefe50d09c95c2823e10467c45af4bcee3eb7fe7b23", 0x1b}, {&(0x7f00000060c0)="05e6405e1dddb491ae73105f884f788163290a009b12412e5238e64c2f04e2103b580726d5db251190026807f3155758fb5ac503f7c402f9af421af7a090424d98a9a3f973c5a4fdd4e37a31cf3cde30b89d68942ba53f054377db16e3feb512f0709b6e6d6eeccbf08d2af101105bc153e02768182048", 0x77}, {&(0x7f0000006140)="05748dfa59312390dd1faf88274631126aba87a7188466300cd3fa85dc88e08cf58d214e80ede69294bc3ca252cebb469da9a9bdf338f313b5effc923eab6ec3c94812b84f61b26db2897e63bf3c8f8c", 0x50}, {&(0x7f00000061c0)="0d7cfb7c18b450b92d995e5d19bd37950fff374229795c3bb57cb1710df384e5d0de98fb134cf11019bb1ab8732942f84c45d988857c4e", 0x37}, {&(0x7f0000006200)="189aacdb1520ba23f5e79217e6fc4d900b580ef065b007b6522cc0a51b92710b2d936892967ed71f5106c7f303861d23774581bf3e44583db58ca6ccf4710c6533c3726760ea6020f89b55597fa39fa58ad15ef86bb4edd4e88a9c9d62379691355ca45209cf532511cc2f7ca9bcf73238bfa567d6ff44d7be10863609cf9bd139aaa2179757a0e05f4d17938389e1ee9064624553274382e27a6729c664802ec94111b56ad051a0b7", 0xa9}, {&(0x7f00000062c0)="f4111e2a2ef0ab1d064d8bd7e0502f3e8fe6ecfab8e88dc902b1d816e918c0692b8274e39db2fda0ee42afe7750603698c82cb7ef9", 0x35}, {&(0x7f0000006300)="7f97c2323de5ef43267cbda7727a3a5274ae4fc823745b4829fa4d95ea182a51d6ca4557f7b43f73c10f789a8499a7ae7121c19a5e3a61a88423380ab9831d9e5eb3596523dec1f40fba247993163485a3fb2e31566cae475536a369125d53", 0x5f}], 0x7}}, {{&(0x7f0000006400)={0x2, 0x4e21, @rand_addr=0x44ad}, 0x10, &(0x7f0000006540)=[{&(0x7f0000006440)="dbb3765d583153fde2be80ba2c6f3811949d387478c5e46e43f0820db163606ad4565285e209c23b28ac5bec579cd218d6892ecdd195807bc599b72799ee7809f01106492edec373df93148f05733b7fe3fb546ca48571411c279968866490289eeaa362fee91abc1a9d1e17a84d2ac0789856af2e79d009ed0157fc0b0a397af6e018b3aaba14af1cb827955a344ea612d664115e535f85b91781cd17b018cf7aab80c8ce8b63b917e3fb31a188bc36294a45bb39f803ade273638f19a7096566c8f125cfb42910ffebe67e9dbd1677efb161b2bc9767d24055336db291", 0xde}], 0x1, &(0x7f0000006580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x100000001}}], 0x18}}, {{&(0x7f00000065c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000007b00)=[{&(0x7f0000006600)="2286869682d6df4605a4364115259345954fc6d70f45d920bfb8f6c2b0c3ed638962ee476f87717f9cf8b7af2fa980a6584d01d96e592d0369285ed7dd6fa85a4f43fa67f1b4290d2879e5cbfb3a330558f3e3258318479289ce6270b4a6eeb8b0216b4a480164eefdd81d4532ebfed9e2169426f7ec8d9730c0a448a79b9537a9bf23f19d62ee665db1f78167f281682472208459f8dd6a57510d7a6af9a23a1e77f56fdf6b183dafb5cfd93be53f2894703b23e8d36dcfb295056ebd", 0xbd}, {&(0x7f00000066c0)="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", 0x1000}, {&(0x7f00000076c0)="e55737506dd269bce9f9ae4c0d9432774aca73fb640ffbeeb8005c5f0f438baf40e1babd6094ecba8c14d0e82e2a6feb24ded2d04a1e8d55f3781b478b4b02494d175832f0077601269dd5f1865ae00251b1dc7d236b3e1e20509a97f9", 0x5d}, {&(0x7f0000007740)="ba3ab17e0b4f68b48876994ba79b5724d28f552d33b1a3c51f4417b0670ba2f2cf1469ee178831b24a3a0204f6837123ce7be88b3f4cfe56ef48686fb83199ea502ed48524aee3d08e9c5f6c9ab14bea828e412c42104ef2a254c1dcc23411e056ea29428df4842ddb9699f3c3686dedef0c383fa36e85fcb5e56566b9f1d22f4c9d37acf1a7de8f73af87d00114eb7a34c2365e8a6d645db8d7f3b4a4772d786ce311ae229a9feb4248e922671b37981e057d68efc6c67a0778922264cacc23d0354150e272daa708160757a0ac16ed019f01e9d147a5d51b908b4fc5e3194d5d1dae6916e461e0d2ace548cf", 0xed}, {&(0x7f0000007840)="aa9dadb4c6b845efed4eafe97cff4e78c376d03a9f1247ef183ba31f2d0845efdb6ab518522b47b5f3f5eac2791bd2c4fa4b7019aacd769c20b938145fc45a4ea5d41728f44a850eea015fb0915a8559ae710364c8a4a5ede9810aa439c163bd3453932060597e386f02b9fc7b4ea6e1614ea987436ab3c8205487044c570f25b08cc57106d558fdc91030ad9d3e68586c373b5e11bebd72624692fd99a4cc3793073bc4c45cc78fb935e680", 0xac}, {&(0x7f0000007900)="30fe0382f0f9bb1d58d9c1dddb193b0e1490d407b9b2ac9dade1f2edee70f9b0b5ced2736699b4f92b7e9fa7b7d0a6eaff069c47847a8330a798a44a9a4c48d800516c12da963f3a35735c638af271ed86b54a9461bcd2d221460a6c11e750027603e1ed1b8630742fe89c9abc7dae779842377134499a0000f0759ab362b9b886d1952816ad3fe5d3c9c4de18ece806f6a2cc1cbb37382269153b01c460610ea866fd0607306b4babacc0f2e50b725dd60b8bef27cf06c2c63e841804189aaf1ef7e5d29f70c90d06ae084e6197d2737870b77bdd38e630d30d3704ee10ef49de39197adcf93788a2", 0xe9}, {&(0x7f0000007a00)="27300e6137d354c27aab1014adbacbb64a2e338e1c", 0x15}, {&(0x7f0000007a40)="6072a72d552c19a28032fdd36cbf402fc50048aebfad9a9d9f102b1b65ffb91795ad37d979437ae6b056dee79fc1061117d41eb1ae11e40561a8a3d6369c3d48392b5912a3561f744bae38c20cc287cb9c47fb9df20c6711070120ea5969c6f9b7fb5bbd1569302cd42c1ee8207c814adce24cab7ca87abeff874ad147ce848753a624420817f8cc3b5f79a6b9", 0x8d}], 0x8, &(0x7f0000007c00)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x80, 0x0, 0x10001, [{[], 0x1}, {[], 0x1d}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @empty}}}], 0x40}}], 0x7, 0x4000050) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r2, 0x0, r2) 09:42:10 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000007d0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:10 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc004500a, &(0x7f00000002c0)={0x0, r1}) 09:42:10 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x3f00}) 09:42:10 executing program 5: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x190) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) write(r2, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r1, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x101) 09:42:10 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000bf0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:10 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:10 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) 09:42:10 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000001f40000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:11 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000001230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x4000}) 09:42:11 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc0045878, &(0x7f00000002c0)={0x0, r1}) 09:42:11 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x48000, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000080)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup(r1) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000000c0)) 09:42:11 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000000)={0x0, 0xf, 0x4, 0x400, {0x0, 0x2710}, {0x3, 0x2, 0x1, 0x9, 0x9, 0x5f0800000000, "151dcfd8"}, 0x3, 0x4, @offset=0x7, 0x4}) 09:42:11 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000004230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:11 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80, 0x80000) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000180)=0x10001, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) 09:42:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x40000000}) prctl$PR_GET_DUMPABLE(0x3) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x4000000000000002) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:42:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0xff00}) 09:42:11 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000240)=""/191) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) 09:42:11 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc0045878, &(0x7f00000002c0)={0x0, r1}) 09:42:11 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000008230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:11 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="3f00000010000000faffffffffffffff0d000000aaaaaaaaaa04aaaaaaaaaabbffff0000000000000000000000000000000000000000000000000000000000000000a2a5bb12d8911ebfaaaaaaaaaabbffff1f1e0000000000000001ac141425ac1e01014e214e20ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000aaf31a02aaaaaaaabb000007fffffffff900000008000000007f000000000000000700000000000000050000003f00000001000000047a0000faffffff84170000"]}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x2) bind$tipc(r1, 0x0, 0x0) ustat(0x7, &(0x7f0000000040)) 09:42:12 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000001b230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:12 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000080)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0)=r2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:12 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x2) getrlimit(0x3, &(0x7f0000000100)) 09:42:12 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc008551b, &(0x7f00000002c0)={0x0, r1}) 09:42:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x1000000}) 09:42:12 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000001f230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)="9a1c544022fc3bcd79e006941cd4d7cbd8616b009a53b1cd036f96a3e1bbef1f9dca48bcea30185f878f5c470544d3cb872b7dc8fc1b5bf975f859f0f9380db12037f32cad75834a0469ff4eb0b3fe4dc21212c63f16189e66f5d780b0c3cb8579f0ec62bd0f32a135fa3eb6c97ec55516c114e49a", 0x75, 0x0) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r3, r4) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:42:12 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:12 executing program 2: setrlimit(0x1000000000000009, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x407, r0) 09:42:12 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000040230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:12 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc008ae05, &(0x7f00000002c0)={0x0, r1}) 09:42:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x2000000}) 09:42:12 executing program 4: r0 = mq_open(&(0x7f0000000000)='/dev/vhost-vsock\x00', 0xc0, 0x11, &(0x7f0000000100)={0x5, 0x3, 0x81, 0x80000001, 0x2, 0xffffffffffff8000, 0x2, 0x8}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000140)={0x0, @speck128}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x2300) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000080)='\x00', 0x1) 09:42:12 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000007d230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:12 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x7fffffff, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) 09:42:13 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x3000000}) 09:42:13 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc008af12, &(0x7f00000002c0)={0x0, r1}) 09:42:13 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000bf230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) write$P9_RATTACH(r0, 0x0, 0x0) 09:42:13 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) 09:42:13 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = msgget(0x0, 0x4) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000000c0)=""/145) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) 09:42:13 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000001f4230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:13 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x4000000}) 09:42:13 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc0186419, &(0x7f00000002c0)={0x0, r1}) 09:42:13 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000fffffffd230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:13 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:13 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc0189436, &(0x7f00000002c0)={0x0, r1}) 09:42:13 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x5000000}) 09:42:13 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="f043504fec3646ff5a60871e051723afd941fe89e66ca12355f4a86d709f9c599151f60aa899780f34ea3f4bdfaced10d3959040d1cb3874b4c24815e57bbdd224070327023f0a780d06240011518953555d75333446062de33d124c19ed07747bb67d95bc0507bb02428a890d21b2da327ca8e5152d4e345be97a22fa22ac405046443b7ff1d4f410d68b94ef6dcfe127ff42f5b2a85fad4ec388258f2c57398a098be393e4101185a8b14ebd", 0xad, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r1, 0x50b, 0xfffffffffffffd65}, &(0x7f0000000380)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861332d3531322d636500000000feffffff0000000000000000000000000000000000000000000000000000000000000000d1df0000000000000000000000bae3e98dff46ef8f6f345b2b"], &(0x7f00000001c0)="7d80dd04e5158be7d6844c907680b9650423c1d3335a995e704e71b76c0d48612b8c9dcb6f66ec5953cb143c7f8eced92a1f4778c0ecf4cec5bbbec7763ca36dfc41982cbc1c6a319cb43ace8e9ae3827562ff9c6bfc37e1eab57978706bb4dbd626b554ad0043d2", &(0x7f0000000400)="7fa67f0a2d9fab21ff78b1f09ed97dacbfe7e7748971123da277c22f93115f729dd37a58b89e8617ea33ab244ddd0563e10502da4e602637a087bc181f258dd7e614463a96a76763b037c8f428716ec41787b11431bc5cf0aeddb01463507bd6191730b1da5f28dac8a39b674c04ed471f0ff8619fe26124976033e86d114e9cf9a3c458013a59baf265955fa1fbfb998cab033cbe90c9b23a2c1ed53835b03c8073a62a67f85e63723318e09cc14170f633b20954922128dc4d9356802cefc1b84f0ce5e7bd173ae32744b6535f9a48e0d8b8085481f7b62d59644d3f7e329811f15b7a71673254c24757628f7caec926165ebf7f") 09:42:13 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000fffffffe230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) dup3(r0, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:42:14 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0xe4, 0x3f, 0x5, 0x0, 0x0, [{r0, 0x0, 0x4}, {r0, 0x0, 0x400}, {r0}, {r0, 0x0, 0x100000000}, {r0, 0x0, 0x2}]}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@dev}, &(0x7f0000000180)=0x14) 09:42:14 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc020660b, &(0x7f00000002c0)={0x0, r1}) 09:42:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x6000000}) 09:42:14 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000fdffffff230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:14 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='+*wlan1/user\x00'}, 0x30) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x2, 0x7, 0x1, 0x8, 0x0, 0x8001, 0x80, 0x4, 0x7, 0xfffffffffffffff8, 0x3, 0x0, 0x4, 0x20, 0x4, 0x400, 0x8001, 0x2, 0x400, 0x9, 0xd58, 0x5, 0xcd3, 0x9, 0x938d, 0xb0c, 0x1000, 0x6, 0x6, 0x60, 0x3, 0x6, 0x10000, 0x4, 0x9, 0xd96, 0x0, 0x7fff, 0x0, @perf_config_ext={0x2, 0x1000}, 0x0, 0x33a, 0xbd1, 0x7, 0x3, 0xfff, 0xf27c}, r0, 0xf5, r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x80) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000200)={0xbf0004, 0x81, 0x3f, [], &(0x7f00000001c0)={0x9f09df, 0x2, [], @value64=0x6}}) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="002000001fbdc40a41a9a9cb83bd9ffb28103a907596165e67ac427c0ca72a9b5c10"], &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000002c0)={r5, 0x2, 0x10, 0x4, 0x7}, &(0x7f0000000300)=0x18) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x501400, 0x0) fcntl$dupfd(r2, 0x0, r2) 09:42:14 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000feffffff230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:14 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 09:42:14 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) fcntl$dupfd(r0, 0x0, r0) 09:42:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x7000000}) 09:42:14 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000050000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:14 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc028564d, &(0x7f00000002c0)={0x0, r1}) 09:42:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x7ff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000140)={0x3, 0x4, 0x6, 0x2}, &(0x7f0000000180)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0xf1}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)=r2, 0x4) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r1, 0x4000000000000002) dup3(r3, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000340)=0x3) write$P9_RATTACH(r0, 0x0, 0x147) 09:42:15 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 09:42:15 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000001e0000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:15 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x78) r2 = fcntl$dupfd(r0, 0x800406, r0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000000c0)=""/126) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000000)=@generic={0x0, 0x0, 0x7}) 09:42:15 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x8000000}) 09:42:15 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc0305302, &(0x7f00000002c0)={0x0, r1}) 09:42:15 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000001f0000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:15 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x202400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00', r1}) 09:42:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) fcntl$setlease(r0, 0x400, 0x0) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'batadv0\x00', {0x2, 0x4e20, @broadcast}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x326, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x2, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000000)) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f00000000c0)=0x401) 09:42:15 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc080aebe, &(0x7f00000002c0)={0x0, r1}) 09:42:15 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000200000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:15 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x3f000000}) 09:42:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x2) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:42:16 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000080)=""/47, 0x28000, 0x1000, 0x10000}, 0x18) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:16 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000210000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:16 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000000c0)=""/153, &(0x7f0000000000)=0x99) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1000000, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000180)={0x6, 0x24, [0x351, 0x8001, 0x6, 0x40, 0x5, 0x4, 0x6, 0x4, 0x6]}) fcntl$dupfd(r1, 0x0, r0) 09:42:16 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x40000000}) 09:42:16 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xffffffad, &(0x7f00000002c0)={0x0, r1}) 09:42:16 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000220000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:16 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x200000, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r2, 0x0, r2) 09:42:16 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000040000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:16 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xffff, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000080)="20f9a20af2879d233cb03ec680dfeb10467c06b34a1acc1de36047516e3f67eb059968d43698fec79415cb53b09af5adcf9a9a02c303c10310a86fb2c6883a4cf0be9cae0be939745da7f278ef6ec51e4f6f96080edc33085491ccd464d8e4dc4b376d21ef1563069b1152242ea9b6990c8314f928689c4d0d721ef515b58d4c2fdaba893cda65bc340759406fa528cb0ecb8e3d7aa9bff080312997532b69cf97b7b9ec13f67bf8b06e21bad43200191c5a252d160e5427aa9a9c8b5e43a25844a97336268a5539146679fa9def36da0e22ade1633b25c44c939c479e3fcdd1b9426d0802d5cb685a2996bec35354cc98c34fb68a40", 0xf6) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000002c0)={0x0, r2}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x2, 0x2, &(0x7f0000ffd000/0x2000)=nil}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000200)={r3, r4}) 09:42:16 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0xfdfdffff}) 09:42:16 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x2, r1}) 09:42:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000000000005, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xcd5, 0x0, 0x101, 0x100, 0xd, 0x8000, 0x18e0, 0x1, 0x3f, 0x3, 0x0, 0x7fffffff}) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write(r1, &(0x7f0000000100)="bd", 0xffffff17) write$P9_RATTACH(r0, 0x0, 0x0) 09:42:17 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000080000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:17 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:17 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x4000, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x2d, &(0x7f00000003c0)={@remote, @broadcast}, &(0x7f0000000400)=0xc) setrlimit(0x4, &(0x7f0000000080)={0x4, 0x28}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x400000, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000380)="be1b30e565d9d65b3ee661ce8bb9ec11", 0x10) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000000c0)={0x80, {{0x2, 0x4e23, @remote}}, 0x1, 0x3, [{{0x2, 0x4e20, @local}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @multicast2}}]}, 0x210) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000300)=0x7) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) 09:42:17 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x3, r1}) 09:42:17 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0xff000000}) 09:42:17 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000001b0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:17 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_ifreq(r1, 0x8992, &(0x7f0000000080)={'gretap0\x00', @ifru_settings={0x2, 0x0, @fr=&(0x7f0000000040)={0x200, 0x5, 0x4, 0x100000001, 0x0, 0x86d, 0x101}}}) 09:42:17 executing program 2: setrlimit(0x1000000000000007, &(0x7f00000002c0)={0x4, 0x8}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1ff, 0xc0000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", ""]}, 0x2c}}, 0x80) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1, 0x20000) r3 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast1}, 0x5}}, 0x0, 0x1ff, 0x0, "97ffeb12f9ae2dcaaac36960f33438fdef2f9a8c0a0bf3b7fb03c9b95917979015fea190cd5d955f2eed3d087314a86d33b0a2072cf3ab76690a73f4ebf1d1202e2a0461033f0168ff89bb9b49ac73e6"}, 0xd8) 09:42:17 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0xfffffdfd}) 09:42:17 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x4, r1}) 09:42:17 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000007d0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x4000000080020) write(r1, &(0x7f0000000100)="bd", 0xffffff17) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x6) 09:42:18 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:18 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000bf0000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:18 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x100000000000000}) 09:42:18 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) 09:42:18 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x5, r1}) 09:42:18 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000f40100230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:18 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'bond_slave_0\x00', {0x2, 0x4e21, @remote}}) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x3, 0x78c}) fstat(r2, &(0x7f0000000180)) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x101, 0x30000) ioctl$PPPIOCDISCONN(r3, 0x7439) socket$nl_xfrm(0x10, 0x3, 0x6) 09:42:18 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x6, r1}) 09:42:18 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x7, {0x4186f2d6, 0x80, 0x2752, 0x5}}) 09:42:18 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x200000000000000}) 09:42:18 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000001b00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:19 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = msgget(0x0, 0x4) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000000c0)=""/145) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) 09:42:19 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x40001, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000080)={0x0, 0x8, 0x1200000000000, 0xffffffff, 0x9, 0x1}) 09:42:19 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000001f00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:19 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x7, r1}) 09:42:19 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001600)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xf1b8) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000000)={0x5, 0x2, 0x41af, 0x61dc}) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x80000) syz_open_dev$adsp(&(0x7f00000015c0)='/dev/adsp#\x00', 0x7, 0x80) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001540)={0x0, 0xffffffffffffffff, 0xd7, 0x8, @scatter={0x4, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/114, 0x72}, {&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/150, 0x96}]}, &(0x7f0000001300)="19d7ace4b391fe5d37e7005b69440ae09af7d03b17fbd4dc3a222061e754386023c6e68a627b8fd04d139baf152e5cd203b035e73039b829cf53bae30cd6206441a7cde3d3f9ff5e43884b154cf45defcce2625a25a25ce6b6b5bcd749ed3d127beea492f34122c0d5d08208bcdaab5cf9b6b55d4e69f86c7163113f61905f7a719fecaebef801803a751cac3544b6cac860b185b08c86b4ceb2072980fa6b0d5b713f50e9078087b9d5ea8b00cb2f64783a88604280e0a655da34003e69fc466e5e0a8c7be0e9b1b82c1c9c59d0d26ec94bcb413e9eb3", &(0x7f0000001400)=""/218, 0x6, 0x2, 0x1, &(0x7f0000001500)}) fcntl$dupfd(r0, 0x0, r0) 09:42:19 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x300000000000000}) 09:42:19 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000004000230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:19 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x48000, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000080)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup(r1) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000000c0)) 09:42:19 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) 09:42:19 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x103040, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:19 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x400000000000000}) 09:42:19 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x8, r1}) 09:42:19 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000007d00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:19 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/anycast6\x00') sendto(r0, &(0x7f0000000200)="5dd91492953898948ffcd08dd7270a38c0486d56cf9c4838e17e77e8262a8a784fa55f74cd4635a9958161c042b4471767df5d6cdd4537acf238474c8a46d4d94d154e08a71d69aab94eb3e94cba44bf6614b059da16eb8ac3709888823e401679b6dee824b0841b39c68d2ea8b4e5adfe508bdf301ec7e6ea6e7027d2cb719901c0a74b8bb7c1d7c041c3924aed8e099b5467f34e3d3345", 0x98, 0x40004, &(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80) r1 = accept(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f00000001c0)=0x80) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x20200, 0xe7) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000540)=0x1, 0x4) pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000440)="7881c694a727f1d17b5fb15928e52b0285b48cd6ec828345f1bdc7743c2af1997ede8fe4bc1fb002972cdb7a3e718c1230a212cd078af1899d8857ab8cee06d17694b987fa1e379a94e20d88eff2db70e4ef96e3852af33acc25d654a022900a54190fcb9e5ed0f290328609ffbab3c08e767038bdc17a7ffcf3e636e6f337e2cf17a60650fbcf316f238f92480b56bdc12df6e03143be5d514ba3715f69d84c3bf3033e505f390effef53c193333cd14019dcbf0e94", 0xb6}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000003c0)=""/3, &(0x7f0000000400)=0x3) 09:42:19 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200100) setrlimit(0x9, &(0x7f0000000080)={0x4, 0x2b1}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0xa2a, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x801) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_wait(r2, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0x7a) 09:42:20 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000bf00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:20 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x500000000000000}) 09:42:20 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x300, r1}) 09:42:20 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x6, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) fcntl$getflags(r1, 0x40b) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r1, 0x0, 0x7, 0x7, 0xdf8}) 09:42:20 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:20 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x48600, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x8, 0x4) fanotify_mark(r0, 0x48, 0x8000000, r0, &(0x7f0000000000)='./file0\x00') ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 09:42:20 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000001f400230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:20 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@rand_addr="08b6e782dbdab6159314b54ab357c97e", @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xaa7c, 0x20, 0x20, 0x500, 0x3ff, 0x800000, r1}) munlockall() r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r2, 0x0, r2) 09:42:20 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000260000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:20 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000400)) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="c9b1d39c9c3c32a946a4673af79141e524254c50945d17d1539a10e79b41e97e9d58b61e7c274a6288b5476e158d823db35facb6e4ece2fd8cabee901b01779dccdad43ad2d06d58f4ea391f3bf58fdedbd60861d4d708753ac2500fe0b76c8d39b7200725a6e6f3a996903afd8856a648f2953f065f9662473ac9255b68b47d1c9dcc6431d7e9bb98123710cd906dd780b849f509798027051d0c73a0544a8ec814919aeedc4ff9941f9f23af482ed87fbd0041d9a25efe4eabde86a403a9bd221b8a137d85c8", 0xc7) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = semget$private(0x0, 0x2, 0x1) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000380)={{0x3, r3, r4, r3, r1, 0x2, 0x4}}) socket$caif_stream(0x25, 0x1, 0x5) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000440)={{0x9, 0x6}, {0xfca3, 0x5}, 0x0, 0x1, 0x7}) setresgid(0x0, r1, r4) r6 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0xffff, 0x101a00) ioctl$CAPI_CLR_FLAGS(r6, 0x80044325, &(0x7f00000002c0)=0x1) 09:42:20 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:20 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x600000000000000}) 09:42:20 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x500, r1}) 09:42:20 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000ffffff950000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:20 executing program 4: r0 = msgget(0x0, 0xc) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/4096) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 09:42:20 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x100) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x1, {0xa, 0x4e20, 0x8, @empty, 0x4}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r2, 0x0, r2) 09:42:20 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)) 09:42:20 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000001f40000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:20 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:20 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x700000000000000}) 09:42:20 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x600, r1}) 09:42:21 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000400230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:21 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:21 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e21, @multicast1}, {0x307, @local}, 0x48, {0x2, 0x4e20, @remote}, 'hwsim0\x00'}) 09:42:21 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)) 09:42:21 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000800230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:21 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x800000000000000}) 09:42:21 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x700, r1}) 09:42:21 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:21 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)) 09:42:21 executing program 2: pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x480, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0x9, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r3 = msgget$private(0x0, 0x200) msgsnd(r3, &(0x7f00000000c0)={0x1, "98973914f6e3ffaa78116bb982b5cac805d7a1bb2e29237446b8696ed401cf13b45e7696dbf02d25405188af29d0e451ecbbe66147f6d076ba5821def035b9ca16bb65975f26c007df0d884cbfc38494352b5979cbe2644502ca30f5624a36a988239e262d561c77d001ca7ea832eb4a91ae3a820d92e56c8ab6e68e26d91460ae56b27da41c2b46696d8bdf9486be4e4cf72e813d59bf3b5b30b8865694ca08019f190b2989b2d2e898c533bc1cb918e39aa4064650d9e1e644c31c19eb516aff6ac041db34219e298538e93268e69cee8cb3bfcbc1256b8dc85f8c5c96ffaf32487a8765a0b5be151572cd749b"}, 0xf6, 0x800) fcntl$dupfd(r1, 0x0, r1) 09:42:21 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000001b00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:21 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x18080, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r2, r3}}, 0x18) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:21 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:21 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x3f00000000000000}) 09:42:21 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)=""/200, &(0x7f0000000300)=0xc8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) getpeername$tipc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r2 = io_uring_setup(0x68, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r2}], 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$dupfd(r1, 0x0, r1) 09:42:21 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000007d00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:21 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x3f00, r1}) 09:42:21 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:21 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:21 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000bf00230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:21 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x4000000000000000}) 09:42:21 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:21 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={{0xfffffffffffff256, 0x80000000, 0x3a, 0x8c90, 0x2, 0x1}, 0x5, 0x5736, 0x0, 0xce, 0x1, "94df27f0824d0aa0aa08106ae364de5b58a21c50c252cd41f758d01c1357f5479a683f2ed92017ed41bdd749335f6cef471fae8c3d7766b3a5dfe088f8017e84fafaf54af794425945044d9203fcbeb90a6d137591f210822a1be4d5a8608ce78d3594c63e31ced36653efcf12551d532697781a24586a6a81001ad9fae2998a"}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000180)=""/46, 0x2e}], 0x2) fcntl$dupfd(r1, 0x0, r1) 09:42:22 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000f401230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:22 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000003a00)=@assoc_value={0x0, 0x3a80}, &(0x7f0000003a40)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000003a80)={0x0, 0x8}, &(0x7f0000003ac0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000005180)=@assoc_value={r2, 0x445}, &(0x7f0000007580)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000004e40)={0x0, 0x7, 0x9, 0x9, 0x8, 0x40, 0x1f, 0xffff, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x1, 0xfffffffffffff95b, 0x2, 0xff, 0x1}}, &(0x7f0000004f00)=0xb0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000063c0)={0x0, 0x7}, &(0x7f0000006400)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000006440)={0x0, 0x95, "e95c2d6b4075f67964dea7876153bcddbb470dbe3e0713fdf9b3e633a69eac22bad21ca79ddf3a0bc31c67c629434fa003876326e793055abfdbd7be208fdd606f8653fad8c93aa9df22dd7dc9efa183424f274c6bcd0f7c2509a9b8a9c729eda29089a90250ffe07e8eb4deb82f2264087358720b3b2976e86c0356933c8e2bca597016ac8175397aa0423e371a6db8a07d7770a3"}, &(0x7f0000006500)=0x9d) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000007280)={0x0, 0x3}, &(0x7f00000072c0)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000007380)=[{&(0x7f0000000600)=@in6={0xa, 0x4e22, 0x9, @mcast1, 0x8}, 0x1c, &(0x7f0000003980)=[{&(0x7f0000000640)="9e79798b483448b48170f60e3589dcebb99da28afee6da1a74327183fc0238ba4f45f62e6b517073a45e5eb3c0e48412ac1f6b61d577a0f59780418f2750badba62b4830fbd3650cceda1aa90bcbb0a27c247b9ca49e985b712b66959066c8ee1a96a9c315869505fec5769ffd2aab340fe24584fc31419ef42418db1b62226e3ddad886a2754f245430218d8cb29ee677161e29c346e4e943dc14edc10c9bb42a22dd89693184dac3", 0xa9}, {&(0x7f0000000700)="5bb0573560ceecd5855d05", 0xb}, {&(0x7f0000000740)="e85f67a2213e92616cbc99c15691a6916c990f6d287994a53e8c9a13f8a39c7c5da01fb8ba7fa2ac0fb48b6202e308edae72fefa8c98355f52485de7d8bb0a341e3a4404cad2737385c2e63cd63859e8e26ae22e7ba123cf2561c161fbc4bb7b70e9b703019b262eb37d18b7c45e1eea1a1b28527e23613c280e8259eefab8618c30d9d0a3e32df8675ad8069cee2a69489ab09659161759a68677eaff1056fe470a5415c9f0c16f11c5cd62e8755c26b18326351004a845c01c0b29c1c788407a8e689a73d498ce23", 0xc9}, {&(0x7f0000000840)="8a4e2dab144fce8a1fb5d6c06d20208dbab144c4f80a80faeed3da847a6f2d619920d4f93c86c95dfb0cb1309de4829a6492b3e891d8ba4bf08b539622febb97fa64a81bb627439d4c83d4fc30c1b103f40d8b1341d137f489012726b5ed20b2e3bf", 0x62}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="b9888b639cde2a13d7b81d1e6306f5542ec53b70cf3d791a44711897fe5419b7047f31aa0905d6ba3f6b83719f169280f763461c9f4969bfce1b8756ea1bb56638361845f8a986a95f22926e8a9b2e172e803f688d15a47f4def3f9ce5c84a258250facce18d94796ef22e9bcedb24945be24422ffa6694f0f9c97ea8e2475d832b842ef8f6231810a63b725ef2567113c715009b0e90831bf8280e91a1fe7bae09da65fa2e1006207c79845007315fcde036a", 0xb3}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="cc5313545c7003cf71409653682726796ba689dc217cc28c6d989f80e73ccf3d9a2d71b56fe390272a727ac7113489235cb5f7933a3caf3e57afc714f2ffb398f59d9429cc0f26502a5c4659dbeb87add2387a9cd16de36eaed53cfe5e0cff5c67cf9c2055f8d5d2637b043d4d98bf40bb1c16f37cef5817e94b7f008151ed129c4a6536f7ecd1245c28539f51f60ee95154bc32e29f72fe8e75a67b2fd6b2e262682c6786e7fc47d69cdd7ea46d588d629d4c1f8b3b0dfda8fb8459778809f6d479a64069f868da6211d0449b4228f9a951d310b6c2911269b9ec8a39b43645b2baf502a9d4875427c59423e2a2eadbab89c28fdda4a8a6ef56b30ba7a55941ca66c3403bad264f89dd7875817bbabcd83e3b26b92b70b3e4462ced72d2956898fcd9098ba45073d43be57aa31da144386abd4e23bc1be3d798d12a4a368c750eea3a285a2dd09acb0b2843179400cbbfe98455def474ad111eaaa9091ab8130367b89873c557a6becc2ad40ec5b9c506e966ab42ff17d3968e65a9b651ca1de12ad9f2d901962197aba167bb5ed24ce01241b485af9940a1dd3c42015fac3da5406d6a6eacd2a068622e85fb306e43a3cc75b290f3ae73feb3d1167631c46324cf2e28e6b610b8e8cb4c1651b210551df7833efb6d7da6decb1b543a29b993d41c321af24a867a922c7b86942a53d78330c778cdd4ee641bddc5516686ae916c5b745ae2a73c62dff74644cd1cf0d560d00c7b5ada5e3aba5e0aa0ebbc96ba475342ee53168c575d9a39e65244dfa061f8420593108c22e73a272493d2fb03382ca389bb12bd09e1494657481fe5998feb73f18364fff74f9f6c6305afcecc1ed23ee0c5e2c3e6eda87213d02f9324b98d44d9143551c43e5d4c1110dd0353f3789ed58ed3274145115677dd407426d3d9bd132f893fedd15ebf93676ef7c7e9753b0ec4ac00c39ce837172d880c7f751fdc3fd8511b8175a4608c92fb8dd61340eccaaa66c612ee02f11eae36727f803ac3aa183ecef90468ccce673ec4aca0822e7b2acc91dacf316b6d4b49130be7914e15b9654914ef39a8aa5d470db640b0974d60ca1cc401f85b6abfbf14112fb97a0095f0a5e55e6350becdd713c44f06117573c2b4c14c8ba2a6e214b6400c1b63f9b0e428f6114925739b898a925b57faebd91b64b4e87b5e09c77daea78dfabb812d63b8ad609555eefda260b0ff532caf9eaab389d5c714eddfbf6ca70a5af9f70b3595a72d1996e4e566982c219296cf7e65a926ff24d8f02fb1223bbeb0c6c192aab6feda173ca0ad6ab583110d021841ff230bf9faa2d728673ab7b16dca1a02395911e246914031e69b0fe72db74f052ff7d94d9f796f524bc194bf79eb2fcac1395da054aca870795353aa5a2c9cacae6065a5a5cf872c3a8ba5bfe136b32bc40c33b80b736cccf886b84c54fcbcc18c05b1771dbfa4dbcb8bb183b56228410e3d1a78d30fd29c832338e15de160b6a6a98db0aa7aa270dd2c30bcd2440ce3f169928d68dfddd09ca78a5c3e355644365ebb228cd0ba9def610ec222d0c8bfc7807f91aecdc490760f1a0201549e286ac698a4a7d9230aed78c0800bce8689fce56ee7df6800aa757ab4fa4d484d0d988cf2426700e929c507fa2463972adf0a88906127496bc32bb55a68613982d44fb49748216e84bf9303456f85fe857c40f773aa655da786f633598aef4e90fcc61f46b955596270c50b549c2b07cb8557f3363799b18a4d569eb40c5d4e7a02f1037f6ef6cb89e8e4a0262d676d5b26ec9c32c4653936f62402741bfbeffa5f2b87a91cef23a1f5d877fcd72894d40ddd0e7b56d7aa519f69a29ef16f800c8e08202c1d6af1be080e03a372a408f99f85a0adf57c78e1e1358accb2ea4e6fd875cb38c4f8d52b26e3a88f1cab54efbb8d4b4ef4cb372d02aba5a1be5a703093db8c8178ec188c83a4873ed47d01ea8fce4f25fcf565a6fa1db2c7c6918141493dbe32f989864a1460b686cf5d46f932368e9d3c68da9c72b45763511f4f704543be700bbf3110e971d2425524e267e68dfd152c9d0f6c26204302989b349c302fc9cc3bbf533c67f39d3eb384e759c5926e4d60503a3ec909f12ce733fa85312e7df35b0f8ae03c6f915d65d31fe025b9f0de96aa9779f39d68b2342f7fae5b4af7952c663c619d30dbb3e2e515f233b93d6aefad30558891e75e2a8f78990405b65b1ad047fd9d61fd6218dc9f4acec765c181c91261375c62adfe9e41b4a7ffea4553c404a51c6cda49aee89e7933e5a984443865a123ac9bf4e41967167bc13fc26bb36f13f98d5c28562083b23ed1f5055488bfb40fa7dc699bb5ddb890385b00cf7697d683274e6f9a0b9d6433b2d04b9ad96756e6bcea13c404b48a3091f1b12a0d22788bd3c31a8521e80f38c5c3501fd984c287f88cd544a9c20bd2ac25a1bd06c01a599ee1c40e6622bd99159eb0aca4c0fdb2e1a7978cfcd1f5f15285b1b560396304d00315907e5dda90b9bede1ba47a4d0bf1caf9be9e56f330d95038ff042e570df6e3d73732b5fcef52bda2fb890ec358d18965a3307512b953fff7bf490fa01a93e68489315bfef0f83bedf5cc5a94533b160abf6656a23cd246d3b84d52fa46d7838f156bfa67a14431afaa8cfbfac91ee1f5449ee3fda4bb8ec57367da5b799aa9731d78ee75f3893c959a16040f7c9c2c4e98d62d11ba5ffe136f4646c7c3134a4e0ea4ae7d3d30e5517d4858780b0df40059e87b76daffeb94446f048d398f4b07be19f36f177bdfe67c623b252331758175f6527beac5473c3d376508660e366052469352d921d1219723acbb380c65a8558fa86bfa5747983a32eed45d696776f5d2f6042b7ff0c2198ffdab185c335535e0efa31e4e2aca9e4cb564bede341f1da1063c802eef7dd60f70557751f97b736bcfe52cb81ff9624ec675b6f5103dea8a8a3ba527a16047f988d9aa0bc0cdb784b68c2c6deb96fc7fac9604e4997bdedf477c5b2cb0dc7e4fc64698ae89b7bf951a55b199d95d16e6ee982aa4d2c4db5a9017b6e1267e72a4bc62ed61f9d3029511f27aa9e55765e113a17079fe442a3821fcd91f207fdc81a87d2325c048ed5059567c2875391581ed74e5e657a2e9f761af5c83832fcdaa10273ad5832f20262f6f30573d4b99eb7534b3805acba2f8a8904de0ca9cc4fcec75af4378d2152fff248a3522a1982ff930e3867b00b4f3f4db1dcba3e171a188d591487d2c7ba95d26951d311acf3c08887fdb76b9771def2769e19f49a3220e3c5c4ab379c9e0add8e8a6cfac839729caf3591508e1952868faca68cc9d224c79565d8d9c39bb7f7b8d2ad956c1805d8ca9ae21504c155f4645eb4c063b77ccb888cede581a34d37855ac65afe1ada7d43d7b86c1e9749109a86f3bd4e724aa466ab40a76f4516c4a6ab6d8e5c78245d7f6d3e583055d9402eab597da23bf7667dd8784beab81da5dce20f3d9cc2f7cef55a7b5d6b4e7b8fa9aaed820c6117bb693c6dc9b41cdf5066bea48f797a8068ac2e348a0a80e9b22f96decd8619efaf1d0dfcef2a2d00a62f04bf439e30ac3b088fa928776c4ac3d5470869fe9f0a7043ed787d5e82f69ceda095fe850762ec264dc503b456f1974a27403ad7c0a622bbaf45decb0c999daedb01edc81082b754a93ab05bf5c3287fabac867cf305262d759016a97890023c04262a2ff8cf7a9e3bdd4836f30c0abfb7dedf3e6be2b76e8dd0356303bb97d956fb6eb53f0db8b96bcedfcf9207054a645293bbe52021f2537f6f92cb959bdc2c8699e23ae99603c7bf2f4017f8c11710b161fdf505befe3b6a19d08bbeac170d64c945ad0567a4c7602629df2fd358a7efd71299375149ddf5e746bcf3d6993740cee07b4aaa65b668ab7f5d1e4abe89169bb9b540af3ebbcb74b36b90115cbdfc452b975406b6bce23f92bc4cce48211cbd0bb8c88e7d649437fd7cf1b2966caa99c21d6648dea967a71cc4adfc5515d382d92619e6997e80c706274df49cbe0c09c98f23f15ac14c000e4585ae6bab74de2d86d7edab9c366c035bf80bdbd1c5b6096c96135e9535ab55e8c641eee6424d444886288f260e9502ccc5655c82c98bd2fee47ab525f977b742063225f34b8590e622c38d64935b7dca7f959fa76f2add2e81df6783a3fd88e542154872a9407c06f28efbeca172cb080fb1a3c4b62d8a03ddd059d0507edb367022facbcdc870b2788de482acf1c97706b53e1ef2ede1ed068b39024a048e8fcd9e5d9cf48f412b1fb145b65dc7f09621c4f62c177313ee02b01c6d13fbca9cabbebcb63bae7122fdd1df2ef8dce7b05219b0476ea98ff377bdd8e8b1ff8678fcab6d83eea6fad9c8cf853c631bb3ec2504ab09a54cfd598ec604ce088b47ffd96d9b6b8b8213a93e310f47b0763d0efbb4a32aef030ec9b1e07d44b4adc85e2fcd52d43bc44513ecda00d702842e5c75a3f274e4c754a734ac764429c2fc04541f8cacbda15c7911a01a0b04b47450dfa50d37d103a6239d777cc814ef5140f2ff314c3ddc2de254bf55079a5d7628e78e297eacd9393b7190bad934d875c702cf7982a3e4896ccb4c5e3a15c38286ce4989f62a83077e7b21e9b3626c83d08c411990b2bed3121f08dea861dcc0142b99bad436d6ca3ab1238904d5addfe96738e5b79e156819ad00eb7676f4878948b2cc117f714b868a92994f4522ac1793bac1901e7132b754b19bced008ac7a4f95e2ae42cf1245743e85ede7e278d226e38db1a55f023e08bd81c042cbf6d801362b87b0a71977afe4fdf187532279dd33e5bfd7facbc7483f45018cb21aca00c629fd7e0dd1bb6cbb83687e1f58dc48dac9c5f7bdfd6e8dce2af70b3fea39f8f0dd88a68720707a6c61560b0309f9ff3b507205fe9a7e013913a324284b495ccec107023748b3f5a3448aa2f0363c6ac6647bbbe111bf63f0b6b97e37953b2c5f42330e76e36dd7706257a1dd0588b8e43cd58bcb692a3208967d1ed03703662bf888bb9fdd54f1768c82a5fab21239741c6424a2edbcb9bd002a7790a5ef9b0b0d9bd5181945e9f6e14bf5422af7ac438e89e9f023b4046f2536311ea9b2dcd1d9b47e006e49429db3d5d36e987a18ad32e73d93fa3206c9e4e3a5d8889a971d0fa524b93d04fe152a95cc0d689296bdec572631da17498f13f6ce7f0374938d7b446957fe338521280701033b17756e4a18a468d7aa8ae1f7f674220b7dd0e3e46f12f5178c24928c3382433fc397846c591aca206ea179b421cc4811f5bea2564f8514c84c6e7e8dc850fc866b16af930cdb574b259df68a570ed14cbbd06d4b59330098466bda44e08c6a3bf94ab90c0fd45aeff50de17b671c162dd52db61c0dd921eef6a1bec0ab6c601129f2a7682664d9722214467e26d01c13a99062e2b94d5dee5f4d749634f2fd57b8af048da1705e74d4824820f70f77c8e9313639b90ce16eaee5ee2297a2c4ef2603f6628c7341227d42114625a29372b403d38169cdf7cebb558fceba8185c1efd37cc4adba9cd2da15e99b918a4386a15552df6bc871b854b9e2de69197a96a73f552d99c59c1f52e510fff80fad8d7aad580c9cd7c6be5bd900cfdfe8fcf422616ea589be15331049a662ceff792b30f9c31c1d003431d053af6b3b74eeb1ef2994623e3a40dc008ba3800a8a7bb6872140ad010abd02a7e1116ef87667ad85969a333307307f161486c1402066a434fa2841a28704cb5a617f37867a16102d107e3821fc63aff02fb551f4d3a7b", 0x1000}], 0x8, &(0x7f0000003b00)=[@init={0x18, 0x84, 0x0, {0x1, 0x0, 0x4, 0x7}}, @sndrcv={0x30, 0x84, 0x1, {0xffffffffffffff5f, 0x9, 0x820c, 0x0, 0x80000001, 0x6, 0x2, 0x7fff, r2}}, @init={0x18, 0x84, 0x0, {0x8, 0xf0e2, 0x8, 0x7}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x3f, 0x2, 0x6, 0x3, r3}}, @init={0x18, 0x84, 0x0, {0x4, 0xfffffffffffffff9, 0x6, 0xfffffffffffffff7}}, @authinfo={0x18, 0x84, 0x6, {0x3}}], 0xc8, 0x4000000}, {&(0x7f0000003c00)=@in6={0xa, 0x4e24, 0x7, @loopback, 0x100000001}, 0x1c, &(0x7f0000004d80)=[{&(0x7f0000003c40)="95179e2578d99d917d32a71e57e798af946382ebca3a890ba4393502a4bc966715c6cb7737cd4259103ce8c1bdecf66bdcd36c4b00e7ebd8da2e15a12d01d8bc079c1b8d32b6e5fbfdfe263d238ebbb5e11af32b5791c94f4ba7eb891733d13f12be70858ca3dc06bbbe8f1da2e47f97be4f7636cbd5f8827c7918913dafcba22d3f79e72ca5a72057408240e561f1ae97503eb0af1ed0e9a9d33a2e01461888288f83aa8650501fe2518bc9e7c692e9cf99acaab1", 0xb5}, {&(0x7f0000003d00)="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", 0x1000}, {&(0x7f0000004d00)="0a50e4ad0e1ffa08742d278007e43dff50caf78dd2ac2741c39c69231bcab424e1a454a421f1633c89a7372916f457dd2f263e769577bc1ead966f52cd89ffea0c61b507a2de0b5415209fe0087ff207933bf71ca868714dc85e3e", 0x5b}], 0x3, &(0x7f0000004dc0)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}], 0x18, 0x20008010}, {&(0x7f0000004e00)=@in={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000004f40)=[@init={0x18, 0x84, 0x0, {0x1, 0xffffffff, 0x6, 0x2}}, @init={0x18, 0x84, 0x0, {0x2, 0x0, 0x800, 0x8001}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x1ff}}, @sndinfo={0x20, 0x84, 0x2, {0x20000000, 0x1, 0x0, 0x5c, r4}}], 0x68, 0x800}, {&(0x7f0000004fc0)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000005140)=[{&(0x7f0000005000)="005a16ecebdb13a13cf919b688bfb188079c85921b3ed267764d072b5ea93b4003515ea994b9da09e5c7ff1727ea3135edf346a548994b24b385c8a6f6a2070d42f9edcf04b1ba43d4823bd7ff100856affa943b0864473617fd7f1887484a8103b949f77364d08c4802c224680fe979baf56defa51844d1221fa5e75adf34850550b5cc3bdb22138489aaf8", 0x8c}, {&(0x7f00000050c0)="dc2cc9dcb70e9fd8eaa85ce7ed69f93959e831160e07fd278b6048806140e736ac5e8c2380e8fdc1823811762dc44b4ac2b19a55168daa55f040024fef5c1ebcfbda15af8d0efe0423d284da94bd53aa6215a52805fa27097360d15a7e2c5e9676c70a1bfdb4333ff2a061d60c231a8d59e1a953ab0da977e4260ef0f6572df8", 0x80}], 0x2, &(0x7f0000005180), 0x0, 0x40000}, {&(0x7f00000051c0)=@in6={0xa, 0x4e20, 0x4, @empty, 0x1000}, 0x1c, &(0x7f0000006380)=[{&(0x7f0000005200)="5b857081f0c32bed93d61f12305e5f5c6dfb2ae247ea151b405774cd3866a4776515b88428935e9779a32c3a3b99b08dd9108992e5936e758e92f6d4a6f6e1f15587d3f75e7031414fa4a12fbc250a189bfdede2adab80c83fc70e59a8a792c3b8d7f3b36f4f94910f5443212686327ef70101a96a155e1d9133b819309918a7810262063fad5e6e36ecbdd28ad3f90b08cdffb6e8c32f5670bcdfd6ff53400ab075173e8afe7b2d1dab131617159cd21e6ed9226833105ab1ba6f5d314dd2b5e6c5444dc60c66b87a20e1c339b1dc7a3187938a1c3a86d5178116b0247262fd2694", 0xe2}, {&(0x7f0000005300)="9ab8427d5ad581ed4f6ffbad92a8e1cf340d2a7d3cb5b704e33f8901d700edd3a3a20f9ea2aff6790d970f235b516799e08c7bcc04da1c0788", 0x39}, {&(0x7f0000005340)="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", 0x1000}, {&(0x7f0000006340)="9a15fd75c3ada46e61771a93b889fdf8", 0x10}], 0x4, &(0x7f0000006540)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x0, 0x8202, 0x400, 0x6826, 0x4, 0x5, 0xfffffffffc09bfd3, r5}}, @init={0x18, 0x84, 0x0, {0x4, 0x1, 0xffffffffffff8616, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0xffffffffffffe215, 0x213, 0x8000, 0x7fff, 0xc3fa, 0x7, 0x8001, 0x5, r6}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3a}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}, @init={0x18, 0x84, 0x0, {0x2, 0x9, 0x9, 0x8}}], 0x110, 0x20040010}, {&(0x7f0000006680)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000006a40)=[{&(0x7f00000066c0)="fc3d6467fb47f0edc7ab606ae9d7402777a7eb20d4bb7da49df6b04611b39324b094d12629e5dc70c8af757e0f29f0a70d70d1866ac422e46788aa8ac6626e7ce8c799cdbb95d8a3a4ae8709fae32b54118faac31f62878806c5d191768d85c2ef881d2de722e9521a9720b5a0c0d807869162da32a18ebb9a98319c649d78436b3bd62ddb0e4ec9ab93b75fbd6d0040cc18c62af12e80a4660db00954220944e35b1a8ee36f54162d1c2308f4bbbc96e6452581de518d8041f9", 0xba}, {&(0x7f0000006780)="3eca1a31c4a71ef317c5f08aa40caa9c6f243fa574ff9540ebe649072dda80c666705f7b8dbebf1be5cd2f3721a4bb7a17d7895d37b282e42624bff9b998066bbfcff4e8d6da123cdb8345d2ddb2604f", 0x50}, {&(0x7f0000006800)="f132a9c9ead1f450fc50fadadb27830c3716659eac783e", 0x17}, {&(0x7f0000006840)="5a6002245020d35d8ace518a90481d26b2dad82bcf2955a634d5eb281bdfb9253bf0d231c0a834f4669cad3acb8980d016cad5060b80281830662a2311d323403d8b8c221a9491bb79b0fb153130bec08ef34c6d56c264b4fca34f281bf29a412092f0217a338b79fa1434ee0c477d92c65dfd69", 0x74}, {&(0x7f00000068c0)="e8c0640a2b3943c1ced4d94ca4c30ccc4781", 0x12}, {&(0x7f0000006900)="c913f104db4497d11b2b1d393ffd4a18fa6da31f761827f1c20d6a581012eb0393ebf9335cb671c55dc6cf2f1d02e540cc65d8bc0c93b0e8ca78d2d4ffcafa455cb59b3b7738f70843a1e3cd4e5e03595f9f603cf8d021d877707260477dd037a0b37d9af370e4d4fa9a893d411c9f98c325b6b968bcdcd92bf6373da84e73ce2577415a39d4299847fc226026fd34917ea21c90c50a371d114bfb718213be6d79a75f4f7f14a818ecbce5985c62e49e289234e13b00a2162e822814390521a8c8afcad3874f3f2046cb2963e2a295d785f9e0343f9d1d3d156332353b6768720d827b44cbe7f55e9d", 0xe9}, {&(0x7f0000006a00)="47b5aa0d91b0f6049cc04129bea149bdacdfc791b43f08935f4a67d266b295ea7569240c", 0x24}], 0x7, 0x0, 0x0, 0x4000000}, {&(0x7f0000006ac0)=@in={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000006ec0)=[{&(0x7f0000006b00)="06d5bbdbb59f352d494086eb2039cc3f7eb1931a23720629df965a0f3066e5337388c560b6ba2daed3ed62e3394e5b89d2be446bf3b49f29e6084f2caf91daa199af74490eebf3a834197e3b9596282b578a4490e00814a00e89d2820786e2ca5391392f224c38a784f5fcc43440fe5d98e616b3eb0121a533d4e30a245851785cb59731c90711fa21d584beee41b34b8411afcff6", 0x95}, {&(0x7f0000006bc0)="ee8e624633d8ee24e32fbb1627262365988eb2e67d6040d824243389738f401a29b332332c251fa31f920e18c9ed666a0a670b26908352c6a8b7349e18b506d15762c0f5f0759611810ccf71c74daae6ba7a23d703d965d880461fec6c8267f76e0e9a707f553cfba53a0506e95a323d56ba23639abbcc6ed72768abfc30d3c0a74355bad92d814ad1440f9183b32d1812a0fa643b69a9a7024762120479c7f9f555ef85cc03624d8eae03dc3d0fdfbc6325069a45aaff7dc010c79c3ad0f95d01442c693e2881215eb440b6553dcfe4d02c8bb8c3d4ebba865f25e918ec", 0xde}, {&(0x7f0000006cc0)="84bff60a90f69a980f1e0ebb2ea204738132e66483f8b1b45485b8094177835a695354f68ff531e5788293a3f19bb91b30aa01dff6fea4dd4ceb98ef531d5aa241dc25b4a2d782335df85d22bb8b637a4fb166c5aac73b34e59c4635da3862dc8c7bca94092ab11627ccddb70572ec6ab4c4a5931808cbf2bc0d72", 0x7b}, {&(0x7f0000006d40)="d3fbf37f457fcc882fab08955e0cb34e915b50b03047044e1c2fe4d82344ffbe657391228bd6a83e47b3a20e5d0a9a93cee5eff800c76add774f6d0551bb415577d5be7fc2f5f0a9b23a6191cae56a2c5ce36abf139109e80d5f492a074c16b19d3c7797a673193f06537ceb7d3c70fe429e87304da30b67ffd3f2ce64285b67ae7a2a3bbc1ea8085e434cbfdba3459a99f8de67f845651ac959dd7a12c25a58890dc2aee2783f259161289d94a4fceaab9dd8a4e8eb1eba4dbb2908629cb792a942eeb3b288c1c15135177b0de528", 0xcf}, {&(0x7f0000006e40)="9f061065b3006f694a10e45e4460bf375d5ad5bf162323f0cb17664d46d45a38604b6a0c4754afc3c6f7c3dee7e4617accfaf87e813cebfbaed23498ac5b6861add9fda5c0a4ac53df9109ed4dcd77", 0x4f}], 0x5, &(0x7f0000006f40)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x7a15}], 0x18, 0x4000}, {&(0x7f0000006f80)=@in6={0xa, 0x4e24, 0x3f, @empty, 0x10001}, 0x1c, &(0x7f00000070c0)=[{&(0x7f0000006fc0)="cc9e65280ff1f995839b5ac82af9594efe4d4d629b6a7eda3e68cd048d47655014617f5408575fdb32613f88162dbb27e8ad0f31a685f3420a7a24553943e38352175674794e758e7626c74f0aa6a55fc4556a3f90eee86334fca7b2a9775cb9b821a217bbae145cf48c78bde5a128c5d8659d5aecf0c942e2116c401901fbdf5ea06b9c62d6cea67687737c48b05a0093faaa3376260e9510a15c4d987e8759cb130149d3406a44bf59b7c8d778768420a8c4ca2fc38bb541f901783a2846599ab479a1ff9125cedaef7c261937e747c288b606fea93ed28ea07c43d80a4c", 0xdf}], 0x1, 0x0, 0x0, 0x4000}, {&(0x7f0000007100)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000007240)=[{&(0x7f0000007140)="7c480d465448494cbb39da850ecbc5f82d86fcd69ff54b78007d2a6f1b919168c36e382303713e154f238973328eb75ab1", 0x31}, {&(0x7f0000007180)="eb1bae2243b7ea33721f88941320e5c79a79eab1daa0873bb93c19328340de16957df40a75589ca4a649353f936dcd4a37ce378467cf798a6c3870452f82c723faaefbf43de4b512f2a16305ced33f533346bad00ecc7e10618da5014864dff8742116e6ed796b130bd06008ba071a168c118ac41e8fd2bf957036a4d995442b548d07da75bc25a676f9991b266c8a5695ef4cbdfe7e482900160a281d927067076874a05fb34e346330a9f6524723e4ee44d8569cb0cd5c31b3f42dea", 0xbd}], 0x2, &(0x7f0000007300)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x0, 0x8, 0x80000000, r7}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}], 0x58, 0x20000001}], 0x9, 0x8010) sysinfo(&(0x7f0000000040)=""/38) io_setup(0x3, &(0x7f0000000080)=0x0) r9 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x5, 0xc0040) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000000580)=0x8, 0x4) fsetxattr$security_smack_entry(r0, &(0x7f0000000340)='security.SMACK64MMAP\x00', &(0x7f0000000380)='@\x00', 0x2, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f00000003c0)={0x0, 0xc7, "58206e085b3cb37a3e46ee2baa49306cf0ab0afe3f1ff2ed4930bd49dd00b5851c90a5a93cba2a2a7348133b318242b417c89d492863bf415b5f66580c8eb6f036f36fbd93678393479aea45622070c8e8f36d3c35f40d6350049e533cebb65f71dc9cee71fd067b07f830330dd925e963aff03f331d355312e6119c5ef462ed3fe436aa619669cf55f56a33b7fa6daf659de51cd9ae910fae9317cfc73cc79e4508c72cca0b622cc8ba61901305002bed7c4012ac65003ab3d3113bea57af8c2f7bfc9aa2aa28"}, &(0x7f00000004c0)=0xfffffffffffffeda) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000500)={r10, 0xd4b}, &(0x7f0000000540)=0x8) io_submit(r8, 0x2, &(0x7f0000000300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x95, r0, &(0x7f00000000c0)="2c53e30fae345a36bb53710f9461396d6b50cae9b6822e243eda8d5191ad244459c2ad5bff5f91db208052d64775a65a42f3043a2057063ac1681b78a2406ed6c4725a5b12f3505c8634a7311a3168b9946426c18a7c009a14732c77dca3f26a719cf0ed681e4ac3dfcf335b165743531e5f4a4e3af7f7fa20560ecda09982c866776ddb99dd36e27d46ce1babaf67d12aaa236c704fd33b951e3dd8cdf502c655c5acdec89930e0bb5e8298119daa5d2a5570ce76e5a715a5093b0341dd2860682cdb710bccbb7562f608a2941c418e3e73b3d9371ac76be998e1ad688bcb218978f93842e2bd3440ee878f414d94bc1eef", 0xf2, 0x1, 0x0, 0x3, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x8c2b, r0, &(0x7f0000000200)="2d223d389278421cd31f5ab92178271fdc4d00015a3d7097b39750d17315d82622c792ecfe57d2263d68ca7832956f0b2fc3dbf54e2286d44aaa32a17ede91b0db73a642f8bfc19330c54ca9a3c5ae1bb6f79ad403be1de6f28a6d7a194345a93650a98b0f558145ba36d011fbf0cc2439d7ebfce4c21093", 0x78, 0x864b, 0x0, 0x3, r9}]) 09:42:22 executing program 5: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x0, r0}) 09:42:22 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x4000, r1}) 09:42:22 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0xfdfdffff00000000}) 09:42:22 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc4, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xaf}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004045) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) fcntl$dupfd(r2, 0x0, r2) 09:42:22 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000001b230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:22 executing program 5: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x0, r0}) 09:42:22 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000001f230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:22 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x5) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:22 executing program 5: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x0, r0}) 09:42:22 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0xff00, r1}) 09:42:22 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0xff00000000000000}) 09:42:22 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x8000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e22, 0x80, @rand_addr="500574d2e6c4d0bf9e7a622cbe829231", 0x1}, {0xa, 0x4e24, 0xe4a6, @remote, 0xcc3}, 0x3, [0x6, 0x4, 0x3, 0x7ff, 0x1, 0x1ff, 0x100000001, 0xbfb2]}, 0x5c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) 09:42:22 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0xfffffffffffffff9, 0x201, 0x4, 0xd027, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1, 0x3}, 0x8) 09:42:22 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:22 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000040230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:22 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x1000000, r1}) 09:42:22 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x400, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x10000) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000080)={0x1, 0x8}, 0x2) 09:42:22 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000007d230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:22 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x40, 0x2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x1}, 0x1) 09:42:22 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000000)={0x11}) 09:42:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:23 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000bf230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:23 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) 09:42:23 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x2000000, r1}) 09:42:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:23 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) 09:42:23 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x278, 0xe0, 0x0, 0xe0, 0x0, 0xe0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0x98, 0xe0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xff, 0x0, 0x800, 'pptp\x00', 0x800}}}, {{@uncond, 0x0, 0x98, 0x100}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x2, 0x1000, 0x1, '\x00', 'syz1\x00', 0x2}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:23 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000001f4230000000000000000000000000000000000000120a1070071756575"], 0x38) [ 1160.500485][T15898] Unknown ioctl -2146941694 09:42:23 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000000c0)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x4, 0x4], 0x2) 09:42:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:23 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x3000000, r1}) 09:42:23 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000050000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:23 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x3, 0x401, 0x400, 0x6}, 0x10) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000040)={0x1, [0x3f]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) 09:42:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:23 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x420040, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)={0x1e, 0x7, 0x1, {{0x11, '/dev/vhost-vsock\x00'}, 0x5}}, 0x1e) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:23 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000140)=""/86) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000280)={0x0, 0x800, 0x1, 0x5, &(0x7f0000ffd000/0x2000)=nil, 0xb77}) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfff, 0x1) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000240)={0x0, 0xffffffffffffff1a, 0x3b400, [], &(0x7f00000001c0)=0x20}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x3, r2}) 09:42:23 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000001e0000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:23 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8e) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x79, 0x6, 0x2, "1a812c10ed789a791aff406a7b4874a7", "9c8e0f6bef300a46c5d26f99d11694f2064d0b82a87d3317c5fa7f2569c17f3670846a90074c6f69e9e3af3560ebceea60dc8ff3a9fcbabf0cb07ba81735d37b35e537887626f51d3aadaffec540688e1532e4bfd9ff6e257c0d3731f591f388676d0c44"}, 0x79, 0x2) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x2) fcntl$dupfd(r1, 0x0, r1) 09:42:23 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x4000000, r1}) 09:42:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:23 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x100000000, 0x0) 09:42:23 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000001f0000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:24 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000002c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 09:42:24 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:24 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:24 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000200000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:24 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xe8) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xf1, 0x301000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r2, 0x0, r2) 09:42:24 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x5000000, r1}) 09:42:24 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8c80, 0x0) accept(r0, &(0x7f0000000040)=@nl=@unspec, &(0x7f0000000100)=0x80) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 09:42:24 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000210000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:24 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000000)={0x3, r1}) r2 = request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, r2, &(0x7f0000000140)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', ')security*eth1proc'}, 0x28, r3) 09:42:24 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) init_module(&(0x7f00000001c0)='\x00', 0x25d, &(0x7f0000000100)='/dev/vhost-vsock\x00)mZW\xbai\x063\xf0\x0f\xa4E=\x8c1\xef\x8bP\xe6$\xc7\xf5lK\x1f\xcd\xf3\xe7\xd1\x847\x13b\xe9)\x00\x0fT\xf4\x8a\x97\xf9\xd9\xb6)\'\x00xj\xb3\x9f\xce\xb0W\x9c\xa0F\xdb\"o\xf8\x99\xed!=k\xa4\xa9\xb2X\x8c.\x17\xcc\x9c\x89\xbdE\xf50vDG!\xbf zL{i}\xc4\xa0\xca)V;\x1cT\x04q\'\x93{\x9d\xa3\xffXq\xf5\x03P\xf8\xc8\x1a\xd7\xe06+|\xdc\xc0.\x12\x00pp\xe8\xc6w\x93\xcc\x83|') ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x1, 0x80000001}) 09:42:24 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:24 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x60400, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0xa0, "c7aadf0e00737263eabc8589987e1f7a79dcc0e793cdf62b08def6ce746e415a34b29bf52cbaa369954469f941d388895f974fee49d7b1de0b5da9add83b7cb228ab684308a978d2e4925193eee64888153e822379e639aa4f5d05ce6f905e125738de15895749d86202814c78dd9d069ea248bf841b216c68dcd11acb0ae12df572f0d1d7fce0343a179479d49329869134ba9af16bb7cab5d5eef017723ce7"}, &(0x7f00000002c0)=0xa8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e20, 0x5, @remote, 0x5}}, 0x9, 0x80000001, 0x68, 0xe98, 0x9}, &(0x7f0000000300)=0x98) bind$vsock_dgram(r1, &(0x7f0000000180)={0x28, 0x0, 0x2710}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000001c0)={'gre0\x00', 0x3}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xffffffff, 0x8, 0x10000, 0x2, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={r3, 0x4}, &(0x7f0000000140)=0x8) r4 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_mreqn(r4, 0x0, 0x100000000000026, &(0x7f0000000380)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0x146) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:24 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000220000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:24 executing program 2: setrlimit(0x3, &(0x7f0000000080)={0x4, 0x28}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0)) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) fcntl$getflags(r0, 0xb) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x7578c0, 0x0) write$eventfd(r2, &(0x7f0000000040)=0x3f, 0x8) fcntl$dupfd(r1, 0x0, r1) 09:42:24 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) 09:42:24 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x6000000, r1}) 09:42:24 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:24 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000004230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:24 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000000)={0x1f, 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0xfffffffffffffffc, r0) 09:42:24 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, 0x0) 09:42:24 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xb17c, 0x140) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={r2, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) write$P9_RGETLOCK(r1, &(0x7f0000000280)={0x35, 0x37, 0x1, {0x0, 0x2e, 0xffffffff, r3, 0x17, '[selinux)@em0bdev%+eth1'}}, 0x35) 09:42:25 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000008230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:25 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) fcntl$dupfd(r0, 0xfffffffffffffffe, r1) 09:42:25 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x7000000, r1}) 09:42:25 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1010c0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x1, 0x1, 0x25, 0x800, 0x4, 0x81}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x3}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000002c0)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) eventfd2(0x400, 0x80001) 09:42:25 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, 0x0) 09:42:25 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x8, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = add_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="5b12985497cbb3db7ab4559f4492ca4bf1dc7254a4bfa50ea9fff375eac5a89b1ae59f8771546a5f805ef516f1f826fb5682797334f27dd1df5bca0442b9a41fc1562db99815b9923858d4e0ad9a84701ad35f9e922f4b8906e142c0a6e17ac1ea418a4fbf958d09cf9dc58f9a388995e062aa0feb2fd8", 0x77, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000340)=""/110, 0x6e) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400100, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50ce155eb1fb4c068bcace3881ea1f9cdb6917c6a8f1011a04e3e6a936cdf00998fd3dcf7dac416e580be693fa5c78bcd943d49c4b454097a29b77f320d65e1c8faf8c85d683aa742f525c3129544e8c83aae05db0ae3379ad670b3e49cee467d573cfe3e5d6f6df3f9b580ce525d1474a9d3514e5babe3fe0bae3c262c993c1726b7d8ef683e7fa239a278b9ffb40f018af036bb7eb553baa1ee4dd5b12d648ab7a14b3337249f0cbca3c0853744058a5b9dbeff4f51a5a0c656bf225f99d40020c17a7699f82b9f94cfc21ff91887b874ac5ec11ed5a830d04440f", @ANYRES16=r4, @ANYBLOB="000529bd7000fcdbdf25110000000c000100080001000200000008000500000000000800040006000000"], 0x30}}, 0x0) 09:42:25 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000001b230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:25 executing program 2: setrlimit(0x1000000000000002, &(0x7f0000000080)={0x4, 0x128}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) 09:42:25 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x8000000, r1}) 09:42:25 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000007d230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:25 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, 0x0) 09:42:25 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r0, &(0x7f0000000080)={0x30}, 0x30, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 09:42:25 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) getsockname$inet(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="a100edc4", @ANYRES32=0x0], &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r2, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0xa000, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x3, r3}) prctl$PR_GET_SECCOMP(0x15) getsockname$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10) [ 1162.633497][T18059] mmap: syz-executor.2 (18059): VmData 18657280 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. 09:42:25 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000bf230000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:25 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)) 09:42:25 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:25 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) 09:42:25 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x3f000000, r1}) 09:42:25 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x4000000007fffe) write$FUSE_POLL(r1, &(0x7f0000000080)={0x18, 0x0, 0x2, {0x4}}, 0x18) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8050) write$FUSE_LSEEK(r1, &(0x7f00000000c0)={0x18, 0x0, 0x3, {0x849}}, 0x18) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040)=0x8, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:25 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000260000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:25 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)={r2, 0x0, 0xf7, "377c764d815ba67b0c81b976578342385de05280d09b98c8571f3cb54e0574073fa83aa548a57ea949364c038d48b362843cb5be8e783be4170024890a6c6f482ae32d9f124bee79019608fc461867f5fc4363a748c7de7e9999b9716f2b5bc9293f4cb45a507506228e2bc4c6f247c0f78686d165c8d87d87c3af73d185c3533439b810bb763614446c06b01ea0bbc653975ab376e022e3a2260ad265a8511b8155f9039e59b170eaa3df7cd377d579c0ad58b8ef7bbe76c98718999adaf8894275a32ac7771d255b588fd5e3b4e3fd6bbc756bc460a9e4cba2a1f95136ae9d33cc7a8504ca4bf8d0d5829578b6239c651c4e6647eda2"}, 0xff) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r3 = semget(0x2, 0x3, 0x4) semop(r3, &(0x7f0000000040)=[{0x3, 0x4, 0x1000}, {0x1, 0x0, 0x800}, {0x7, 0x1, 0x800}, {0x3, 0x10000, 0x800}, {0x7, 0xffffffffffffff54, 0x1000}, {0x6, 0x3f, 0x1800}], 0x6) 09:42:25 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)) 09:42:26 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x406, r0) 09:42:26 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x40000000, r1}) 09:42:26 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000001f40000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:26 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f00000002c0)) 09:42:26 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x400) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)=0x1) 09:42:26 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000140)="2d796370e03072bfc59cbd5460b514e30904aa20cb54487f8caacefb88c742f1ca42199720ccd972a0a501777641859b06ba1be8f0be518b20af9afd9b97e38ebe5c1f213691239103b08e0969f43119620e546afd6a32b918a0528b49b30a257e4ea51cc8486b7845eca78d5a98456f848122aff2") ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x2e, 0x5, 0x6, 0x6, 0x80000001, 0xfffffffffffff237, 0x800, 0x9, 0x7a, 0x80000001, 0x7, 0xfffffffffffffff8, 0x4}, {0x4, 0xd17, 0x7c18, 0x2e9b, 0x4, 0x1, 0x3, 0x2b, 0x1, 0x6, 0x3, 0x8, 0x7}, {0x3, 0x8, 0x1000, 0x14a, 0xd34, 0x8, 0x0, 0xfffffffffffffff7, 0x6, 0xf694, 0x7f, 0x6, 0x10000}], 0x400}) modify_ldt$read_default(0x2, &(0x7f0000000240)=""/37, 0x25) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x40) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000080)=""/28) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000300)) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000000c0)={{0x6, 0x5}, 0x8}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) 09:42:26 executing program 2: setrlimit(0x1000000000000007, &(0x7f00000000c0)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x286000, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) fcntl$dupfd(r0, 0x0, r0) 09:42:26 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x101400, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000001c0)={0x0, r1}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xbf46, 0x101040) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000280)={r4, 0xe809, 0x8, [0x401, 0xffffffff, 0x1f, 0x8, 0x1, 0x30, 0xf1, 0x40d06915]}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000080)={{0x80000001, 0x4}, 'port0\x00', 0x67, 0x0, 0x100000000, 0xffffffffffffff05, 0xfff, 0x0, 0x1000, 0x0, 0x2, 0xdd}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) 09:42:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='setgroups\x00') lseek(r0, 0x98, 0x0) 09:42:26 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000050000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:26 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0xfdfdffff, r1}) 09:42:26 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000180)="56cc778178a6858887a67a09bbb6de34b10bbbc76c28b228391bd33b22cafe58cdcc391e2bd239069290b8bdea4823cab1af3dcd5d9f8f714d5e8a835ebab2b39c5a3198764ca0a934fcd6f2a750683cd84beff50a5767e365901e20ff5b54d28b6c7e7512363e9c612322bc74df156388a9242e2c2461b3426a0798af6018228bd87f17c457", 0x86, 0xffffffffffffffff) keyctl$assume_authority(0x10, r2) 09:42:26 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) open(&(0x7f0000000000)='./file0\x00', 0x100, 0xa) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) 09:42:26 executing program 5: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x24037e) 09:42:26 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x80) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000001c0)={r1, &(0x7f0000000100)=""/157}) 09:42:26 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0xff000000, r1}) 09:42:26 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @remote}}]}, 0xe4) 09:42:26 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) fcntl$dupfd(r0, 0x406, r0) 09:42:26 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x7fff, 0x2000) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x9) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000002c0)) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x4ef968588e0c6feb) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}}, 0x40) 09:42:26 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000001e0000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:27 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) timerfd_create(0x9, 0x80800) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x161000, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x4, 0x3, 0x2}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x800}, 0x8) 09:42:27 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000300)=@ipx, 0x80, 0x0}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001400)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 09:42:27 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000210000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:27 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000000)={0xa654, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffff00, 0x210400) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x1, 0x0, "3ca9ea5c962eb88e2d55a308a8aeae06169fc778b15a61907103682bc7fb6874844e7a1dca8f1bdb8d1f1d65271998e2651b5a9e99b8499610fc06b21f3364f090783fdf6968f9535d8558086bf77203"}, 0xd8) fcntl$dupfd(r0, 0x0, r0) 09:42:27 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0xfffffdfd, r1}) 09:42:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$l2tp(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x1, 0x1, {0xa, 0x4e24, 0x3, @empty, 0x24dac6b6}}}, 0x32) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffff, 0x4000) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x5) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) pkey_alloc(0x0, 0x1) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f00000000c0)={0x0, 0x3, 0x7, 0x0, &(0x7f0000ff1000/0xc000)=nil, 0x3}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000002c0)) 09:42:27 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x40080) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000040)={0x1, "b1aaae596225a0668505ab07ec47420c28cb728629e1e25b313a51878cb346b1", 0x3, 0x200, 0xfffffffffffffffe, 0xf900, 0xe}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$binfmt_elf64(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/2160], 0x861) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 09:42:27 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000220000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:27 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x208000) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x145) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x802, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x26, &(0x7f0000000000), 0x20a154cc) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x545c, 0x200) socket$inet6_dccp(0xa, 0x6, 0x0) fcntl$dupfd(r1, 0x0, r1) 09:42:27 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x100000000000000, r1}) 09:42:27 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10400, 0x0) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f00000000c0)=0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast1}}, [0x101, 0xe3, 0x5, 0x6, 0x5599, 0x1, 0x7, 0x3, 0x8, 0x4, 0xffffffffffffffe7, 0x1f, 0x9, 0x4, 0x1c0000000]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0xb2, "155fdc386e36011e29d0e5ea3e95218dad6997d369234262851dd053f313f91a2fa21a6e0d849c2d3e683f9f38888f7fbf387ea15864462d95a042517bd69797828bdebf8f23a45b230306e0e82be2bb1774fac8858b46ccba78e3879ca1e658ba17c3757b862c443b8e38ff8afe9cb9ba34825741c371173f36ea9b0b3844cff8e9a23aa14296b928430ebe69b3950fec89e4f69b877515223a6cb76159ba9e3d21d65d73fc1fa53090eb078f45f4c12570"}, &(0x7f0000000300)=0xba) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080)) 09:42:27 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x101000) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x6) 09:42:27 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000260000000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r2 = dup(r0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r2, 0x1) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x20000, 0x0) ioctl(r3, 0x9, &(0x7f0000000100)="e73a02fb8b2e0f551592d15b60f7e392c363bd601ce661a191541978a53f27a00d2b61e138150fc0dcf004e45b04410d0c5544d7c1b7067bcf977dbc11e76ff4ca40e764bbbd88cbbdbdb61386722716c40d0c8ce0540d1bf77f0bbf3fe094a9122ca6309731c5dc0697407d4b6267d6a5f7209530196e10e85fb09f4288ce0131a49f8d22edf8e132ce4d0eb274bf8a80d25b2cbb7c0cf10e105a715ba36a6094a7c5ee4dd91270fc6255331eab2602a75a76546400f2e5cb29d1a61384b5752b0ea5fa9be9ff26fe4f63fe9940e4e474d6496405b55080e23ca8de98731345") fcntl$dupfd(r0, 0x406, r0) 09:42:27 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:42:27 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000180)='net/ip6_tables_targets\x00') syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1, 0x2800) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) 09:42:27 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000f40100000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:27 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x200000000000000, r1}) 09:42:28 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80000, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000100)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x1) fcntl$dupfd(r0, 0x0, r0) 09:42:28 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x40) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 09:42:28 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000095ffffff0000000000000000000000000000000120a1070071756575"], 0x38) 09:42:28 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x200000, 0x0) getpeername$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) 09:42:28 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc4, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xaf}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004045) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) fcntl$dupfd(r2, 0x0, r2) 09:42:28 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000), 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xfff, 0x2, 0x9, 0x4, 0x2, 0x3f, 0x2, 0x43, 0x38, 0xf6, 0xfffffffffffffbff, 0xfa9, 0x20, 0x1, 0x4, 0x9, 0x6}, [{0x6, 0x7f, 0x10000, 0x1, 0x1, 0x401, 0x4, 0xffffffffffffff7f}, {0x6474e551, 0x3, 0x4, 0x9f, 0x7, 0x4, 0x0, 0x4}], "37d3b533cd69ec3828ae2aae7f7b287953954de1f2ff7d8e77b2dbf55842f987a09a2f7cbe2293be0b1c457de1268c9a5a200ce75b58cf4ab1cdada80957d2d57d1361557517bab57dab2e619bb0f87618ae3020bcea05755d151eb16b415f15ac36d9acc2deaaf7c30f5ef6ecf11b46b5dca6b6640f46e722b668d4744770ee3d3f1a08ea86f2324131a06961b248a2fbc30fb7eccafae01ac458865ca9714d42f005d3c1bd18c2c3c16e8a29c5576e3d709fb030c8ad63d740edfe5a105e22631cc98e45b46613cebed584ce81bc4903b961c3f84217bd1cd2c63b18df01bdf0ad00238fa0051728b65929629134340a9101", [[], [], [], [], [], [], [], []]}, 0x96b) 09:42:28 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230400000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:28 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x300000000000000, r1}) 09:42:28 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0xc000, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:28 executing program 4: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) 09:42:28 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc4, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xaf}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004045) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) fcntl$dupfd(r2, 0x0, r2) 09:42:28 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230800000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:28 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x200, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000200)={0x2, 0x3, {0x55, 0x101, 0x1, {0x4, 0x1ff}, {0x4, 0xe04}, @const={0xfffffffffffffffd, {0x100, 0x4, 0xcc2, 0x7}}}, {0x0, 0xa1, 0x100000001, {0x8, 0x8}, {0x0, 0x10000}, @cond=[{0x9, 0x1, 0x8, 0x20, 0x3ff, 0xbb61}, {0x9, 0x0, 0x1, 0x6af, 0x3ff, 0x4}]}}) flistxattr(r1, &(0x7f0000001780)=""/209, 0xd1) sysinfo(&(0x7f0000000780)=""/4096) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x101000, 0x0) write$uinput_user_dev(r2, &(0x7f0000000300)={'syz1\x00', {0x100, 0x9, 0x8, 0x5}, 0x5, [0x8001, 0x8001, 0xca6b, 0x181f, 0x2, 0x9, 0x4f55, 0xffffffffffffffff, 0x5, 0x80, 0xf6, 0x1000, 0x8, 0x4, 0x0, 0x8000, 0x98, 0x31, 0x17f, 0x1, 0x8000, 0x7, 0x8c1c, 0x0, 0x1, 0xfffffffffffffff9, 0xd4, 0xcb, 0x80, 0x5d42, 0x7, 0x4, 0xffffffffffffffe0, 0x5, 0xe0, 0x4984800000000, 0x4, 0x0, 0xfffffffffffffff9, 0x4, 0x4, 0x6, 0x5, 0x6, 0x7, 0x153e7fc9, 0x3, 0x5, 0x2ce800000000000, 0x49fb, 0x2, 0x5, 0x445a, 0x100000001, 0x81, 0xfffffffffffff67d, 0x2, 0x2, 0x5, 0xfff, 0x14000000, 0x2, 0x1, 0x6], [0x1, 0x0, 0x14e, 0xffffffff, 0x69ce1101, 0x7, 0x8000, 0x40, 0x7fff, 0x8, 0x0, 0x200, 0x2, 0x91e1, 0xff, 0x7f, 0x8, 0xfffffffffffffff7, 0xa2, 0x1f, 0x1, 0x3ff, 0x100000000, 0x3, 0x0, 0x10001, 0xffffffff80000000, 0x7ff, 0x1, 0x28, 0x4, 0x1, 0x0, 0x1, 0x82, 0x110000000000, 0x3, 0x3, 0x8, 0x2, 0xfff, 0x100000000, 0x1, 0xf2e0, 0x1ff, 0x9, 0x7, 0x2, 0x5, 0xfff, 0x7, 0x7f5, 0x1, 0x2, 0x2, 0x8000, 0xd64, 0x8, 0x1f, 0x4, 0x7, 0x9, 0x3, 0x200], [0x1, 0x75a, 0x1, 0x0, 0x2, 0x0, 0xffffffffffffc6f3, 0x6, 0x80000001, 0x24d16467, 0x7, 0x97, 0x6, 0x94c, 0x100000000, 0x7, 0x8, 0x60cabb57, 0x20, 0x1, 0x20f, 0xa0, 0x8, 0xfffffffffffffff8, 0x10000, 0x40, 0x7, 0x6, 0x4, 0xfff, 0xffff, 0x2c4, 0xd1, 0x5, 0x9, 0x1, 0xfcba, 0x7, 0x0, 0x7fffffff, 0x5, 0x4, 0xfff, 0x7, 0xff, 0xe289, 0x7, 0x6, 0x4, 0x2, 0x9, 0x9, 0x2, 0xfffffffffffffff8, 0x5d8, 0x5, 0xffffffffffffbba5, 0x8, 0x1, 0x6, 0xfff, 0x5c7d, 0x8, 0xbd8], [0x1, 0x400, 0x3, 0x8, 0x1, 0xdf7, 0x6, 0x8, 0x8001, 0xffff, 0xe1, 0x2, 0x3ff, 0xffff, 0x1, 0x395b, 0x6, 0x5, 0x5, 0x1, 0x8, 0x5, 0x40, 0x95b, 0xf6, 0x7, 0x8, 0x7fffffff, 0x3ff, 0xcc, 0x0, 0x4, 0x84c8, 0x36, 0x7, 0x7fffffff, 0x101, 0x1, 0xa905, 0xaf, 0x3ae, 0xfffffffffffffff9, 0x0, 0x7, 0x5, 0x1, 0x2, 0x7, 0x4, 0x4, 0x9, 0x401, 0x8f6, 0x6, 0x1, 0x7ff, 0x6, 0x5, 0x80000001, 0x20, 0x1, 0xc7a, 0x3, 0x3]}, 0x45c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x121101, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xf, &(0x7f0000000080)="8e350fe84f2285b7d0b91acc26d582920506defd96c9f0544d91481f691bdfd3941dd121f9bbc3a53df8765bc634c5c8517be14e614e56fa82da550747a5d23ff08b773da17c3e1eda4ced8dec75c6cbc8ccc31aa64d8b6f66dabd1ff6afe9df011901101a0d2c6c35b2245039857b45037115d568ea8170ac51ad8ed7cded0418dd7a25b82190735bd19bb59139f17fd0c93d06d478c6fc5e0bfba621d9653cba671e7266df7613b88f5c3d89ab079245a82adfef66c7640559ac6bc52db36e48e92af7580ad64f98f1b4428b8c328c09e829920e5a289d61d2cebedd39ca06d2cc0f", 0xe3) 09:42:28 executing program 2: prctl$PR_SET_FP_MODE(0x2d, 0x3) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000000c0)) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'team_slave_1\x00', 0x200}) 09:42:28 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000231b00000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:28 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x400000000000000, r1}) 09:42:28 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc4, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xaf}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004045) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) fcntl$dupfd(r2, 0x0, r2) 09:42:28 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x10000) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 09:42:28 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000237d00000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:28 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x5}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0xdd2d, @rand_addr="25a848369182a64e26b02078ceebe729", 0x9}, {0xa, 0x4e21, 0x3957, @rand_addr="549336fc8e68cae8bb0ba64329892f37", 0x10000}, 0x4, [0x1, 0x2, 0x8, 0x5, 0x8000, 0x5a94000000000000, 0x0, 0x4]}, 0x5c) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:28 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc4, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xaf}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004045) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) 09:42:28 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xf5, "2683c423e9f37cadef11c5d2add2f91e47ea16237bb9a0898fc60525565f3c924a8fb059de096c5f1aaaf1d0bb76b616243364b4718a9411bf750472997e945489101e773c49c40b17556aba1d5220b89280e69a2d092163dd628701f25b768ec52b1ff637955f6826be926b24bcfd8dbd6c1143b7d4602946645ecbf0968fdea9622e0ac0625e4ddb758e726ec7171e6e42d365221fbfca17c87d68003d70dceafa89f5117fe88d833345d51e92c0dfc0dde0c7eeb716dbb7b17ccdd39053f9a6ea86b3f77fd5557756d26191fbcb2a365aff3700010645cb33940b92b1d23e2e408b2f9c68f43c199d716007b45207a18fd756d0"}, &(0x7f0000000040)=0xfd) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r1, 0x100, 0x913f, 0x2, 0x8001}, &(0x7f0000000200)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r2, 0x0, r2) 09:42:29 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:29 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x500000000000000, r1}) 09:42:29 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023bf00000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:29 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc4, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xaf}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004045) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r2) 09:42:29 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) delete_module(&(0x7f00000000c0)='/dev/vhost-vsock\x00', 0xa00) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0xffffffff80000001, [0x8057, 0x8001, 0x5, 0x3, 0x80000000, 0x9, 0x1, 0x100000000, 0x2, 0x8, 0x0, 0x101, 0x2, 0x5, 0x9, 0x3, 0x634, 0x7, 0xd02, 0x5, 0x7fffffff, 0x1, 0xdb, 0xfff, 0x90, 0x8, 0x2, 0x0, 0x3511, 0xfffffffffffffffa, 0x3f, 0x100, 0x80000001, 0x6, 0x9, 0x5, 0x1, 0x100, 0x100000000, 0x2, 0x101, 0x9, 0xffffffffffffffff, 0x513, 0x0, 0x0, 0x101, 0x9df8], 0xf}) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x400}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r1, 0xbc, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x100, @rand_addr="f3cbec163510bedb773d87269a92a03a", 0x7}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x800}, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1f}, 0x300000000000000}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x1f}, 0x1}, @in6={0xa, 0x4e20, 0x7, @empty, 0x6244}]}, &(0x7f00000002c0)=0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:29 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3f, 0x400000) openat$cgroup_type(r1, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000040)={0xf8, &(0x7f00000000c0)=""/248}) fcntl$dupfd(r0, 0x0, r0) 09:42:29 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023f401000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:29 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/25, 0x19) 09:42:29 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc4, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xaf}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004045) socket$inet6_udp(0xa, 0x2, 0x0) 09:42:29 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x3, 0x0, [{0x100000, 0xf5, &(0x7f0000000080)=""/245}, {0x2, 0x45, &(0x7f0000000180)=""/69}, {0x100000, 0xc6, &(0x7f0000000200)=""/198}]}) 09:42:29 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x600000000000000, r1}) 09:42:29 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x2c}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x4e24, @local}}, 0xffffffff}, 0x90) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000001c0)=0x8) sendmsg$unix(r1, &(0x7f0000002480)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000000280)="e26c7cba59542842e9be25751970dd50d1261a0f4b19ec3cba193fbadc120404d1a8231d7f7dd3836450bfdc0da31155a4ce0f4be94de66c0407e9635cb923263a16aae2341a487acf07cdb1cb2b0f17d3803e6b96dea1db3fd3cb4c26a514aeac8f4ea88c4e673d8f4ba6aa477b411cc5f9405ee814bfead3a7f88adf056dcc46b371ffac435888eb77d472c85bb8a9d6d6ed2c289683dff8788c601ee750330541c058db367ee5db036b81fd9e9affc74fd532fd980002dd2c62e890576b539c83cb170f3ccce3a96b5ab7c94cd948684406f66561b39f321efa0e7fc1dbeb9408f96dfca6af52fcde6685c6b9e1", 0xef}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="e60ea98f3953becb715c92cfe80e5c893c309b753d65735c87ccc529443c341ace3c3bae2b40b6bca9d064093266c6aae72c2633c3c3824abc3ee3e42173f2c3946b34d0db501510a1583be95b4f59f43c23ab741d1cdfb91da920f772d8f1f39497fcb9e96eff31086e2869cad2715510ce1745bc4e1e96", 0x78}, {&(0x7f0000001400)="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", 0x1000}], 0x4, &(0x7f0000002440)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r0, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x40, 0x10}, 0x40800) exit_group(0x5) fcntl$dupfd(r0, 0x0, r0) 09:42:29 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023001b000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:29 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc4, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xaf}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004045) 09:42:29 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40100, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400), &(0x7f00000002c0)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000000)={{0x6, @rand_addr=0xff, 0x4e22, 0x2, 'fo\x00', 0x1, 0x8, 0x64}, {@remote, 0x4e21, 0x2, 0x401, 0x5, 0x9}}, 0x44) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0x10) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000280)={0x10, 0x52, &(0x7f0000000300)="8e2fa6d710a6b032da1612d5971a30b8624bcaa7a315cabf849b1fe121b2c102787c4bbfa335b2c9f97ca767ba8167414badc03db34429141da512f12cf6fa78e69df247393b2069d4f4ce78592a95a587850c823aeff214b8764286c374eddcc83e01c6ba249c7bd72e6d32c024cc4ca9a87ac8ebbc773b12dec46e13fb6487336b9ed6b1c7323c9b0abc8556765ef0c91197cb13b202b87fb967e669741e4e28ba51705ca83e4d263cad64b4384be6a07fc63b4e78214e4536ded7180775726278cbb2bc49590d62c47d7474077a37fd35cdb265c0a54138657c5877df5f045cee3d4ffeed7a8d6fe1c9a225253d35aa0f59f147e462", {0xbf3, 0x200000000000000, 0x34367659, 0x6, 0x100000001, 0x7, 0x4}}) 09:42:29 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023001f000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:29 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x102, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x44000, 0xa4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x200041, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r2) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000002c0)) 09:42:29 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x2, "3744a7a88a6afd89"}) 09:42:29 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000040)) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000100)=0x24) fcntl$dupfd(r0, 0x0, r1) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x2, 0x800) 09:42:29 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) pipe2(&(0x7f0000000000), 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 09:42:29 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230040000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:29 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x700000000000000, r1}) 09:42:30 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x3}) 09:42:30 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x4a0080, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@getnetconf={0x14, 0x52, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast1, @in6=@empty}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000001c0)={0x8, 0x6, 0x3f, 0x3, 0x1}) 09:42:30 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023007d000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:30 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) pipe2(&(0x7f0000000000), 0x80000) 09:42:30 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002db92071cdce532f013b09df76a78fbd7000fbdbdf25010000000100000008008b3e2dd3790092698a0208be6c13b02aa110604e1eefb0c234170527"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4084) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r2, 0x0, r2) 09:42:30 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x800000000000000, r1}) 09:42:30 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vfio/vfio\x00', 0x10242, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000040)={0x2, 0x9ed}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000200)={0x80000, 0x0, [0xc3, 0x3, 0x81, 0x0, 0x3e57, 0x1, 0xe80000, 0x3]}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000ffdbdf25020000000800030006000000080003000700000014000100000000000000000000000000000000007f7403d1557de2b60de4212f1f1e6b7c908bd4c58d378f7e35ba0584888d57b47b5dc6c5a1f0a82e212741706b9533d858426259a0727941c6b4c63519b8bd7d5b332b3e88f2efd18422eccd3da42fab892014ef20d862a35ccc61dcdfb89566dbfab14a838b726828b9ac38e6a1d43158580b252a988b257247a1e6e221f32652ea"], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) 09:42:30 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300bf000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:30 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20002, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:30 executing program 5: pipe2(&(0x7f0000000000), 0x80000) 09:42:30 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:30 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002301f4000000000000000000000000000000000120a1070071756575"], 0x38) [ 1167.686649][T22856] Unknown ioctl 35078 09:42:30 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) exit_group(0x7fff) 09:42:30 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x3f00000000000000, r1}) 09:42:30 executing program 5: pipe2(&(0x7f0000000000), 0x80000) 09:42:30 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = getpid() r2 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x7, 0x101000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r2, &(0x7f00000001c0)=[{{r3, r4/1000+10000}, 0x3, 0xa65, 0x1}, {{}, 0x1f, 0x5, 0x9}], 0x30) capget(&(0x7f0000000000)={0x399f1336, r1}, &(0x7f0000000080)={0xe0, 0x7, 0x6, 0x4, 0xea1, 0x2}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) semget$private(0x0, 0x0, 0x2) timerfd_settime(r2, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:30 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000100000000000000000000000000000120a1070071756575"], 0x38) 09:42:30 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) fcntl$dupfd(r0, 0x0, r0) 09:42:30 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x800, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x3, r1}) 09:42:30 executing program 5: pipe2(&(0x7f0000000000), 0x80000) 09:42:31 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000400000000000000000000000000000120a1070071756575"], 0x38) 09:42:31 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) connect$can_bcm(r0, &(0x7f0000000100), 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x201, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) 09:42:31 executing program 5: setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) pipe2(&(0x7f0000000000), 0x80000) 09:42:31 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x4000000000000000, r1}) 09:42:31 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$set_reqkey_keyring(0x5, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r2, 0x0, 0xffffffb0) r3 = syz_open_dev$adsp(&(0x7f0000000680)='/dev/adsp#\x00', 0x2, 0x400000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, r4, 0x24, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x80) r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000001c0)) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x0, r6}) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x0, 0x8}) 09:42:31 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x400000, 0x20) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000300)=""/176) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/217, 0xd9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000000c0)) r3 = fcntl$dupfd(r1, 0x0, r1) signalfd4(r3, &(0x7f0000000040)={0x7}, 0x8, 0x800) 09:42:31 executing program 5: setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) pipe2(&(0x7f0000000000), 0x80000) 09:42:31 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000800000000000000000000000000000120a1070071756575"], 0x38) 09:42:31 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x101201, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x63}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0x5, 0x4, 0x0, 0x80000000, 0x3}, &(0x7f00000001c0)=0x14) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000002c0)) 09:42:31 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10080, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x2001) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x100) 09:42:31 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10002, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) write$capi20(r1, &(0x7f00000000c0)={0x10, 0xffff, 0x4, 0x83, 0x800, 0x7fff}, 0x10) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140)) socket$caif_stream(0x25, 0x1, 0x4000000000004) 09:42:31 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0xfdfdffff00000000, r1}) 09:42:31 executing program 5: setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) pipe2(&(0x7f0000000000), 0x80000) 09:42:31 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000001b00000000000000000000000000000120a1070071756575"], 0x38) 09:42:31 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000001f00000000000000000000000000000120a1070071756575"], 0x38) 09:42:31 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 09:42:31 executing program 5: setrlimit(0x1000000000000007, 0x0) pipe2(&(0x7f0000000000), 0x80000) 09:42:31 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0xffffffff, 0x2, 0x3f}) fcntl$dupfd(r0, 0x0, r0) [ 1168.891928][T23854] Unknown ioctl 25648 09:42:31 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) socket$kcm(0x29, 0x7, 0x0) 09:42:31 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0xff00000000000000, r1}) 09:42:31 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000004000000000000000000000000000000120a1070071756575"], 0x38) [ 1168.997813][T23854] Unknown ioctl 25648 09:42:31 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) getpeername$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 09:42:31 executing program 5: setrlimit(0x1000000000000007, 0x0) pipe2(&(0x7f0000000000), 0x80000) 09:42:32 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) 09:42:32 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000007d00000000000000000000000000000120a1070071756575"], 0x38) 09:42:32 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x40200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'dummy0\x00', 0x1000}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x0, 0xfff, 0x3f, 0x9, 0x80000001, 0x1000000000000005}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000002c0)) 09:42:32 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x1f, 0x10040) write$binfmt_elf64(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0xfffffffeffffffff, 0x1f, 0x8, 0x2, 0x3f, 0x5, 0xdd, 0x40, 0x2a7, 0x3, 0xfff, 0x38, 0x1, 0xe45, 0x1, 0x200}, [{0x3, 0x9, 0x3, 0x100000000, 0x7, 0x6, 0x6, 0x1c0e}, {0x60000000, 0x4c, 0x3ff, 0x34e, 0x7fff, 0x800, 0x204000, 0x400}], "aebc8192a8b2c43c0e0ed9cfb5b6c6e5f0d02c022afe1216b98af7e0c2483938c59f15254fe5874c425bd1f0f85cef2f290af5d6b91f0017428954ad410f4556effbe78f956910c9941db56a0c1ce9f4a2d15f8ea2f45dcbe0086eeda8fbf43053a5102ecd8382d3686c74c1652cef51a829ddf3cfa472c0eac14a5589bcbce86cf302639b009fb527b03532f819485269862db8a4ac72f7415614c81bddeb13c9672bf8c29b42c10494606cfa4420293326a3", [[], [], [], [], [], [], [], [], [], []]}, 0xb63) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x1, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f00000001c0)) r3 = eventfd(0x2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000002c0)={0x0, r3}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40000, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x228, r5, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffff2d4e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @empty, 0x2}}}}]}, @TIPC_NLA_BEARER={0x144, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1000, @local, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffffffffff7, @local, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x8090}, 0x40) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000001180)='trusted.overlay.upper\x00', &(0x7f0000000540)={0x0, 0xfb, 0xc0, 0x6, 0x0, "3b1871142bf395c0e09600", "c1f11f563e91fd5ce1576459658fd925b572662e66f93a5e6b6be858c1c65084b3f6ece006de6d55a5242564f4d2c23966a36bfacf68322390d592ef41bcca502848759bb3321ad6f82bc65b5185b8df50550d5878dbbe58bd9af0d5a094b137779daf370b0532c272a3718ef9251ec083ae42dd3952e7da40f68526cd61a82bc0789a8682015038441b0efe720ac77aedeed5b85d7447d4b4d368f0ac82e4fd431393f603ac23bdeb44a3"}, 0xc0, 0x3) 09:42:32 executing program 5: setrlimit(0x1000000000000007, 0x0) pipe2(&(0x7f0000000000), 0x80000) 09:42:32 executing program 4: r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10, 0x80000) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000000)={0x2, 0x100000001}) 09:42:32 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000180)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9b, 0x40080) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xa81, 0x82) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @empty, 0x3}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x10000, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)={0x948}) 09:42:32 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000bf00000000000000000000000000000120a1070071756575"], 0x38) 09:42:32 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x0, 0x28}) pipe2(&(0x7f0000000000), 0x80000) 09:42:32 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x1) ioctl$KDDELIO(r0, 0x4b35, 0x80) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) 09:42:32 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x80000000000000}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x402002, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000280)=0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet6_dccp_int(r2, 0x21, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) getdents64(r3, &(0x7f0000000180)=""/180, 0xb4) 09:42:32 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x240002, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) fcntl$dupfd(r0, 0x0, r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) 09:42:32 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = semget$private(0x0, 0x2, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80800240}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)=@newsa={0x1c8, 0x10, 0x100, 0x70bd27, 0x25dfdbff, {{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4e20, 0xffffffffffffffc0, 0x4e23, 0x0, 0x2, 0x80, 0x20, 0x2e, r3, r4}, {@in=@rand_addr=0xf2, 0x4d5, 0x3c}, @in=@local, {0x3ff, 0x3ff, 0x400, 0x1, 0xc000000, 0xfef, 0x5463, 0x101}, {0x0, 0x7f, 0x4, 0x8}, {0x10001, 0x7, 0x4}, 0x70bd2b, 0x3501, 0xa, 0x1, 0x7f}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd29, 0x70bd2d, 0x70bd2d, 0x70bd2b, 0x100000000, [0x2, 0x5f9b3a41]}}, @tfcpad={0x8, 0x16, 0x8}, @policy={0xac, 0x7, {{@in=@rand_addr=0x7de, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x7, 0x2, 0x20, 0x80, 0x2f, r5, r6}, {0x80000001, 0xfffffffffffffff9, 0x7, 0x2, 0x32cf5c4f, 0x8, 0xb78e, 0xff}, {0x8, 0x10001, 0x100000001, 0x20}, 0x7, 0x6e6bb8, 0x1, 0x1, 0x1, 0x3}}]}, 0x1c8}}, 0x4000) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000040)=0x91) r7 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r7}) socket$unix(0x1, 0x7, 0x0) 09:42:32 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0xc002) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:32 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000001f400000000000000000000000000000120a1070071756575"], 0x38) 09:42:32 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x0, 0x28}) pipe2(&(0x7f0000000000), 0x80000) 09:42:32 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x1f4, 0x2a}, 0x98) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 09:42:32 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f00000000c0)='mime_type+vmnet0md5sumnodev\x00'}, 0x30) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x25, 0xfffffffffffffff8, 0x0, 0xfff, 0x8, 0x4, "32a0bc072382d942bdffe8e3fc9e2ec9066512e341ed5e63801ae3b8fa329d6ad483deed0d"}, 0x13d) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0xffff, 0x1000, 0x100000000, 0x3f, 0x0, 0x2, 0x35100, 0x9, 0x100, 0x9, 0x7, 0x81, 0x80000000, 0xfffffffffffff82c, 0x2, 0x6, 0x400, 0x2007, 0x0, 0xdf0, 0x0, 0x80, 0x10001, 0x364, 0x1, 0x88, 0x3ff, 0x370c, 0x0, 0x8001, 0x8, 0x6, 0x3, 0x3457d9ed, 0x1000, 0xd98, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0xa6d6}, 0x220, 0x8001, 0x2, 0x0, 0x1b9b, 0x7, 0x9f6c}, r1, 0x2, r2, 0x8) 09:42:32 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023fffffffd00000000000000000000000000000120a1070071756575"], 0x38) 09:42:32 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x0, 0x28}) pipe2(&(0x7f0000000000), 0x80000) 09:42:32 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x3, 0x7f, 0x2, 0x800, r1}) accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id, &(0x7f0000000480)=0x10, 0x0) r3 = socket(0xd8d7e4b9f4700466, 0x805, 0x2) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x49) r4 = socket(0x400000000010, 0x6, 0x5) write(r4, &(0x7f0000000180)="2400000019002551075c0165ff0ffc02802000030011000500e1000c040003008000", 0x22) r5 = add_key(&(0x7f00000000c0)='id_legacy\x00', 0x0, &(0x7f0000000140)="15d9becb5d7d1bd0e669bb1c5b7df54640023d55ca3338cc5eca4ae487e9261639dc09660819a72fa7ae1a09819356696a516bd34bb5f3cadc180df29d2e2492c2e360f0929eadb79f8609243ab5c353e32ea2f94afe2724fe433f3712ab8ad9b0c64199d9807aab33ab407dad6694a2e2d570c273cc8fa0ab8fa5c1a51e330c3f9096c1e4396201e2ed3452da0d12b33ad8b2", 0x93, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, @dev}]}) keyctl$clear(0x7, r5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780)={{r8, r9/1000+10000}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) r10 = accept$alg(r6, 0x0, 0x0) recvmmsg(r10, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x167, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x3ed, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) bind$alg(r6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) r11 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r11) r12 = socket(0x15, 0x100000000080a, 0x5) recvmsg$kcm(r12, &(0x7f00000004c0)={&(0x7f0000000200)=@nl=@proc, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/100, 0x64}, {&(0x7f0000000300)=""/128, 0x80}], 0x2}, 0x102) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:32 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/208, 0xd0}, {&(0x7f00000001c0)=""/173, 0xad}, {&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000540)=""/11, 0xb}], 0x7, &(0x7f0000000600)=""/227, 0xe3}, 0x40012100) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000780)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r2, 0x0, r2) 09:42:33 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x8) ioctl$VT_RELDISP(r1, 0x5605) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:33 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4}) pipe2(&(0x7f0000000000), 0x80000) 09:42:33 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair(0x2, 0x80000, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x68, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x7f, @mcast1, 0x2}, @in={0x2, 0x4e23, @rand_addr=0x40}, @in={0x2, 0x4e23, @rand_addr=0x10001}, @in6={0xa, 0x4e23, 0x8, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x23}}, 0x9}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={r2, 0xffffffffffffff7f}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000240)={0x8000000, 0x9f0, 0x19}) 09:42:33 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023fffffffe00000000000000000000000000000120a1070071756575"], 0x38) 09:42:33 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0xa0, 0x200, 0x7, 0x6, 0x1, 0x1, 0x5, {0x0, @in={{0x2, 0x4e22, @rand_addr=0x5}}, 0xd9da, 0x3, 0x2, 0x0, 0x40}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x88, 0x0, 0x7, 0x101, r2}, 0x10) fcntl$dupfd(r0, 0x0, r0) 09:42:33 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4}) pipe2(&(0x7f0000000000), 0x80000) 09:42:33 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1b8000000000000, 0x12000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3, r1}) 09:42:33 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023fdffffff00000000000000000000000000000120a1070071756575"], 0x38) 09:42:33 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x51) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000001280)=""/172) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000001200)={0xfff, 0xbdc, 0x2, 0x1000, &(0x7f0000000180)=""/4096, 0x34, &(0x7f0000001180)=""/52, 0x40, &(0x7f00000011c0)=""/64}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0)=@int=0x4, 0x4) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000001340)=ANY=[@ANYBLOB="2f000000040000000000000000000000000000000000000006000000000000000700000000000000000000000000002e0876fb9575404b176d61ad5882a33d2c01f23808b02331a20b40b44412ea101494464c20a766a0f7952912aca730902e3ea531aff01b90ec272c6146a917946a3e0f9f4c446b4145652fbfeecee471943425bed6cd339ca75b93d20d95a9aea9dd96a42eed71ce56facb8c732c1d6f99ef12fc7455e9a717b5278370eae1ecdd73910bb652c5819ee3f373ee8225029baba921a2847977584c8c4113e0802c73898bb28a"], 0x2f) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x3ff, 0x80) openat$cuse(0xffffffffffffff9c, &(0x7f0000001240)='/dev/cuse\x00', 0x2, 0x0) 09:42:33 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4}) pipe2(&(0x7f0000000000), 0x80000) [ 1170.862063][T25629] QAT: Invalid ioctl [ 1170.884983][T25582] QAT: Invalid ioctl 09:42:33 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x81, 0x200) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) 09:42:33 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023feffffff00000000000000000000000000000120a1070071756575"], 0x38) 09:42:33 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) clone(0x1403ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r3, 0x0, r3) 09:42:33 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) pipe2(0x0, 0x80000) 09:42:33 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) [ 1170.951140][T25629] QAT: Invalid ioctl 09:42:33 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) open_by_handle_at(r0, &(0x7f0000000080)={0xc1, 0xffffffffffff0001, "6a6ab51db50f8122e5962c6694df31bee9074a33fb7d583de9463767136b65e52a8b647253eb691d643f7515382300eae470d20b26bafd47eb09ae068b78f7679e52585149f85bfb12ee3454d013c8e74b48f08420fc3eb264b702e8296ada33b1b55afc0af604c3dd2d3664f7d43010d4780dfebf5cfa74429e38e7a9bb65caf0334fbb3809998d87c482211c2a735e4969c3861f0dce58f1a346df8312f40389e8b22d45bde9ec70df6c1430508de09bf64e365adcbfffe7"}, 0x400000) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) 09:42:33 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000001000000000000000000000120a1070071756575"], 0x38) 09:42:34 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) pipe2(0x0, 0x0) 09:42:34 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000000)={0x7, 0x29}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000240)={@initdev, 0x0}, &(0x7f0000000280)=0x14) connect(r0, &(0x7f00000002c0)=@can={0x1d, r2}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in=@remote, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000180)=0xe8) connect$can_bcm(r1, &(0x7f00000001c0)={0x1d, r3}, 0x10) [ 1171.210981][T25926] QAT: Invalid ioctl 09:42:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x9, 0x0, [], [{0x1f, 0x7, 0xfc, 0x744, 0x8, 0xffffffff}, {0x8, 0x5, 0x4, 0x2, 0x1ff}], [[], [], [], [], [], [], [], [], []]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000002c0)) 09:42:34 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x200000) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x2000) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00') [ 1171.291389][T25980] QAT: Invalid ioctl 09:42:34 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000004000000000000000000000120a1070071756575"], 0x38) 09:42:34 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40100, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400), &(0x7f00000002c0)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000000)={{0x6, @rand_addr=0xff, 0x4e22, 0x2, 'fo\x00', 0x1, 0x8, 0x64}, {@remote, 0x4e21, 0x2, 0x401, 0x5, 0x9}}, 0x44) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0x10) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000280)={0x10, 0x52, &(0x7f0000000300)="8e2fa6d710a6b032da1612d5971a30b8624bcaa7a315cabf849b1fe121b2c102787c4bbfa335b2c9f97ca767ba8167414badc03db34429141da512f12cf6fa78e69df247393b2069d4f4ce78592a95a587850c823aeff214b8764286c374eddcc83e01c6ba249c7bd72e6d32c024cc4ca9a87ac8ebbc773b12dec46e13fb6487336b9ed6b1c7323c9b0abc8556765ef0c91197cb13b202b87fb967e669741e4e28ba51705ca83e4d263cad64b4384be6a07fc63b4e78214e4536ded7180775726278cbb2bc49590d62c47d7474077a37fd35cdb265c0a54138657c5877df5f045cee3d4ffeed7a8d6fe1c9a225253d35aa0f59f147e462", {0xbf3, 0x200000000000000, 0x34367659, 0x6, 0x100000001, 0x7, 0x4}}) 09:42:34 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20080, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080)) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) getpgrp(r2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 1171.433652][T26036] binder: 26031:26036 ioctl c0c0583b 20000300 returned -22 09:42:34 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000008000000000000000000000120a1070071756575"], 0x38) 09:42:34 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x80000000000000, r0) 09:42:34 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40100, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400), &(0x7f00000002c0)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000000)={{0x6, @rand_addr=0xff, 0x4e22, 0x2, 'fo\x00', 0x1, 0x8, 0x64}, {@remote, 0x4e21, 0x2, 0x401, 0x5, 0x9}}, 0x44) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0x10) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000280)={0x10, 0x52, &(0x7f0000000300)="8e2fa6d710a6b032da1612d5971a30b8624bcaa7a315cabf849b1fe121b2c102787c4bbfa335b2c9f97ca767ba8167414badc03db34429141da512f12cf6fa78e69df247393b2069d4f4ce78592a95a587850c823aeff214b8764286c374eddcc83e01c6ba249c7bd72e6d32c024cc4ca9a87ac8ebbc773b12dec46e13fb6487336b9ed6b1c7323c9b0abc8556765ef0c91197cb13b202b87fb967e669741e4e28ba51705ca83e4d263cad64b4384be6a07fc63b4e78214e4536ded7180775726278cbb2bc49590d62c47d7474077a37fd35cdb265c0a54138657c5877df5f045cee3d4ffeed7a8d6fe1c9a225253d35aa0f59f147e462", {0xbf3, 0x200000000000000, 0x34367659, 0x6, 0x100000001, 0x7, 0x4}}) 09:42:34 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) clock_getres(0x7, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:34 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:34 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:34 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000001b000000000000000000000120a1070071756575"], 0x38) 09:42:34 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40100, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400), &(0x7f00000002c0)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000000)={{0x6, @rand_addr=0xff, 0x4e22, 0x2, 'fo\x00', 0x1, 0x8, 0x64}, {@remote, 0x4e21, 0x2, 0x401, 0x5, 0x9}}, 0x44) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0x10) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000280)={0x10, 0x52, &(0x7f0000000300)="8e2fa6d710a6b032da1612d5971a30b8624bcaa7a315cabf849b1fe121b2c102787c4bbfa335b2c9f97ca767ba8167414badc03db34429141da512f12cf6fa78e69df247393b2069d4f4ce78592a95a587850c823aeff214b8764286c374eddcc83e01c6ba249c7bd72e6d32c024cc4ca9a87ac8ebbc773b12dec46e13fb6487336b9ed6b1c7323c9b0abc8556765ef0c91197cb13b202b87fb967e669741e4e28ba51705ca83e4d263cad64b4384be6a07fc63b4e78214e4536ded7180775726278cbb2bc49590d62c47d7474077a37fd35cdb265c0a54138657c5877df5f045cee3d4ffeed7a8d6fe1c9a225253d35aa0f59f147e462", {0xbf3, 0x200000000000000, 0x34367659, 0x6, 0x100000001, 0x7, 0x4}}) 09:42:34 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) fcntl$dupfd(r0, 0x0, r0) 09:42:34 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:34 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000002c0)) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x0, 0x6c, 0x5, 0x400, 0x16, 0x4ec, 0xccc, 0x1, 0x1e6, 0xfff}) 09:42:34 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000001f000000000000000000000120a1070071756575"], 0x38) 09:42:34 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40100, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400), &(0x7f00000002c0)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000000)={{0x6, @rand_addr=0xff, 0x4e22, 0x2, 'fo\x00', 0x1, 0x8, 0x64}, {@remote, 0x4e21, 0x2, 0x401, 0x5, 0x9}}, 0x44) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0x10) 09:42:34 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fadvise64(r0, 0x0, 0x8, 0x1) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:35 executing program 2: setrlimit(0x0, &(0x7f0000000080)={0x7, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x406, r0) 09:42:35 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000040000000000000000000000120a1070071756575"], 0x38) 09:42:35 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40100, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400), &(0x7f00000002c0)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000000)={{0x6, @rand_addr=0xff, 0x4e22, 0x2, 'fo\x00', 0x1, 0x8, 0x64}, {@remote, 0x4e21, 0x2, 0x401, 0x5, 0x9}}, 0x44) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) 09:42:35 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x110) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffff800, 0xfffffffffffffffa, 0xffffffffffffff7e}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x1ddc, 0x6, [0x6, 0x20, 0xddb, 0x8, 0x6, 0x0]}, 0x14) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000100)={r3, 0x1fee134e1de93ef}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:35 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x34880, 0x4) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000180)=0x7, 0x4) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000140)=0x2, 0x4) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000080)="2f18036df1cb72bd5bf0a49c8fc8dfad7c3140b30e87728655be8b6238612dcaf056dc560ed6f832bf1e013f1601af49e80f4a3699f5ac118d903b41a701bce2d3ca4a5de5c82d2b33dac44affaab94945cf2609a44686ad5d2c0a6809117544507ccc2bfed9854afd494745bb454628ec35ea1e8743bc6e6a6fdf4003455c3039a59ed2168dce8ef6aa9a10fe128f332342826b13bb8de17b65aea192bae55f3cf6f4e6615b5da2f8a5f0395704a91636d6965a7c3b4b2f797e79db06", 0xbd) 09:42:35 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40100, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400), &(0x7f00000002c0)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000000)={{0x6, @rand_addr=0xff, 0x4e22, 0x2, 'fo\x00', 0x1, 0x8, 0x64}, {@remote, 0x4e21, 0x2, 0x401, 0x5, 0x9}}, 0x44) 09:42:35 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000003c0)={'filter\x00', 0x3c, "69bf368d63e20be4d2146a82c5a15136611866adb7c7f94cfffb57eaf0ddbceac23402d3fcd6ed92af0a9a41cbb797e6ff1a24a1d355051caba867c9"}, &(0x7f0000000440)=0x60) r1 = syz_open_dev$adsp(&(0x7f00000004c0)='/dev/adsp#\x00', 0x101, 0x200) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x0, 0x48}]}, 0xc, 0x2) splice(r1, &(0x7f0000000000), r1, &(0x7f00000002c0)=0x58, 0xfffffffffffff2df, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) close(r3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x18) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) readv(r3, &(0x7f00000002c0), 0x18f) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r4 = fcntl$dupfd(r1, 0x406, r1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xae5) r5 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) setsockopt$sock_timeval(r5, 0x1, 0x13, &(0x7f0000000040), 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) preadv(r4, &(0x7f0000000480), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000300)={0x0, {0x100000001, 0x2}}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000340)=r4, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000240)={0xffffffff, 0x6, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x6, 0xa7d}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000200)) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000001c0)=0xffffffff80000001) fcntl$dupfd(r4, 0x0, r6) 09:42:35 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = getpid() getpriority(0x0, r2) 09:42:35 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2040, 0x0) 09:42:35 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000007d000000000000000000000120a1070071756575"], 0x38) 09:42:35 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40100, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400), &(0x7f00000002c0)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) fcntl$dupfd(r1, 0x0, r1) 09:42:35 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000bf000000000000000000000120a1070071756575"], 0x38) 09:42:35 executing program 4: r0 = msgget$private(0x0, 0x20) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000040)=""/47) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 09:42:35 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:35 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x404600, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/19, &(0x7f0000000100)=0x13) write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x80, 0x1, 0x2}, 0x2}}, 0x18) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) 09:42:35 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000100)=@srh={0x2d, 0x10, 0x4, 0x8, 0x53a, 0x38, 0x8000, [@rand_addr="0edada41372a7af0b15aeeaeea61e335", @ipv4={[], [], @empty}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @empty, @local, @empty]}, 0x88) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:35 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40100, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400), &(0x7f00000002c0)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) socket$inet6_udp(0xa, 0x2, 0x0) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:35 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000001f4000000000000000000000120a1070071756575"], 0x38) 09:42:35 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffff4729) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x100, 0x80}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:35 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000fffffffd000000000000000000000120a1070071756575"], 0x38) 09:42:35 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0x1, 0x0, [], {0x0, @bt={0x7, 0x3, 0x0, 0x1, 0x14a3, 0x8, 0x2, 0x1ff, 0x1, 0x5, 0x0, 0x81, 0x6, 0x5, 0x0, 0x10}}}) 09:42:36 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x303003) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x140, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000280)="6156ad88e8329e1efaa44d4e2cd4aa550fc87fbf5625203697a9bfd28c6a57a641a09bed59cf9989bf96a96ea497efa968fc8d76f499e4cb74e6da776f74df5e8cc15aacce33b0d298496188cef581894e67b42e2f577fa276331e0846e65af841fac348e5520c050262ff25190583086bb128216a610e85e97df4a885ac738de0654e76f572", 0x86) fcntl$dupfd(r2, 0x0, r2) 09:42:36 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40100, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400), &(0x7f00000002c0)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:36 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000080)={0x5, 0x0, 0x7fff, 0x1, '\x00', 0x4}) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) 09:42:36 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x1) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000140)) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x20800) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x5, 0x1f, [], &(0x7f0000000080)=0x4}) 09:42:36 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40100, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400), &(0x7f00000002c0)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:36 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000fffffffe000000000000000000000120a1070071756575"], 0x38) 09:42:36 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0xffffffffeffffe00, 0xffffffffffffffff) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bcsf0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in=@empty, @in=@remote, 0x4e21, 0x0, 0x4e23, 0xffffffffffffffff, 0xa, 0xa0, 0xa0, 0xc, r3, r4}, {0x7f, 0x5, 0x100, 0x1, 0x101, 0x4, 0x8, 0x100000001}, {0x10001, 0xffffffff, 0x3ff, 0x32}, 0x7, 0x6e6bb5, 0x1, 0xcfe0365e04541319, 0x1, 0x3}, {{@in6=@empty, 0x4d4, 0x6c}, 0xa, @in6=@mcast2, 0x0, 0x4, 0x3, 0x4, 0x1, 0x2, 0x9}}, 0xe8) 09:42:36 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8001, 0x1, 0x3, 0xfffffffffffffffa, 0x6}) readahead(r0, 0x0, 0x200) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:36 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x61f, 0x40) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xad, "74e908f7dc921b0b268ed5290b093db3cbc00a8b9f899b363f93aab17fff3c37bf7e69a94fdaead3aeca305ad91e41eeb4329a4f2fe7bbab7552a87250a71e1d4e662770ebe4f1528ab774f6a2a0bb8aa582e75f2470f7dc647ed508c07fd269fe0fecb35ef2dc7be5ededfbc6b7aeaa49a06662b04bb8cd5bc0b8819c7735d58d41628ea45c7243f0a4c9a913c1cc197e623a45a87dba19e18ad2bcf82b2f3daece3fc685590e47060bae4e70"}, &(0x7f0000000040)=0xb5) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x140000000000000}, 0x8) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f00000001c0)={0x17890fef, "be059b62425efa06212db522cf618f6376a2a4554515eb35a1be1eae535e4282", 0x4, 0x80, 0xdaa, 0x5, 0x10, 0x3, 0x7, 0x1}) 09:42:36 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = dup(r1) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) 09:42:36 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230004000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:36 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40100, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400), &(0x7f00000002c0)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:36 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7811, 0x40841) fchmod(r0, 0x1) socket$caif_seqpacket(0x25, 0x5, 0x4) fcntl$dupfd(r0, 0x0, r0) 09:42:36 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={{0xfffffffffffff256, 0x80000000, 0x3a, 0x8c90, 0x2, 0x1}, 0x5, 0x5736, 0x0, 0xce, 0x1, "94df27f0824d0aa0aa08106ae364de5b58a21c50c252cd41f758d01c1357f5479a683f2ed92017ed41bdd749335f6cef471fae8c3d7766b3a5dfe088f8017e84fafaf54af794425945044d9203fcbeb90a6d137591f210822a1be4d5a8608ce78d3594c63e31ced36653efcf12551d532697781a24586a6a81001ad9fae2998a"}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000180)=""/46, 0x2e}], 0x2) fcntl$dupfd(r1, 0x0, r1) 09:42:36 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40100, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400), &(0x7f00000002c0)) socket$inet6_udp(0xa, 0x2, 0x0) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:36 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000400)={0xbca, 0x535b, 0xffffffffffff0074, 0x8, 0x80000000, 0x6a}) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001500)={0x7ff, 0x2, 0xffffffff, 0x4, 0x0}, &(0x7f0000001540)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000001580)={r2, 0x1b19}, &(0x7f00000015c0)=0x8) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10000, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0x1, &(0x7f00000000c0)=0xdafc, 0x4) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000080)={0x4, 0xc00000, 0x0, 0x703}) r4 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="8846adca48f71b7a76f050819417962c957fe6c2e753595e", 0x18, 0xfffffffffffffffc) r5 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000300)="e3f3e52adb4ccb827424b9caed3d2d3b898d7ee8d2c124d733226cc9e4d12e4107aa2e322ad849a2852395d3c4e1ffbf914e632e2f9ee6f6e07148dec18768065d05dacf74c179857a426156fde30b63edaf8e4465e4710c374e05c15a0d1f8d2a30d380d1d2f05ba862a5504554761a3cc01951b9eed293beffdfc6d4762dde6a27646cf27cbdaeb76376e6", 0x8c, 0xfffffffffffffffa) getsockopt$sock_buf(r3, 0x1, 0x3f, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000240)=@keyring={'key_or_keyring:', r5}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)={&(0x7f0000000280)='./file0\x00', r3}, 0x10) 09:42:36 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230008000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:36 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={{0xfffffffffffff256, 0x80000000, 0x3a, 0x8c90, 0x2, 0x1}, 0x5, 0x5736, 0x0, 0xce, 0x1, "94df27f0824d0aa0aa08106ae364de5b58a21c50c252cd41f758d01c1357f5479a683f2ed92017ed41bdd749335f6cef471fae8c3d7766b3a5dfe088f8017e84fafaf54af794425945044d9203fcbeb90a6d137591f210822a1be4d5a8608ce78d3594c63e31ced36653efcf12551d532697781a24586a6a81001ad9fae2998a"}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000180)=""/46, 0x2e}], 0x2) fcntl$dupfd(r1, 0x0, r1) 09:42:36 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40100, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:36 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000180)={0x3, @win={{0x0, 0x0, 0x400, 0x1}, 0x3, 0xf, &(0x7f00000000c0)={{0x4, 0x7fff, 0x100, 0x8}, &(0x7f0000000040)={{0x8, 0x4, 0x4, 0x8}, &(0x7f0000000000)={{0x5, 0x70e000, 0x401, 0x3b}}}}, 0x100, &(0x7f0000000100)="0a1596e4e2d437345b17419a4daa66e76e6fb952c5d65453af60ecfb0537fdee8a2044511d8681857118da64bfb5f7fa0c70bdfccf415f5c445277c1f51faac13655229ef85683633ab1c886a3d1f831dd906b958e6a34be636c2933aea6adc1b1", 0x565a4a00}}) 09:42:36 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = dup2(r1, r1) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000040)={0x10000, 0x6, 0x8}) 09:42:36 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023001b000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7, 0x20001) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000140)=0x1, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x200841, 0xe540) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="21000000030000000000000000000000030000000000"], 0x21) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x118) 09:42:37 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={{0xfffffffffffff256, 0x80000000, 0x3a, 0x8c90, 0x2, 0x1}, 0x5, 0x5736, 0x0, 0xce, 0x1, "94df27f0824d0aa0aa08106ae364de5b58a21c50c252cd41f758d01c1357f5479a683f2ed92017ed41bdd749335f6cef471fae8c3d7766b3a5dfe088f8017e84fafaf54af794425945044d9203fcbeb90a6d137591f210822a1be4d5a8608ce78d3594c63e31ced36653efcf12551d532697781a24586a6a81001ad9fae2998a"}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000180)=""/46, 0x2e}], 0x2) fcntl$dupfd(r1, 0x0, r1) 09:42:37 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000000c0)={0x80000000, 0xd6, 0x7, 'queue0\x00', 0x64d8}) 09:42:37 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={{0xfffffffffffff256, 0x80000000, 0x3a, 0x8c90, 0x2, 0x1}, 0x5, 0x5736, 0x0, 0xce, 0x1, "94df27f0824d0aa0aa08106ae364de5b58a21c50c252cd41f758d01c1357f5479a683f2ed92017ed41bdd749335f6cef471fae8c3d7766b3a5dfe088f8017e84fafaf54af794425945044d9203fcbeb90a6d137591f210822a1be4d5a8608ce78d3594c63e31ced36653efcf12551d532697781a24586a6a81001ad9fae2998a"}) socket$inet6_udp(0xa, 0x2, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000180)=""/46, 0x2e}], 0x2) 09:42:37 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023007d000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:37 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:37 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100, 0x311002) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x6c9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0x10000, 0x30, 0x8000, 0x70ba71fe}, &(0x7f0000000140)=0x18) getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r2) 09:42:37 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1f, 0x40800) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000001cc0)={@empty, @empty, 0x0}, &(0x7f0000001d00)=0xc) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000001e80)={&(0x7f0000001d40)={0x1d, r2}, 0x10, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x0, 0x100, 0x9, {0x77359400}, {r3, r4/1000+10000}, {0x0, 0x6, 0x6, 0x4}, 0x1, @can={{0x3, 0x100000000, 0x0, 0xfffffffffffffffe}, 0x6, 0x2, 0x0, 0x0, "64cefe05c9b7883b"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r5 = eventfd(0x1b5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x4, r5}) 09:42:37 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={{0xfffffffffffff256, 0x80000000, 0x3a, 0x8c90, 0x2, 0x1}, 0x5, 0x5736, 0x0, 0xce, 0x1, "94df27f0824d0aa0aa08106ae364de5b58a21c50c252cd41f758d01c1357f5479a683f2ed92017ed41bdd749335f6cef471fae8c3d7766b3a5dfe088f8017e84fafaf54af794425945044d9203fcbeb90a6d137591f210822a1be4d5a8608ce78d3594c63e31ced36653efcf12551d532697781a24586a6a81001ad9fae2998a"}) socket$inet6_udp(0xa, 0x2, 0x0) 09:42:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x2, 0x3}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000100)) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10001, 0x440) write$P9_RLOPEN(r1, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x2, 0x3, 0x2}, 0xfffffffffffffffe}}, 0x18) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)) 09:42:37 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300bf000000000000000000000000000000000120a1070071756575"], 0x38) 09:42:37 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={{0xfffffffffffff256, 0x80000000, 0x3a, 0x8c90, 0x2, 0x1}, 0x5, 0x5736, 0x0, 0xce, 0x1, "94df27f0824d0aa0aa08106ae364de5b58a21c50c252cd41f758d01c1357f5479a683f2ed92017ed41bdd749335f6cef471fae8c3d7766b3a5dfe088f8017e84fafaf54af794425945044d9203fcbeb90a6d137591f210822a1be4d5a8608ce78d3594c63e31ced36653efcf12551d532697781a24586a6a81001ad9fae2998a"}) 09:42:37 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:37 executing program 2: r0 = semget(0x0, 0x3, 0x500) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/43) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000040)=0x5b0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0x9, 0x4) read$eventfd(r2, &(0x7f0000000100), 0x8) 09:42:37 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300f4010000000000000000000000000000000120a1070071756575"], 0x38) 09:42:37 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:37 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) recvfrom$inet(r1, &(0x7f00000000c0)=""/63, 0x3f, 0x2000, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) r2 = eventfd(0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000180)={0x0, @src_change}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) 09:42:37 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:37 executing program 4: socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x101040, 0x0) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000080)="521988092f2767006b44183c18dd5eb6ef4d45779d56b0d2bc34b7b63a3288693ffcdfff9dc55ee933145426679aaafcf062bf7e9b702f8fd85824d22553574ea9f50f8f0ded49bf67f37d088a964194a94b47fedb44638a6bce0fdeb9804130acee4cd2a237efe5f7243e9297e8059db4789abc7f37c254a50f1ea31accdece38f8e5ad312749c8623b98dd43dbe38225cf52b5fc5ec791a9b02d077de668a346d5f2986f5499", 0xa7, 0xffffffffffffff01, 0x0, 0x3, r2}, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:37 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x3, r2}) 09:42:37 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300001b0000000000000000000000000000000120a1070071756575"], 0x38) 09:42:38 executing program 4: socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:38 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:38 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300001f0000000000000000000000000000000120a1070071756575"], 0x38) 09:42:38 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40000, 0x0) bind$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x7fffffff, 0x5, 0x0, 0x6}) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) 09:42:38 executing program 4: socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:38 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) delete_module(&(0x7f0000000000)='md5sumGPL\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) 09:42:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = dup2(r0, r0) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x2}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="ab07392b8f548660ece079bd99432669b0958f715e109fbf20e3284559bb677e6171ec47800576f64aa7623a4a9623bba11bb0165fe1f9926492c62eedaf863cc4f789615458fdba67e8ea4e293e1245a81c52630f80b4412b931fa8ff933e27", 0x60}, {&(0x7f0000000100)="368819c6db7e2083d1", 0x9}, {&(0x7f0000000140)="36520a7a5e98c066379b164eabe9e8659d06a9d4d988965d9cdd0da5e9b60b85b8b54cb1115df62fae08af60ded7497733f5ceca8b13bde21caefb9474584df96d5fcc24c17c4fc1dc43ccdf4d33b489", 0x50}], 0x3, &(0x7f0000000300)="ce8de07efc725ddf3bffa9b97225129b7f94235a9d1bcadaa3668ac299e154f093a1856bd5c3bfb4ab54737dbfc19b492224b12cc53f3f36feef207b9d303fa9545cd7a4b1edd106c512566347cf700217bb0b84947a9d7ef75da704444aacffe50aa744d9a2e5f9abf1c95e3678d07ef4d40f1de2707e1930ca148db51bd422ad1dcc2c7709e8e381e6dfa4090319be8b994693cb9a77589632fdbdc0f3a5ecfab52908bd7052fb201344ab7a3fc6b8c026d65f3e78d4d1558df97807708492e49d959f65d5617537dffe3d8c05a054d0caeb55db384e3c35c20f", 0xdb, 0x4008811}, 0x20004040) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000240)=0xffffffffae9fb6a1, 0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:38 executing program 5: setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:38 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000400000000000000000000000000000000120a1070071756575"], 0x38) 09:42:38 executing program 4: setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:38 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300007d0000000000000000000000000000000120a1070071756575"], 0x38) 09:42:38 executing program 2: setrlimit(0xe, &(0x7f0000000080)={0x4, 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0xffffffff00000001, 0x3, 0x1, 0x0, 0x9, 0x9}, 0x20) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000000)={0x31, 0x2f, 0x3, 0x14, 0x2, 0x4, 0x6, 0xe7, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) 09:42:38 executing program 5: setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:38 executing program 4: setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xa0000, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x4c3, 0x1, 0x4, 0x2}) 09:42:38 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:38 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000bf0000000000000000000000000000000120a1070071756575"], 0x38) 09:42:38 executing program 4: setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:38 executing program 5: setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:38 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={r2, 0x7fff}, 0x8) fcntl$dupfd(r0, 0x0, r0) 09:42:38 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x2000, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)=0x4) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) 09:42:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x101000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000100)=""/228, &(0x7f0000000200)=0xe4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)={0x10000000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:38 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230001f40000000000000000000000000000000120a1070071756575"], 0x38) 09:42:38 executing program 4: setrlimit(0x1000000000000007, 0x0) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:39 executing program 5: setrlimit(0x1000000000000007, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:39 executing program 4: setrlimit(0x1000000000000007, 0x0) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:39 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000001000000000000000000000000000120a1070071756575"], 0x38) 09:42:39 executing program 5: setrlimit(0x1000000000000007, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:39 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x48000, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x3) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000000)=[0x6, 0x8]) 09:42:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="6d5583174b0b55e828a0999854db7bc20dec2c0e39c69cccaae5db0f1cecb1b51923219bf2c5972704f79c9062e7663b01838f01a829c7a6bdc3229d6674d455d774306cb37f6f943152db9ff9b283f2b1dac8c29879fb3a83017cc423df305dafe2a23da615", 0x66, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={r1, 0x9, 0x7e}, &(0x7f0000000180)={'enc=', 'pkcs1', ' hash=', {'nhpoly1305-sse2\x00'}}, &(0x7f0000000200)="0edfa259472194d63e", &(0x7f0000000240)=""/126) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1) 09:42:39 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 09:42:39 executing program 4: setrlimit(0x1000000000000007, 0x0) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:39 executing program 5: setrlimit(0x1000000000000007, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:39 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000004000000000000000000000000000120a1070071756575"], 0x38) 09:42:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000000c0)={0x9, 0x4, 0x401, 0x4, '\x00', 0x100}) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x82041, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r2, 0x0, r2) 09:42:39 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000008000000000000000000000000000120a1070071756575"], 0x38) 09:42:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:39 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x0, 0x28}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:39 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x5, 0xe76, [0x0, 0x20000300, 0x20000d9c, 0x20000eea], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x0, 0x1, 0x8aeb, 'team0\x00', 'bridge_slave_0\x00', 'team_slave_1\x00', 'ipddp0\x00', @random="49b4525cf35d", [0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff], 0xa6, 0x10e, 0x13e, [@cluster={'cluster\x00', 0x10, {{0x1, 0x4, 0x0, 0x1}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0x10}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}}, {0x13, 0x10, 0x88be, 'team0\x00', 'hsr0\x00', 'veth1_to_hsr\x00', 'hsr0\x00', @broadcast, [0x0, 0xff, 0x0, 0xff], @local, [0xff, 0x17cf7e9f12ff00bd, 0xff, 0xff, 0xff, 0xff], 0x8fe, 0x8fe, 0x92e, [@among={'among\x00', 0x868, {{@offset, @offset, 0x2, {[0x4, 0xf6cc, 0x8, 0x776, 0x8, 0x100000000, 0xe9ff, 0x7, 0x3, 0x3, 0xb4, 0x1, 0xd48a, 0x1, 0x243d000000000000, 0x7, 0x4, 0x0, 0x4, 0x800, 0x6, 0x0, 0x7fffffff, 0x8, 0x7, 0x1, 0x800, 0x7f, 0x3448, 0xbd, 0x1, 0x1, 0x800, 0x20, 0x1, 0xba, 0x7, 0x0, 0xff, 0x7, 0x0, 0x100, 0x5003, 0x10001, 0x7, 0xffffffff, 0x7, 0x40, 0x5, 0x2, 0x10000, 0x6, 0x0, 0x200, 0x4, 0x7, 0x0, 0x44a, 0x2, 0x0, 0x10000, 0x7, 0x1, 0x1, 0x81, 0x100000001, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffeffffffff, 0x7, 0x4, 0x6, 0x7, 0x4, 0x9, 0x2, 0xffffffff, 0x67, 0x7, 0x329, 0x89, 0x8, 0x9, 0x9, 0x7f, 0xfffffffffffffffa, 0xff, 0x8, 0x2000000000000, 0x8, 0xf0, 0x80000001, 0x7, 0x9, 0x8, 0xff, 0x81, 0x3, 0x1e88, 0xc4ed, 0x80000001, 0x1ff, 0x296f9b91, 0x7f, 0x5, 0x0, 0xb33, 0x8, 0x8, 0x1, 0x5, 0x0, 0x4, 0xfffffffffffffffc, 0x7, 0x0, 0x5d9, 0x81, 0xbf5, 0x7, 0x1dd2, 0x7, 0x20, 0x6, 0x5, 0x40, 0x0, 0x0, 0xfffffffffffff02c, 0x0, 0x5, 0xfe, 0xf4, 0x61cc, 0x401, 0x9, 0x100, 0x5, 0xfff, 0x3, 0x3, 0x4, 0x910, 0x3, 0x3, 0x3, 0x1, 0xfffffffffffffffe, 0x3ff, 0x7fffffff, 0x6, 0xca2, 0x1, 0x9, 0x8001, 0x6, 0x1ff, 0x40, 0x3, 0x8000, 0xb35, 0x4, 0xffffffff, 0x5, 0x8, 0x55, 0x0, 0x80000001, 0x4, 0x7, 0x8001, 0x400, 0x3, 0x9ea, 0x6, 0x80000000, 0xffffffffffff2efe, 0x3, 0x8, 0x3f, 0x80, 0x1, 0x1b, 0x0, 0xff, 0x6, 0x9, 0x3, 0x7f, 0x0, 0x8aa, 0x4, 0x729, 0x0, 0x2e02, 0x8, 0x80000001, 0x10000, 0x2, 0x1, 0xffffffffffff0001, 0x1, 0x511c5b84, 0x0, 0x0, 0x81, 0x2, 0x10000, 0xee, 0x7, 0x8, 0x8, 0x3ff, 0x6, 0x80, 0x1ff, 0x3, 0x67, 0x5, 0x7f, 0x5, 0x4, 0xffff, 0x1000, 0x80, 0x200, 0x4, 0x4, 0x9b1, 0x3ff, 0x3, 0xffff, 0xcc5, 0x1f, 0x0, 0x2, 0x2, 0x2, 0x2, 0xffffffff, 0x4, 0xaa1c, 0x3f, 0x9, 0x3, 0x3, 0xa307, 0x0, 0xfff, 0x2, 0x8001, 0x8001, 0x6738e0de, 0x1], 0x5, [{[0x6, 0x81], @multicast1}, {[0x0, 0x81], @multicast2}, {[0xb33e, 0x95], @rand_addr=0x2}, {[0xffffffff, 0x9], @broadcast}, {[0x3, 0x6], @rand_addr=0x5}]}, {[0x8, 0x101, 0x0, 0x1, 0x5eafd6e9, 0x101, 0x9, 0x100000000, 0x9, 0x6, 0xfffffffffffffff7, 0x200, 0xfffffffffffffc2b, 0x7d, 0x80000001, 0x72, 0x1ff, 0x6197, 0x5f7e, 0x7, 0xffffffff, 0x10000000, 0xffffffff, 0x80000001, 0x6, 0x3, 0x8, 0x4, 0xffffffffffffff5d, 0x3, 0x9, 0xa1ee, 0x100000000, 0x7fffffff, 0x7f, 0x7, 0x3, 0x7, 0x200, 0xffffffff, 0xff, 0x8, 0x7f, 0x8, 0x4, 0x2, 0x99, 0x6, 0x4, 0xff, 0xffffffffffffe7b1, 0xdf, 0x101, 0xd, 0x8, 0x7ff, 0x1, 0x6c18, 0x800, 0x3, 0x0, 0x0, 0xc59a, 0x85, 0x8, 0x9, 0x5, 0x8, 0x8001, 0xe, 0x1f, 0x9, 0x6, 0x81, 0x8, 0x3c5, 0x3, 0x4, 0x7fffffff, 0x401, 0x6, 0xb3a8, 0x1, 0x8, 0x10001, 0x4, 0x3, 0x7, 0x800, 0x10000, 0xb97e, 0x200, 0x0, 0x10000, 0x2e2, 0x20, 0x101, 0x0, 0x3, 0xfffffffffffffffc, 0x9, 0x2, 0x5, 0x6, 0x9, 0x6d7ea264, 0xfffffffffffffffd, 0x1f, 0x1, 0x0, 0x5, 0x3, 0x1, 0x20, 0x9, 0x1000, 0x3f, 0x5, 0x9, 0x4, 0x508880000000, 0x2, 0x3f75, 0x3d4, 0xfffffffffffffe01, 0x7, 0x7, 0x8, 0x10001, 0x3, 0x1f, 0xfff, 0x7, 0x8000, 0x7, 0x5, 0x456, 0xa4a, 0x45, 0x40, 0x2, 0x1, 0x9, 0x6, 0xfffffffffffffffd, 0xe1, 0xffffffffffffff81, 0x9, 0x0, 0x2, 0x8, 0x6, 0x8, 0x40, 0x4, 0x100000000, 0x7, 0x5, 0x7fffffff, 0x10001, 0x100000001, 0xd67a, 0x3, 0x400, 0x3, 0x772, 0x4, 0x8001, 0xfffffffffffffffd, 0x3, 0x1, 0x3, 0x1, 0x4, 0xffc000000000, 0x8, 0x7, 0x40, 0xffffffff, 0x2, 0x1, 0x0, 0x825, 0x0, 0x5, 0x0, 0x1f, 0xc102, 0x7e9, 0x2, 0x3, 0x100000000, 0x6, 0x3d6, 0x401, 0x0, 0x3, 0x8, 0x100, 0x81, 0xffff, 0x4, 0x3, 0x1, 0x10000, 0x4, 0x3, 0x9, 0x1, 0x200, 0x81, 0x9, 0x100, 0xc, 0x8, 0x1ff, 0x3ff, 0x13c8, 0x1, 0x2, 0xaafb, 0xffff, 0xffffffff, 0x25, 0x9, 0x80000000, 0x4, 0x400, 0x1, 0xffffffffffff8001, 0x101, 0xaa4b, 0x10001, 0x9, 0x4e, 0x561, 0x3, 0x0, 0x4, 0x100000000, 0x1000, 0x1, 0x80000, 0x40, 0x81, 0x9, 0x5, 0x8000, 0x100000001, 0x8, 0x8000, 0x4, 0x7, 0xf05, 0x0, 0xffffffff, 0xc2], 0x1, [{[0x0, 0x8], @broadcast}]}}}}], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x9, 0x2, 0x893f, 'tunl0\x00', 'veth0_to_team\x00', 'veth1_to_bridge\x00', 'lapb0\x00', @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0xee, 0x11e, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x10000}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz0\x00', 0x80000000}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x0, 0x3d, 0x0, 'veth0_to_bridge\x00', 'bridge_slave_0\x00', 'vlan0\x00', 'gretap0\x00', @dev={[], 0x24}, [0xff, 0x0, 0xff, 0xff], @random="7f83bc52af7b", [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xde, 0xde, 0x10e, [@pkttype={'pkttype\x00', 0x8, {{0x6, 0x1}}}, @connbytes={'connbytes\x00', 0x18, {{0x888, 0x5, 0x3, 0x2}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}, {0x7, 0xa, 0x8035, 'hsr0\x00', 'bpq0\x00', 'veth1_to_bridge\x00', 'veth1\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0xbe, 0xee, 0x11e, [@helper={'helper\x00', 0x28, {{0x1, 'irc-20000\x00'}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x7ff}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffe}]}, 0xeee) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:39 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x0, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:39 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000001b000000000000000000000000000120a1070071756575"], 0x38) 09:42:39 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x0, 0x28}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:39 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x9, 0x200800) write$UHID_INPUT(r1, &(0x7f00000001c0)={0x8, "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", 0x1000}, 0x1006) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9200008}, 0xc, &(0x7f0000000100)={&(0x7f0000001200)=ANY=[@ANYBLOB="34000000b48011c17d9113d5ffb41e2bf6e1c5a7c19b17b4ed7795fe182954304014c04c7e1e84d4e428bcd8ccbc32b4730d3047e04420eaa951e861de61a2a28ea387a2758bdb01e92199e97ff072a7a0115d10de9e8a356a0128ed6c563b84665be514f7b20e101ae3c43635f85d3d0dc33437e01801b862a54c00b63826722cdd5e9e7a19c1b0aa07fbbf41d84a420e6e922abe9e6aa58354f66489fd24e7c616f354f89638c183e9d43c2334595ab3298f86b7b3927783cdc7aee6c772109fababc787e2fae15eb6ef", @ANYRES16=r3, @ANYBLOB="050027bd7000fddbdf25010000000000000001410000001800170000001c000000207564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x8840}, 0x20000000) 09:42:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 09:42:39 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80000) 09:42:39 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000001f000000000000000000000000000120a1070071756575"], 0x38) 09:42:40 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x0, 0x28}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:40 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x0) 09:42:40 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) write$FUSE_ATTR(r2, &(0x7f0000000300)={0x78, 0x0, 0x6, {0x3d9e, 0x1, 0x0, {0x0, 0xffffffffffffffe1, 0x20, 0x1000, 0x4, 0x7e0, 0x1, 0x8, 0x5, 0x4, 0xfc, r3, r4, 0x13f, 0xe6c}}}, 0x78) 09:42:40 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x80000) 09:42:40 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000040000000000000000000000000000120a1070071756575"], 0x38) 09:42:40 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:40 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:40 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) 09:42:40 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x68, "41901c28e4e2ed1f3f6eef56a37fcd648ed1b75945e63e732d3db7443ab322ebcb3889ae18ad7889ce6c8d0e523ed58dd5d2756f3b3d0b33e4219bd872ade39934fcfc3db8ec5d2e5e1ceb7a9a856b202656f14f54538bdb4ad303c49514efdd18b76fac7e94e276"}, &(0x7f0000000280)=0x70) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="00652c9961711b7b6518f6000400"], 0x12) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000100)={0x9, 0x8, {0x52, 0x49, 0x1a116bd2, {0x858b}, {0x20, 0x1000000}, @period={0x5b, 0x5, 0x4, 0x2, 0x10001, {0x7c00000, 0x0, 0x3f, 0xec}, 0x5, &(0x7f00000000c0)=[0x1, 0x9, 0x80, 0x3, 0x200]}}, {0x0, 0x1b1a, 0x7, {0x9, 0x7ff}, {0x0, 0x5}, @cond=[{0x3, 0x1, 0x7fff, 0x80000001, 0x100000000, 0x4b}, {0x0, 0x100000000, 0x2, 0x5, 0x1ff, 0x7}]}}) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x2) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000300)={0xc3d, 0x6, 0x7, 0x80000001, 0x18, 0x8}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) 09:42:40 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:40 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000007d000000000000000000000000000120a1070071756575"], 0x38) 09:42:40 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x40000) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000000c0)=ANY=[@ANYBLOB="010009000000aee1"]) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000180)={r2, 0x7fff}, 0x8) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x2, r3}) 09:42:40 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4}) socketpair(0x9, 0x0, 0x9e, &(0x7f0000000000)) 09:42:40 executing program 5: io_cancel(0x0, 0x0, 0x0) 09:42:40 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) socket$inet(0x2, 0x3, 0x8) 09:42:40 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000bf000000000000000000000000000120a1070071756575"], 0x38) 09:42:40 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x91e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfe47bf070") r2 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x80001a}) 09:42:40 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socketpair(0x0, 0x0, 0x9e, &(0x7f0000000000)) 09:42:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0x9, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0xff7b, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500001c000000000000907800000000ffffffff00c00e78e0000001"], 0x0) 09:42:40 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x8, 0x20}, &(0x7f0000000180)=0xc) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xf8, r3, 0x204, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x4) r4 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000002c0)={0x0, r4}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x1, 0x6, 0x2, 0x400, 0x100000001, 0x5}) 09:42:40 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000001f4000000000000000000000000000120a1070071756575"], 0x38) 09:42:40 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) fcntl$dupfd(r0, 0x0, r0) 09:42:40 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 09:42:40 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) write$apparmor_current(r0, &(0x7f0000000200)=@profile={'changeprofile ', 'id_legacy\x00'}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) keyctl$update(0x2, r2, &(0x7f0000000300)="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", 0x1000) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000002c0)) fsetxattr$security_smack_transmute(r1, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x0) [ 1178.109173][T32407] tpacket_rcv: packet too big, clamped from 65389 to 65383. macoff=105 09:42:41 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300fffffffd000000000000000000000000000120a1070071756575"], 0x38) 09:42:41 executing program 5: mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000001280)='./file0\x00', 0x2, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf}, 0xf) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e) chmod(&(0x7f0000000040)='./bus\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) 09:42:41 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x10000) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000200)) r2 = fcntl$dupfd(r0, 0x0, r1) openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$tun(r2, &(0x7f00000000c0)={@val={0x0, 0x9ab5}, @void, @x25={0x1, 0xfffffffffffffff7, 0x1, "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"}}, 0x103) 09:42:41 executing program 4: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socketpair(0x0, 0x0, 0x0, 0x0) 09:42:41 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x5) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x44000, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000200)={0xf, 0x1f, 0x2, 0x1}, 0xf) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={r4, @in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x8}, 0x90) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:41 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300fffffffe000000000000000000000000000120a1070071756575"], 0x38) 09:42:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = shmget(0x2, 0x4000, 0x78000002, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) 09:42:41 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000640)="3166d21642bf89c3a733df524e0f9d6aa684e93bafa7c6c7eeb0cd5979c291f57645557149fdebc07e5193897fb637f72f5dd8c1ed9d82a051f10ce8c86d0a14154a11c0698a54384776173b848ed95bc05f82afca6430135acb0510b6dfd8ce55176a9704d0a5c4beec6d74766ee7afc2701e18edcc7c5c16282de07b0f8882f964f86569e89e48a430e5924a93ef0c52baded3f94f4f4b5b2dccb0320c0bb39552a166e9b9b83c4afa684868c07783685162b4517b8a26fdf625c9d5dc581d15a665a2996dd435b0", 0xc9, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="4fa8e60f93668251909c86a99ea2bc6e6213063b7d5a1e33737846c224582b4085d79787cd3e62d3fb32f529365b3767280c059fa00aa338de2108b57275ce26b91ec976d5e73fb069f210997e", 0x4d}, {&(0x7f00000001c0)="e3cbb403611f4ff231a22641488b1da067487d4b9d707f9c65ad6f4addd7d73836d51acb092386cd89aced965b936ba37fa2a2355fc6f39c49d001489d545d27496e733e3c76e7fd4ac2b8", 0x4b}, {&(0x7f0000000240)="daacf4c3816471aa81a0148ff32c944352b22115b6280ca43a790f05c71b37a89282c3d3a61ef729d27752f5bbf51e0f88", 0x31}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000880)="fc943a4198a064266d38a3ed84d4a3cb36778db0b8063fc9ec5612c3cb4ff47094e794f39bf1190e4b522a1357e633e968af680f2a21ebd295f96e7305bb9b6c7c386bb8351eb6167cddf089720c59d1347628c90d93741a3c858467a4c01ad8faac2a243e3c", 0x66}, {&(0x7f0000000900)="91dcc74f9b5f0bbbf7ae2dc1f8e12c8044308708ca4deafe89840a7e0dc2ce028672469ba68b5e35d410a291bd0c03a6061a286b0999c740a245124b21192a30942d6617fbdb2a10ca6d82da192b986461d10e4c9e2715", 0x57}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000d80)="878d31dd39102ee10b2cbd07ddd633d3355f839b60f7a9dedb6aac3b83c8a64538a235526687917cabba7166d969f175cd924beffab1366a434e83dcc679a206f8703c7d4e07a28533cd860dd0ab9f5c1e1644fdd752ed6a889f1d44273fbfc68485338a7fad9a92a921655f59c49096ef7049c2a931bbd6ae97e4ac154c06a20c0074ddd80e93aee3e531bf5e86be00ff83a22cb85415aac548616c20baed277ad06d552274c17d139934514d6f94acecbe047235", 0xb5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001040)="89496e9d268359daa97061165ab07a7264ec17be490a4024a350ca88c8159745c796c18bddc1a248375ed3c107b3f6cc2c81706d187d7d8e963dfce85241bdb9d0459b41f85dd0214015e8d5b74fb698605f", 0x52}, {&(0x7f00000010c0)="330053be86056afaa8081e31d4b60217f8056b09389dbca9851cd7b24ca49a42db572a8a24791bf63bb0d89b577bf97837456c8cbab2ca638d924dca1be21d952132d1f18237d2b86d3fef4ced5e5ef7ebaeac4f2519d3c14403ed", 0x5b}], 0x2}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002580)="c7", 0x1}], 0x1}}], 0x5, 0x40001) 09:42:41 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000100)=0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) 09:42:41 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300fdffffff000000000000000000000000000120a1070071756575"], 0x38) 09:42:41 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x817) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:41 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)) 09:42:41 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300feffffff000000000000000000000000000120a1070071756575"], 0x38) 09:42:41 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffc}]}) 09:42:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x100, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) 09:42:41 executing program 4: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x3, 0x7f) write$P9_RAUTH(r1, &(0x7f0000000100)={0x14}, 0x14) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f00000001c0)="8fe6942c9b0a38d2fd07df7abdc6ade4fcb9bdca", 0x14}], 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f00000000c0)=0x7ff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:42:41 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000010000000000000000000120a1070071756575"], 0x38) 09:42:41 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x5) 09:42:41 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:42 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18, 0x0, 0x3, {0x8}}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) 09:42:42 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x9, 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000001a00)=0xb82, 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x574}], 0x23e, 0x0, 0xff96ce4aaaa47475}, 0x100) 09:42:42 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000040000000000000000000120a1070071756575"], 0x38) 09:42:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x3}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000240)={0x403, r1}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) 09:42:42 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000080000000000000000000120a1070071756575"], 0x38) 09:42:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)) 09:42:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) [ 1179.554927][ T1427] encrypted_key: insufficient parameters specified 09:42:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@reserved}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x200) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x71418d939fd3dca8, 0x0) signalfd4(r1, &(0x7f0000000140)={0x2}, 0x8, 0x80800) 09:42:42 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000001b0000000000000000000120a1070071756575"], 0x38) 09:42:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000080)='security.SMACK64IPOUT\x00', &(0x7f00000000c0)='wlan0}cpusetcgroup\x00', 0x13, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @initdev}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 09:42:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2a0140, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000000c0)={0xd952, 0x6f, 0x1e, 'queue1\x00', 0x4}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x80000000, 0x6, 0x8, 'queue1\x00', 0x4}) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x400003, r2}) 09:42:42 executing program 5: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xc}) shutdown(r0, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0xfffffffffffffffc}], 0x7, 0x0, 0x0, 0x0) 09:42:42 executing program 4: 09:42:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:42 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000001f0000000000000000000120a1070071756575"], 0x38) 09:42:42 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000000009375, &(0x7f0000000040)="010000000000000018040000075a90002f000000008001832f") 09:42:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$pptp(0x18, 0x1, 0x2) connect$inet(r0, 0x0, 0x0) 09:42:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000040)="9943df44c367a2822952583bb654356e39deccc114b252d0a0acaa6689e7da857e815e66ccdaebbbabb1a5b043e6daa8aa0e95cd9adc9c0c1c72599eae9f5e4200768f1f1990087dcef2d80d7a92eafe368e58392695a71672d507d0a0f7dbde6b5245102e4f1e4f671d5b8f3e44f4abf99664a9e9ef0035347292c12083dfc43acf812bfd7098c86f2d4e4c18f215f5ff678d631a1941e5ab71f29e8a0689dab2997a2b17db25cfb6a4908f3e0c5a0adc95745027a02e25797425a0766d74344d6b2da53ce1797b3592aa374c851cd82ae95e", 0xd3) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0x0) getrlimit(0xf, &(0x7f0000000140)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x600, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x33, r3, 0x8000000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) 09:42:43 executing program 2: 09:42:43 executing program 4: 09:42:43 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000400000000000000000000120a1070071756575"], 0x38) 09:42:43 executing program 5: 09:42:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x2d, "9333b98463e3e33f38a6bc3fd43e8836048ae57376d2c2c9dc560256e8fec18d87d9bb6eefa818e7752324cef5"}, &(0x7f0000000440)=0x35) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000480)={r4, 0xcb67, 0x401, 0x7}, &(0x7f00000004c0)=0x14) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair(0x8, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x101, 0x4) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r6}) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e20, 0x100, 0x4e20, 0x0, 0x2, 0x20, 0xa0, 0x6, 0x0, r7}, {0x6, 0x401, 0x9, 0x7fffffff, 0xb667, 0xfff, 0x1ff, 0x7}, {0x0, 0x8, 0x0, 0x7fffffff}, 0x100000000, 0x6e6bb9, 0x2, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0xd}, 0x4d5, 0x6c}, 0xa, @in6=@empty, 0x3506, 0x1, 0x3, 0x3, 0x1000, 0x97cf, 0x5}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6=@mcast2, 0x4e21, 0x0, 0x4e21, 0x2e, 0x2, 0x20, 0xa0, 0x2c, 0x0, r7}, {0x10001, 0x80, 0x2, 0x5e823003, 0x9, 0x100, 0x100000000, 0xffffffffffff0602}, {0x6, 0x101, 0x6}, 0x401, 0x6e6bb1, 0x3, 0x1, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0xb}, 0x4d2}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x3502, 0x2, 0x3, 0xfffffffffffffffe, 0x80000000, 0x1, 0xffff}}, 0xe8) 09:42:43 executing program 4: 09:42:43 executing program 2: 09:42:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x80000000, 0x1, @raw_data=[0x7, 0x7, 0xfffffffffffffc01, 0xffffffff, 0xb633, 0x1, 0x7, 0xcf, 0x9, 0x0, 0x1, 0x40, 0x3ded, 0x9, 0x100000001, 0xffff]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:43 executing program 5: 09:42:43 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000007d0000000000000000000120a1070071756575"], 0x38) 09:42:43 executing program 2: 09:42:43 executing program 4: 09:42:43 executing program 5: 09:42:43 executing program 4: 09:42:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x4) eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x2}) setxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.SMACK64EXEC\x00', &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x11, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 09:42:43 executing program 2: 09:42:43 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000bf0000000000000000000120a1070071756575"], 0x38) 09:42:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400001, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x80300, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x10001) 09:42:43 executing program 5: 09:42:43 executing program 4: 09:42:43 executing program 2: 09:42:43 executing program 5: 09:42:43 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000001f40000000000000000000120a1070071756575"], 0x38) 09:42:43 executing program 4: 09:42:44 executing program 5: 09:42:44 executing program 2: 09:42:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:44 executing program 4: 09:42:44 executing program 5: 09:42:44 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000fffffffd0000000000000000000120a1070071756575"], 0x38) 09:42:44 executing program 2: 09:42:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:44 executing program 4: 09:42:44 executing program 5: 09:42:44 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000fffffffe0000000000000000000120a1070071756575"], 0x38) 09:42:44 executing program 2: 09:42:44 executing program 4: 09:42:44 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000080)) fcntl$getflags(r0, 0x40a) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000100)) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x10) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 09:42:44 executing program 5: 09:42:44 executing program 2: 09:42:44 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000040000000000000000000000000000000120a1070071756575"], 0x38) 09:42:44 executing program 4: 09:42:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) io_getevents(r1, 0x8, 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f0000000140)={0x77359400}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:44 executing program 2: 09:42:44 executing program 4: 09:42:44 executing program 5: 09:42:44 executing program 2: 09:42:44 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000080000000000000000000000000000000120a1070071756575"], 0x38) 09:42:44 executing program 4: 09:42:45 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) 09:42:45 executing program 5: 09:42:45 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300001b0000000000000000000000000000000120a1070071756575"], 0x38) 09:42:45 executing program 4: 09:42:45 executing program 2: 09:42:45 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:45 executing program 5: 09:42:45 executing program 2: 09:42:45 executing program 4: 09:42:45 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300007d0000000000000000000000000000000120a1070071756575"], 0x38) 09:42:45 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4000000000000000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:45 executing program 2: 09:42:45 executing program 5: 09:42:45 executing program 4: 09:42:45 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000bf0000000000000000000000000000000120a1070071756575"], 0x38) 09:42:45 executing program 2: 09:42:45 executing program 5: 09:42:45 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e20, @multicast2}, {0x7}, 0x48, {0x2, 0x4e22, @remote}, 'hwsim0\x00'}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:45 executing program 4: 09:42:45 executing program 5: 09:42:45 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000f40100000000000000000000000000000120a1070071756575"], 0x38) 09:42:45 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x280000, 0x0) ioctl$KDENABIO(r2, 0x4b36) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) getdents64(r2, &(0x7f0000000080)=""/139, 0x8b) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000180)="ed2cab51a0378eac18ac2c868f2c769245721bdc486e288d668e511be24e4dcb1ac6eb3506f3fae6a300e14f3370504b5d8a6b071825d38299bcb033c7a29cd262f3211f74b9752b6781a450e9d65a9f62f364c588df27fc4b6ec21471c116d3789224b27847c338104bb7814ccb89e56b77c063379056b4843f560f73eb33e61df37c5513c83ef0c03df382fb8ab4cb6fea59") ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:45 executing program 4: 09:42:45 executing program 2: 09:42:45 executing program 5: 09:42:45 executing program 4: 09:42:45 executing program 2: 09:42:45 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000001b00000000000000000000000000000120a1070071756575"], 0x38) 09:42:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x200001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:46 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 09:42:46 executing program 5: 09:42:46 executing program 2: 09:42:46 executing program 4: 09:42:46 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000001f00000000000000000000000000000120a1070071756575"], 0x38) 09:42:46 executing program 5: 09:42:46 executing program 2: 09:42:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:46 executing program 4: 09:42:46 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000004000000000000000000000000000000120a1070071756575"], 0x38) 09:42:46 executing program 5: 09:42:46 executing program 4: 09:42:46 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x800fe) write$P9_RREAD(r1, &(0x7f0000000200)={0xd, 0x75, 0x2, {0x2, "ccec"}}, 0xd) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x400, 0x98c00000000000, 0x99, &(0x7f0000000140)="c19186e8568d2184e9be7630b43bd629169a9fc361f28e424703ffabfffcf48c77045b5d090c969e2eba2f44888a20d30c0173842c3fb7aaf1e4ecd178bfd5c704d44436122909e1d9a000d9feb0687ac8b268c1c1256e8bbe0c7abeb966742aff392ee9984a081d3b7b9febc7a3195a9111fb1e02f2accbb618c586791d68819be9f2fc06dd586637c2dd7be0cd02c44e87cb5189e807cd95"}) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000240)=0x4000007, &(0x7f0000000280)=0x100000129) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000080)=""/53, &(0x7f00000000c0)=0x35) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:46 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="e1affde3", 0x4) 09:42:46 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000007d00000000000000000000000000000120a1070071756575"], 0x38) 09:42:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) 09:42:46 executing program 5: r0 = socket$inet6(0xa, 0x802200000000003, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x5000000]}, 0x800, 0x2}, 0x20) 09:42:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) prctl$PR_GET_KEEPCAPS(0x7) r2 = msgget$private(0x0, 0x101) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000280)=0x3f, &(0x7f0000000400)=0x4) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f0000000100)) r4 = getgid() r5 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x7, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x0) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgid(0x0) r9 = getpgid(0xffffffffffffffff) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000380)={{0x2, r3, r4, r6, r7, 0xab, 0x7}, 0x7fffffff, 0x1, 0x2, 0x3f, 0x3f, 0x9, r8, r9}) fremovexattr(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6f735c0a6587b23ad3d678ae00"]) readahead(r1, 0x2, 0xd6f7) 09:42:46 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000bf00000000000000000000000000000120a1070071756575"], 0x38) 09:42:46 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) kexec_load(0xeac0, 0x7, &(0x7f0000001480)=[{&(0x7f00000000c0)="bfd8c26297d51fd9e0e0703186", 0xd, 0x7fffffff, 0x3}, {&(0x7f0000000100)="9e7517fea2a693acc82e6293f61e5c0059f025d5dc5b33f2de5f2a279228b0273b58429229c44be352ae85fdcb01c4508921d1fd13a33eac708cbf1f2d51e7b47a21b7734dcccb38ee41327fda5b9a38f97c42a63f5b8b5c9d8a54198d117c61babacaac342337cc41241a4db93dc604c38eb970d3e28f2c39d8ce97424dd3aca884178048e30553efe8362d507cb3cac7f2c2ce06c8c801785be73f0091bdb68e4b11e480eb5fa5cedb1a1bf57ddf03f610890f29aa034b805988e2997593caeffa7020b1386ae58de79a64f71d661a9ec0a5d30cfd0d6f6f58ba7492ed", 0xde, 0x9, 0x3}, {&(0x7f0000000200)="3ec81420d1037474c381406947ac890d2dd74fe5752af38084f88ab8e2d33337d52ef5bfb566ec05f7e8bc6dd3b44eb81987875c90e0ed864246b3f76045f2690f1365febb3e4bc7ffb934206c0b4ee2feae81f15878c8ace72ade94b1d2f8dcb5144a40015ee928fe4ef72bf7bdaf25bfbaf155a1606e7c308f6caf20352b5d7688058107d92ec97b7bef1bc0e2444600de81c2e43d00", 0x97, 0x40, 0x71c1}, {&(0x7f0000000300), 0x0, 0x10001, 0xfffffffffffffffe}, {&(0x7f0000000340)="9dbcc4f8a0266dff8adff33cb441c5e04482dfd5faeb4e81", 0x18, 0x3ff, 0x4}, {&(0x7f0000000380)="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", 0xfa, 0x7ff, 0xe2e}, {&(0x7f0000000480)="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", 0x1000, 0xcea3, 0x3f}], 0x2a0000) 09:42:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 09:42:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x2d, "9333b98463e3e33f38a6bc3fd43e8836048ae57376d2c2c9dc560256e8fec18d87d9bb6eefa818e7752324cef5"}, &(0x7f0000000440)=0x35) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000480)={r4, 0xcb67, 0x401, 0x7}, &(0x7f00000004c0)=0x14) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair(0x8, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x101, 0x4) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r6}) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e20, 0x100, 0x4e20, 0x0, 0x2, 0x20, 0xa0, 0x6, 0x0, r7}, {0x6, 0x401, 0x9, 0x7fffffff, 0xb667, 0xfff, 0x1ff, 0x7}, {0x0, 0x8, 0x0, 0x7fffffff}, 0x100000000, 0x6e6bb9, 0x2, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0xd}, 0x4d5, 0x6c}, 0xa, @in6=@empty, 0x3506, 0x1, 0x3, 0x3, 0x1000, 0x97cf, 0x5}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6=@mcast2, 0x4e21, 0x0, 0x4e21, 0x2e, 0x2, 0x20, 0xa0, 0x2c, 0x0, r7}, {0x10001, 0x80, 0x2, 0x5e823003, 0x9, 0x100, 0x100000000, 0xffffffffffff0602}, {0x6, 0x101, 0x6}, 0x401, 0x6e6bb1, 0x3, 0x1, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0xb}, 0x4d2}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x3502, 0x2, 0x3, 0xfffffffffffffffe, 0x80000000, 0x1, 0xffff}}, 0xe8) 09:42:46 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x91e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfe47bf070") r2 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x80001a}) 09:42:47 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000001f400000000000000000000000000000120a1070071756575"], 0x38) 09:42:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x89ee) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x2, 0x3}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000100)) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10001, 0x440) write$P9_RLOPEN(r1, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x2, 0x3, 0x2}, 0xfffffffffffffffe}}, 0x18) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)) 09:42:47 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x91e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfe47bf070") r2 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x80001a}) 09:42:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x2d, "9333b98463e3e33f38a6bc3fd43e8836048ae57376d2c2c9dc560256e8fec18d87d9bb6eefa818e7752324cef5"}, &(0x7f0000000440)=0x35) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000480)={r4, 0xcb67, 0x401, 0x7}, &(0x7f00000004c0)=0x14) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair(0x8, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x101, 0x4) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r6}) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e20, 0x100, 0x4e20, 0x0, 0x2, 0x20, 0xa0, 0x6, 0x0, r7}, {0x6, 0x401, 0x9, 0x7fffffff, 0xb667, 0xfff, 0x1ff, 0x7}, {0x0, 0x8, 0x0, 0x7fffffff}, 0x100000000, 0x6e6bb9, 0x2, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0xd}, 0x4d5, 0x6c}, 0xa, @in6=@empty, 0x3506, 0x1, 0x3, 0x3, 0x1000, 0x97cf, 0x5}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6=@mcast2, 0x4e21, 0x0, 0x4e21, 0x2e, 0x2, 0x20, 0xa0, 0x2c, 0x0, r7}, {0x10001, 0x80, 0x2, 0x5e823003, 0x9, 0x100, 0x100000000, 0xffffffffffff0602}, {0x6, 0x101, 0x6}, 0x401, 0x6e6bb1, 0x3, 0x1, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0xb}, 0x4d2}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x3502, 0x2, 0x3, 0xfffffffffffffffe, 0x80000000, 0x1, 0xffff}}, 0xe8) 09:42:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) 09:42:47 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000010000000000000000000000000120a1070071756575"], 0x38) 09:42:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8001, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L-', 0x3f}, 0x28, 0x1) getsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000080)=""/2, &(0x7f00000000c0)=0x112) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0x1000000000000000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) 09:42:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x2d, "9333b98463e3e33f38a6bc3fd43e8836048ae57376d2c2c9dc560256e8fec18d87d9bb6eefa818e7752324cef5"}, &(0x7f0000000440)=0x35) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000480)={r4, 0xcb67, 0x401, 0x7}, &(0x7f00000004c0)=0x14) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair(0x8, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x101, 0x4) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r6}) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e20, 0x100, 0x4e20, 0x0, 0x2, 0x20, 0xa0, 0x6, 0x0, r7}, {0x6, 0x401, 0x9, 0x7fffffff, 0xb667, 0xfff, 0x1ff, 0x7}, {0x0, 0x8, 0x0, 0x7fffffff}, 0x100000000, 0x6e6bb9, 0x2, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0xd}, 0x4d5, 0x6c}, 0xa, @in6=@empty, 0x3506, 0x1, 0x3, 0x3, 0x1000, 0x97cf, 0x5}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6=@mcast2, 0x4e21, 0x0, 0x4e21, 0x2e, 0x2, 0x20, 0xa0, 0x2c, 0x0, r7}, {0x10001, 0x80, 0x2, 0x5e823003, 0x9, 0x100, 0x100000000, 0xffffffffffff0602}, {0x6, 0x101, 0x6}, 0x401, 0x6e6bb1, 0x3, 0x1, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0xb}, 0x4d2}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x3502, 0x2, 0x3, 0xfffffffffffffffe, 0x80000000, 0x1, 0xffff}}, 0xe8) 09:42:47 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x91e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfe47bf070") r2 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x80001a}) 09:42:47 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000040000000000000000000000000120a1070071756575"], 0x38) 09:42:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x2, 0x3}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000100)) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10001, 0x440) write$P9_RLOPEN(r1, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x2, 0x3, 0x2}, 0xfffffffffffffffe}}, 0x18) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)) 09:42:47 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x91e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfe47bf070") memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x2d, "9333b98463e3e33f38a6bc3fd43e8836048ae57376d2c2c9dc560256e8fec18d87d9bb6eefa818e7752324cef5"}, &(0x7f0000000440)=0x35) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000480)={r4, 0xcb67, 0x401, 0x7}, &(0x7f00000004c0)=0x14) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair(0x8, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x101, 0x4) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r6}) fstat(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e20, 0x100, 0x4e20, 0x0, 0x2, 0x20, 0xa0, 0x6, 0x0, r7}, {0x6, 0x401, 0x9, 0x7fffffff, 0xb667, 0xfff, 0x1ff, 0x7}, {0x0, 0x8, 0x0, 0x7fffffff}, 0x100000000, 0x6e6bb9, 0x2, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0xd}, 0x4d5, 0x6c}, 0xa, @in6=@empty, 0x3506, 0x1, 0x3, 0x3, 0x1000, 0x97cf, 0x5}}, 0xe8) 09:42:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x2}) 09:42:47 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000080000000000000000000000000120a1070071756575"], 0x38) 09:42:47 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000001b0000000000000000000000000120a1070071756575"], 0x38) 09:42:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x2d, "9333b98463e3e33f38a6bc3fd43e8836048ae57376d2c2c9dc560256e8fec18d87d9bb6eefa818e7752324cef5"}, &(0x7f0000000440)=0x35) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000480)={r4, 0xcb67, 0x401, 0x7}, &(0x7f00000004c0)=0x14) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair(0x8, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x101, 0x4) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r6}) fstat(r6, &(0x7f0000000140)) 09:42:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x2, 0x3}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000100)) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10001, 0x440) write$P9_RLOPEN(r1, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x2, 0x3, 0x2}, 0xfffffffffffffffe}}, 0x18) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)) 09:42:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000024c0)='/dev/amidi#\x00', 0x4, 0x80) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002500)={0x0, @multicast2, @initdev}, &(0x7f0000002540)=0xc) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r3}) getsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 09:42:47 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x91e) socket$inet_udplite(0x2, 0x2, 0x88) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:48 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000001f0000000000000000000000000120a1070071756575"], 0x38) 09:42:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x2d, "9333b98463e3e33f38a6bc3fd43e8836048ae57376d2c2c9dc560256e8fec18d87d9bb6eefa818e7752324cef5"}, &(0x7f0000000440)=0x35) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000480)={r4, 0xcb67, 0x401, 0x7}, &(0x7f00000004c0)=0x14) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair(0x8, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x101, 0x4) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r6}) 09:42:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10400) 09:42:48 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x91e) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x2, 0x3}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000100)) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10001, 0x440) write$P9_RLOPEN(r1, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x2, 0x3, 0x2}, 0xfffffffffffffffe}}, 0x18) 09:42:48 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000400000000000000000000000000120a1070071756575"], 0x38) 09:42:48 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:48 executing program 3: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) lseek(r0, 0x0, 0x3) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x20000000000a, 0x2040) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x3, r2}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x810000a0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r3, 0x422, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe347}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 09:42:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x2d, "9333b98463e3e33f38a6bc3fd43e8836048ae57376d2c2c9dc560256e8fec18d87d9bb6eefa818e7752324cef5"}, &(0x7f0000000440)=0x35) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000480)={r4, 0xcb67, 0x401, 0x7}, &(0x7f00000004c0)=0x14) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair(0x8, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x101, 0x4) eventfd(0x0) 09:42:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x2, 0x3}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000100)) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10001, 0x440) 09:42:48 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000007d0000000000000000000000000120a1070071756575"], 0x38) 09:42:48 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x2d, "9333b98463e3e33f38a6bc3fd43e8836048ae57376d2c2c9dc560256e8fec18d87d9bb6eefa818e7752324cef5"}, &(0x7f0000000440)=0x35) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000480)={r4, 0xcb67, 0x401, 0x7}, &(0x7f00000004c0)=0x14) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair(0x8, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x101, 0x4) 09:42:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fcntl$dupfd(r0, 0x406, r0) r1 = eventfd(0x40007) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x2, 0x3}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000100)) 09:42:48 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000bf0000000000000000000000000120a1070071756575"], 0x38) 09:42:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x200000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000003c0)=0x200, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="cc", 0x1, 0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x4d5038ca2c47c0d5, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000200)=0x2) r4 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x4000) getsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmmsg$inet6(r2, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="f3", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000a00)="cf", 0x1}], 0x1}}], 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0xfffffffffffffffe}) 09:42:48 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x2d, "9333b98463e3e33f38a6bc3fd43e8836048ae57376d2c2c9dc560256e8fec18d87d9bb6eefa818e7752324cef5"}, &(0x7f0000000440)=0x35) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000480)={r4, 0xcb67, 0x401, 0x7}, &(0x7f00000004c0)=0x14) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair(0x8, 0x1, 0x7, &(0x7f0000000040)) 09:42:48 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000001f40000000000000000000000000120a1070071756575"], 0x38) 09:42:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x2, 0x3}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x4, 0x200000) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xfff) connect$caif(r1, &(0x7f0000000080)=@dgm={0x25, 0x2, 0x80000000}, 0x18) 09:42:49 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) setsockopt(r2, 0x8, 0x80000001, &(0x7f0000000300)="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", 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) 09:42:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x2d, "9333b98463e3e33f38a6bc3fd43e8836048ae57376d2c2c9dc560256e8fec18d87d9bb6eefa818e7752324cef5"}, &(0x7f0000000440)=0x35) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000480)={r4, 0xcb67, 0x401, 0x7}, &(0x7f00000004c0)=0x14) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:49 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:49 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000fffffffd0000000000000000000000000120a1070071756575"], 0x38) 09:42:49 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x2d, "9333b98463e3e33f38a6bc3fd43e8836048ae57376d2c2c9dc560256e8fec18d87d9bb6eefa818e7752324cef5"}, &(0x7f0000000440)=0x35) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000480)={r3, 0xcb67, 0x401, 0x7}, &(0x7f00000004c0)=0x14) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x5, &(0x7f0000000080)={0x3, 0x7, 0xb1a2, 0x95c, r2}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:49 executing program 2: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 09:42:49 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:49 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000fffffffe0000000000000000000000000120a1070071756575"], 0x38) 09:42:49 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x2d, "9333b98463e3e33f38a6bc3fd43e8836048ae57376d2c2c9dc560256e8fec18d87d9bb6eefa818e7752324cef5"}, &(0x7f0000000440)=0x35) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:49 executing program 2: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 09:42:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x9}, 0x28, 0x2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:49 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000fdffffff0000000000000000000000000120a1070071756575"], 0x38) 09:42:49 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:49 executing program 2: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 09:42:49 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x100) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:49 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:49 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000feffffff0000000000000000000000000120a1070071756575"], 0x38) 09:42:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffffffff001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x3c341fd9226f3e84, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000240)) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000002c0)=""/89) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x80, 0xcc082) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='@\x00'}, 0x30) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0xf4, 0x9, r3, 0x0, r4, 0x0, 0x4, 0x1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x6, r2}) 09:42:50 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:50 executing program 5: setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:50 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000100000000000000000120a1070071756575"], 0x38) 09:42:50 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:50 executing program 5: setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = socket$inet6(0xa, 0x802, 0x73) sendmsg$inet6(r2, &(0x7f0000000640)={&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@hoplimit={{0x14}}], 0x18}, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x2, r1}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x2, 0x7f}) 09:42:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 09:42:50 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x40000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="00020000", @ANYRES16=r1, @ANYBLOB="040128bd7000fbdbdf2501000000080006000700000008000300020000000800020040000000080006000000000014000400f9ffffff57ffffff0300000004000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x848011}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x125, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000002c0)) 09:42:50 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000400000000000000000120a1070071756575"], 0x38) 09:42:50 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:50 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 09:42:50 executing program 5: setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:50 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x2) 09:42:50 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 09:42:50 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000800000000000000000120a1070071756575"], 0x38) 09:42:50 executing program 5: setrlimit(0x1000000000000007, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x400000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x2) eventfd(0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x5, 0x80) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)=""/129) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000000)={0x3, 0x8, 0x7, 0x1, 0x4, 0x6}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000280), &(0x7f0000000240)=0xfffffedd) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x100000000100}) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) 09:42:50 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000001b00000000000000000120a1070071756575"], 0x38) 09:42:50 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 09:42:50 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:51 executing program 5: setrlimit(0x1000000000000007, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:51 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000001f00000000000000000120a1070071756575"], 0x38) 09:42:51 executing program 5: setrlimit(0x1000000000000007, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:51 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x4000, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "b775e68b5c8457b5", "82c2d1c97250181a7341170e2b473168", "ce172ea6", "7a9b3880d96a4029"}, 0x28) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000080)={0x5}) r2 = eventfd(0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000300)={0x10, 0xd, 0x5, 0x6, 0x1, 0x1, 0x1, 0xe3}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x5}}, [0x7, 0x6e6, 0x7a, 0x9, 0x5, 0x6, 0x5, 0x1e, 0x54, 0x3, 0x81, 0x100, 0x7, 0x8e2, 0x78a]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r3, 0xf5, 0x7}, &(0x7f0000000240)=0x8) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000340)={0x0, 0x5, 0xffffffffffffff28, 0xfffffffffffffffc, 0x1, 0xbb, 0x1, 0x5, 0x8, 0xff, 0x0, 0xffff}) 09:42:51 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)=""/200, &(0x7f0000000300)=0xc8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) getpeername$tipc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r2 = io_uring_setup(0x68, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r2}], 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$dupfd(r1, 0x0, r1) 09:42:51 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x0, 0x28}) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:51 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000004000000000000000000120a1070071756575"], 0x38) 09:42:51 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40400, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0xfffffffffffffffe, r1}) 09:42:51 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)=""/200, &(0x7f0000000300)=0xc8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) getpeername$tipc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r2 = io_uring_setup(0x68, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r2}], 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$dupfd(r1, 0x0, r1) 09:42:51 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) 09:42:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:51 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000007d00000000000000000120a1070071756575"], 0x38) 09:42:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) 09:42:51 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(0x0, 0x0) 09:42:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:51 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000000000bf00000000000000000120a1070071756575"], 0x38) 09:42:51 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)=""/200, &(0x7f0000000300)=0xc8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) getpeername$tipc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r2 = io_uring_setup(0x68, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r2}], 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$dupfd(r1, 0x0, r1) 09:42:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000080)=0x102b2a) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000180)=0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x2, 0x264, [0x0, 0x20000300, 0x20000330, 0x20000360], 0x0, &(0x7f00000000c0), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x26a4b102890d6659, 0x50, 0x22f0, 'team_slave_0\x00', 'batadv0\x00', 'ip_vti0\x00', 'rose0\x00', @dev={[], 0x29}, [0x0, 0xff, 0xff, 0x0, 0xff], @local, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0xa6, 0xa6, 0xd6, [@realm={'realm\x00', 0x10, {{0x7, 0x5, 0x1}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}}, {0x3, 0x8, 0xfaff, 'veth0\x00', 'yam0\x00', 'veth1_to_bridge\x00', 'teql0\x00', @empty, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0xb6, 0xfe, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x6, 0x1, 0x800}}}], @common=@ERROR={'ERROR\x00', 0x20, {"7cc8f53d6e8786d7a5624e89a95c3c6568c4f1ae005effa1d4902d0b1a38"}}}]}]}, 0x2dc) 09:42:51 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(0x0, 0x0) 09:42:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:52 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000000001f400000000000000000120a1070071756575"], 0x38) 09:42:52 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)=""/200, &(0x7f0000000300)=0xc8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) getpeername$tipc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r2 = io_uring_setup(0x68, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r2}], 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) 09:42:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000001c0)) r1 = eventfd(0xffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = dup2(r0, r0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x54) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x44184928, 0x5, 0xcf96, 0x9, 0x8001, 0x0, 0xfffffffffffffffb}, 0x1c) 09:42:52 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:52 executing program 5: setrlimit(0x1000000000000007, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(0x0, 0x0) 09:42:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe2(&(0x7f0000000080), 0x80000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x3}) mq_unlink(&(0x7f0000000040)='\x00') 09:42:52 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000fffffffd00000000000000000120a1070071756575"], 0x38) 09:42:52 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)=""/200, &(0x7f0000000300)=0xc8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) getpeername$tipc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r2 = io_uring_setup(0x68, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r2}], 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0, 0x0) 09:42:52 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40085618, &(0x7f00000002c0)={0x0, r1}) 09:42:52 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000fffffffe00000000000000000120a1070071756575"], 0x38) 09:42:52 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x10, r1}) 09:42:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x10000, 0x3ff, 0x400, 0x7, 0x3, 0x6, 0x3f, 0x63, 0x38, 0x39f, 0x3e, 0x0, 0x20, 0x1, 0xdcd, 0x0, 0x2}, [{0x1, 0x10000, 0x400, 0xbb, 0x0, 0x1, 0xfffffffffffffffc, 0x5}], "9ca4dbfd25637bca653ce8194c2062ea7f19108ccb1a426dd271dd4ae2b3a02b9fa7806560", [[], [], [], []]}, 0x47d) 09:42:52 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)=""/200, &(0x7f0000000300)=0xc8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) getpeername$tipc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r2 = io_uring_setup(0x68, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r2}], 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0, 0x0) 09:42:52 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000400000000000000000000000000000120a1070071756575"], 0x38) 09:42:52 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:52 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)=""/200, &(0x7f0000000300)=0xc8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) getpeername$tipc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:52 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000800000000000000000000000000000120a1070071756575"], 0x38) 09:42:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000080)={0x80ff, 0x1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:52 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:53 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:53 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)=""/200, &(0x7f0000000300)=0xc8) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:53 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000001b00000000000000000000000000000120a1070071756575"], 0x38) 09:42:53 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000007d00000000000000000000000000000120a1070071756575"], 0x38) 09:42:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:53 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:53 executing program 3: r0 = socket(0x8, 0x80006, 0xcb) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x88}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x298, r1, 0x101, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc8f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd33}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x14ab}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffeffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x105}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffeffff}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x8c4}, 0x800) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000040)={0x3, 0x8}) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f00000000c0)={0x7fffffff, 0x0, 0xcfdf, 0x7, 0x8}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000002c0)) 09:42:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:53 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)=""/200, &(0x7f0000000300)=0xc8) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:53 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:53 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000bf00000000000000000000000000000120a1070071756575"], 0x38) 09:42:53 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)=""/200, &(0x7f0000000300)=0xc8) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x480040) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x6, 0x80000001, 0x3f822f5d}}, 0xfffffffffffffd1a) getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) setsockopt$inet_mreq(r2, 0x0, 0x0, &(0x7f0000000180)={@local, @loopback}, 0x8) 09:42:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:53 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:53 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000f401000000000000000000000000000120a1070071756575"], 0x38) 09:42:53 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:53 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:53 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000001b000000000000000000000000000120a1070071756575"], 0x38) 09:42:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 09:42:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000080)={0x49, 0x29, 0x2, {0x3, [{{0x84, 0x3, 0x5}, 0x400000000000000, 0x401, 0x7, './file0'}, {{0x0, 0x4, 0x4}, 0x1, 0xffff, 0x7, './file0'}]}}, 0x49) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:54 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:54 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="31011629"], 0x4) 09:42:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:54 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000001f000000000000000000000000000120a1070071756575"], 0x38) 09:42:54 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:54 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 09:42:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x3, r1}) 09:42:54 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 09:42:54 executing program 5: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, &(0x7f00000002c0)) 09:42:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 09:42:54 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000001c0)=0x1c) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:54 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000040000000000000000000000000000120a1070071756575"], 0x38) 09:42:54 executing program 5: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, &(0x7f00000002c0)) 09:42:54 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 09:42:54 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000007d000000000000000000000000000120a1070071756575"], 0x38) 09:42:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ptrace$setsig(0x4203, r1, 0x100, &(0x7f0000000080)={0x32, 0x6, 0x100}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) 09:42:54 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x0) 09:42:54 executing program 5: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, &(0x7f00000002c0)) 09:42:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x10000, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x60) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000001c0)) r2 = eventfd(0x0) fstat(r2, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) 09:42:54 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:54 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x0) 09:42:55 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000bf000000000000000000000000000120a1070071756575"], 0x38) 09:42:55 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:55 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x400040) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) 09:42:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:55 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x0) 09:42:55 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000001f4000000000000000000000000000120a1070071756575"], 0x38) 09:42:55 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x141240) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={r2, 0x401}, &(0x7f0000000140)=0x8) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r3}) 09:42:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:55 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:55 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 09:42:55 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180), 0x1, 0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x80, 0x2, 0x93, 0x6}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e23, @rand_addr=0x2}}}, 0x84) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x18000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0xffffffff, @loopback, 0x89}, @in={0x2, 0x4e20, @loopback}], 0x3c) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) r4 = getpgrp(0xffffffffffffffff) perf_event_open(0xffffffffffffffff, r4, 0x0, r3, 0x8) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x4, {0x400, 0x5, 0x1, 0x9}}) 09:42:55 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 09:42:55 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000100000000000000000000000120a1070071756575"], 0x38) 09:42:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:55 executing program 2: setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:55 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:55 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 09:42:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:55 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000400000000000000000000000120a1070071756575"], 0x38) 09:42:55 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x240, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) ioctl$KVM_SMI(r1, 0xaeb7) 09:42:55 executing program 2: syz_open_dev$cec(0x0, 0x0, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:55 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="3101"], 0x2) 09:42:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:56 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 09:42:56 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000800000000000000000000000120a1070071756575"], 0x38) 09:42:56 executing program 2: syz_open_dev$cec(0x0, 0x0, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:56 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0xf31acac13a75f1b7) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x1, 0xd4a, 0x62a, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:56 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2000, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x4e0}, 0x8) r2 = eventfd(0x110000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) 09:42:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:56 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 09:42:56 executing program 2: syz_open_dev$cec(0x0, 0x0, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:56 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000001b00000000000000000000000120a1070071756575"], 0x38) 09:42:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, &(0x7f00000002c0)) 09:42:56 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x42) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080)=0xc787, 0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:56 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x6000, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x10000, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000140)={r1, 0x8, 0x5, r2}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x7) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000002c0)={0x0, r4}) 09:42:56 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 09:42:56 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x4, 0x28}) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:56 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000001f00000000000000000000000120a1070071756575"], 0x38) 09:42:56 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='1'], 0x1) 09:42:56 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, &(0x7f00000002c0)) 09:42:56 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000004000000000000000000000000120a1070071756575"], 0x38) 09:42:56 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x400000) pidfd_send_signal(r2, 0x3b, &(0x7f0000000140)={0x12, 0x8, 0xffffffffffffffff}, 0x0) 09:42:56 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'team_slave_0\x00', 0x2}, 0x18) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="746c68a31aa0d758c4c53d859a57930b26a2ed995de2a60d3b9e8eb2a518cd6c6641058229f808d24dd60098a2088a9a7c28657066172b617baa38cf0cd3eb5056f53a3d0ccf712dd7fb", @ANYRES16=r2, @ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 09:42:56 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='1'], 0x1) 09:42:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, &(0x7f00000002c0)) 09:42:57 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000007d00000000000000000000000120a1070071756575"], 0x38) 09:42:57 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, 0x0) 09:42:57 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='1'], 0x1) 09:42:57 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x0, &(0x7f0000000080)={0x4, 0x28}) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:57 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x3f66) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) fchmod(r1, 0x88) 09:42:57 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000754cf7ff060000000300050008002201ff9ccfff2200f8ffff82f8c773944a2a570f7568058f48dfd8bb0217ace9d7586d43bddc4fb45c9acf8204a3be486915d9c092f5a1636423306a85b6f5bd1227c96baad6ced993127d86a9409140e2"], &(0x7f00000000c0)=0x12) 09:42:57 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000bf00000000000000000000000120a1070071756575"], 0x38) 09:42:57 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:42:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, 0x0) 09:42:57 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, 0x0) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:57 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000001f400000000000000000000000120a1070071756575"], 0x38) 09:42:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, 0x0) 09:42:57 executing program 3: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x40000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) r2 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x5000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x1}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000002c0)) 09:42:57 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:42:57 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, 0x0) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:57 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x48080) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) 09:42:57 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000fffffffd00000000000000000000000120a1070071756575"], 0x38) 09:42:57 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x3, @local, 0x80000000}, @in={0x2, 0x4e23, @loopback}], 0x2c) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:42:57 executing program 5 (fault-call:2 fault-nth:0): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:57 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:42:57 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, 0x0) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000fffffffe00000000000000000000000120a1070071756575"], 0x38) 09:42:58 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) [ 1195.195478][T11679] FAULT_INJECTION: forcing a failure. [ 1195.195478][T11679] name failslab, interval 1, probability 0, space 0, times 0 09:42:58 executing program 1: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x10000, 0x0) r1 = eventfd(0x800000000) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000140)={0x3, r1}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x281, 0x0) socket$inet(0x2, 0x5, 0xc55) [ 1195.275210][T11679] CPU: 0 PID: 11679 Comm: syz-executor.5 Not tainted 5.2.0+ #90 [ 1195.282898][T11679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1195.292965][T11679] Call Trace: [ 1195.296279][T11679] dump_stack+0x172/0x1f0 [ 1195.300633][T11679] should_fail.cold+0xa/0x15 [ 1195.305240][T11679] ? fault_create_debugfs_attr+0x180/0x180 [ 1195.311068][T11679] ? ___might_sleep+0x163/0x280 [ 1195.315951][T11679] __should_failslab+0x121/0x190 [ 1195.320892][T11679] should_failslab+0x9/0x14 [ 1195.325407][T11679] __kmalloc+0x2e0/0x770 [ 1195.329659][T11679] ? tomoyo_realpath_from_path+0xc0/0x7b0 [ 1195.335391][T11679] ? rcu_read_lock_sched_held+0x110/0x130 [ 1195.341115][T11679] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1195.346842][T11679] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1195.352394][T11679] ? tomoyo_path_number_perm+0x193/0x520 [ 1195.358141][T11679] tomoyo_path_number_perm+0x1dd/0x520 [ 1195.363606][T11679] ? tomoyo_path_number_perm+0x193/0x520 [ 1195.369251][T11679] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1195.375078][T11679] ? __f_unlock_pos+0x19/0x20 [ 1195.379806][T11679] ? __fget+0x384/0x560 [ 1195.383977][T11679] ? ksys_dup3+0x3e0/0x3e0 [ 1195.388404][T11679] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1195.394650][T11679] ? fput_many+0x12c/0x1a0 [ 1195.399075][T11679] tomoyo_file_ioctl+0x23/0x30 [ 1195.403851][T11679] security_file_ioctl+0x77/0xc0 [ 1195.408796][T11679] ksys_ioctl+0x57/0xd0 [ 1195.412960][T11679] __x64_sys_ioctl+0x73/0xb0 [ 1195.417565][T11679] do_syscall_64+0xfd/0x6a0 09:42:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000fdffffff00000000000000000000000120a1070071756575"], 0x38) 09:42:58 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)={0x0, 0x28}) io_uring_setup(0x68, &(0x7f0000000080)) [ 1195.422078][T11679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1195.427972][T11679] RIP: 0033:0x459829 [ 1195.431860][T11679] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1195.431867][T11679] RSP: 002b:00007f6e5bd33c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1195.431880][T11679] RAX: ffffffffffffffda RBX: 00007f6e5bd33c90 RCX: 0000000000459829 [ 1195.431887][T11679] RDX: 00000000200002c0 RSI: 000000004008af04 RDI: 0000000000000003 09:42:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000feffffff00000000000000000000000120a1070071756575"], 0x38) 09:42:58 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x7, 0x800) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x401}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x3, 0x7fffffff, 0x1, 0x4, 0x4, 0xbc2, 0x7, 0xffff, r2}, 0x20) r3 = accept4$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x80000) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7fff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={r5, 0x5, 0x10}, 0xc) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000480)={"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"}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000a40)) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000440)={0x7, 0x4}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000003c0)=0x0) fcntl$lock(r1, 0x7, &(0x7f0000000400)={0x3, 0x2, 0xfffffffffffffffa, 0x37e, r6}) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000008c0)={0x4, &(0x7f0000000880)=[0x0, 0xfffffffffffffe01, 0x2035, 0x400000000]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) [ 1195.431895][T11679] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1195.431903][T11679] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e5bd346d4 [ 1195.431911][T11679] R13: 00000000004c47aa R14: 00000000004d8860 R15: 0000000000000004 [ 1195.479377][T11679] ERROR: Out of memory at tomoyo_realpath_from_path. 09:42:58 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:42:58 executing program 5 (fault-call:2 fault-nth:1): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:58 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)) 09:42:58 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) 09:42:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000001000000000000000120a1070071756575"], 0x38) 09:42:58 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:42:58 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x0, &(0x7f0000000080)) [ 1195.849915][T11955] FAULT_INJECTION: forcing a failure. [ 1195.849915][T11955] name failslab, interval 1, probability 0, space 0, times 0 09:42:58 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000040)=""/6, &(0x7f0000000080)=0x6) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f00000000c0)=""/162, &(0x7f0000000180)=0xa2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:42:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000004000000000000000120a1070071756575"], 0x38) [ 1195.917190][T11955] CPU: 1 PID: 11955 Comm: syz-executor.5 Not tainted 5.2.0+ #90 [ 1195.924881][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1195.935046][T11955] Call Trace: [ 1195.938357][T11955] dump_stack+0x172/0x1f0 [ 1195.942706][T11955] should_fail.cold+0xa/0x15 [ 1195.947315][T11955] ? fault_create_debugfs_attr+0x180/0x180 [ 1195.953145][T11955] ? ___might_sleep+0x163/0x280 [ 1195.958012][T11955] __should_failslab+0x121/0x190 [ 1195.962959][T11955] should_failslab+0x9/0x14 09:42:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000008000000000000000120a1070071756575"], 0x38) 09:42:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000000000001b000000000000000120a1070071756575"], 0x38) [ 1195.967467][T11955] __kmalloc+0x2e0/0x770 [ 1195.971859][T11955] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1195.978106][T11955] ? d_absolute_path+0x11b/0x170 [ 1195.983046][T11955] ? __d_path+0x140/0x140 [ 1195.987380][T11955] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1195.992764][T11955] tomoyo_encode2.part.0+0xf5/0x400 [ 1195.997979][T11955] tomoyo_encode+0x2b/0x50 [ 1196.002398][T11955] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 1196.008129][T11955] tomoyo_path_number_perm+0x1dd/0x520 09:42:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000000000001f000000000000000120a1070071756575"], 0x38) [ 1196.013591][T11955] ? tomoyo_path_number_perm+0x193/0x520 [ 1196.019241][T11955] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1196.025049][T11955] ? __f_unlock_pos+0x19/0x20 [ 1196.029771][T11955] ? __fget+0x384/0x560 [ 1196.033945][T11955] ? ksys_dup3+0x3e0/0x3e0 [ 1196.038364][T11955] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1196.044605][T11955] ? fput_many+0x12c/0x1a0 [ 1196.049031][T11955] tomoyo_file_ioctl+0x23/0x30 [ 1196.053803][T11955] security_file_ioctl+0x77/0xc0 [ 1196.058751][T11955] ksys_ioctl+0x57/0xd0 [ 1196.062916][T11955] __x64_sys_ioctl+0x73/0xb0 09:42:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000040000000000000000120a1070071756575"], 0x38) [ 1196.067518][T11955] do_syscall_64+0xfd/0x6a0 [ 1196.072040][T11955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1196.077930][T11955] RIP: 0033:0x459829 [ 1196.081913][T11955] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1196.101523][T11955] RSP: 002b:00007f6e5bd33c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1196.109953][T11955] RAX: ffffffffffffffda RBX: 00007f6e5bd33c90 RCX: 0000000000459829 [ 1196.117929][T11955] RDX: 00000000200002c0 RSI: 000000004008af04 RDI: 0000000000000003 [ 1196.125905][T11955] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1196.133873][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e5bd346d4 [ 1196.141835][T11955] R13: 00000000004c47aa R14: 00000000004d8860 R15: 0000000000000004 [ 1196.163473][T11955] ERROR: Out of memory at tomoyo_realpath_from_path. 09:42:59 executing program 5 (fault-call:2 fault-nth:2): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:59 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)) 09:42:59 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:59 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000000000007d000000000000000120a1070071756575"], 0x38) 09:42:59 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x0, &(0x7f0000000080)) 09:42:59 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x3, @local, 0x80000000}, @in={0x2, 0x4e23, @loopback}], 0x2c) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:42:59 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000000000bf000000000000000120a1070071756575"], 0x38) 09:42:59 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)) [ 1196.421604][T12230] FAULT_INJECTION: forcing a failure. [ 1196.421604][T12230] name failslab, interval 1, probability 0, space 0, times 0 09:42:59 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x0, &(0x7f0000000080)) [ 1196.487711][T12230] CPU: 1 PID: 12230 Comm: syz-executor.5 Not tainted 5.2.0+ #90 [ 1196.495394][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1196.505461][T12230] Call Trace: [ 1196.508777][T12230] dump_stack+0x172/0x1f0 [ 1196.513129][T12230] should_fail.cold+0xa/0x15 [ 1196.517747][T12230] ? fault_create_debugfs_attr+0x180/0x180 [ 1196.523574][T12230] ? ___might_sleep+0x163/0x280 [ 1196.528434][T12230] __should_failslab+0x121/0x190 [ 1196.533365][T12230] should_failslab+0x9/0x14 [ 1196.533378][T12230] __kmalloc+0x2e0/0x770 [ 1196.533395][T12230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1196.533410][T12230] ? d_absolute_path+0x11b/0x170 [ 1196.533427][T12230] ? __d_path+0x140/0x140 [ 1196.557612][T12230] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1196.562994][T12230] tomoyo_encode2.part.0+0xf5/0x400 [ 1196.568204][T12230] tomoyo_encode+0x2b/0x50 [ 1196.572630][T12230] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 1196.578298][T12230] tomoyo_path_number_perm+0x1dd/0x520 09:42:59 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000000001f4000000000000000120a1070071756575"], 0x38) [ 1196.583762][T12230] ? tomoyo_path_number_perm+0x193/0x520 [ 1196.589399][T12230] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1196.595207][T12230] ? __f_unlock_pos+0x19/0x20 [ 1196.599929][T12230] ? __fget+0x384/0x560 [ 1196.604102][T12230] ? ksys_dup3+0x3e0/0x3e0 [ 1196.608530][T12230] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1196.614777][T12230] ? fput_many+0x12c/0x1a0 [ 1196.619200][T12230] tomoyo_file_ioctl+0x23/0x30 [ 1196.623972][T12230] security_file_ioctl+0x77/0xc0 [ 1196.628918][T12230] ksys_ioctl+0x57/0xd0 [ 1196.633082][T12230] __x64_sys_ioctl+0x73/0xb0 09:42:59 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, 0x0) [ 1196.637678][T12230] do_syscall_64+0xfd/0x6a0 [ 1196.642195][T12230] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1196.648088][T12230] RIP: 0033:0x459829 [ 1196.651986][T12230] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1196.671596][T12230] RSP: 002b:00007f6e5bd33c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1196.671612][T12230] RAX: ffffffffffffffda RBX: 00007f6e5bd33c90 RCX: 0000000000459829 09:42:59 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000fffffffd000000000000000120a1070071756575"], 0x38) [ 1196.671621][T12230] RDX: 00000000200002c0 RSI: 000000004008af04 RDI: 0000000000000003 [ 1196.671629][T12230] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1196.671643][T12230] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e5bd346d4 [ 1196.711889][T12230] R13: 00000000004c47aa R14: 00000000004d8860 R15: 0000000000000004 [ 1196.729274][T12230] ERROR: Out of memory at tomoyo_realpath_from_path. 09:42:59 executing program 5 (fault-call:2 fault-nth:3): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:42:59 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x3, @local, 0x80000000}, @in={0x2, 0x4e23, @loopback}], 0x2c) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:42:59 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, 0x0) 09:42:59 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:42:59 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)) 09:42:59 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000fffffffe000000000000000120a1070071756575"], 0x38) 09:42:59 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:42:59 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, 0x0) 09:42:59 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x3, @local, 0x80000000}, @in={0x2, 0x4e23, @loopback}], 0x2c) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:42:59 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000004000000000000000000000000000120a1070071756575"], 0x38) 09:43:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:43:00 executing program 2: 09:43:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000002c0)) 09:43:00 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x33) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r3, 0x214, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb4ef}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x837}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 09:43:00 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000008000000000000000000000000000120a1070071756575"], 0x38) 09:43:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:43:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x3, @local, 0x80000000}, @in={0x2, 0x4e23, @loopback}], 0x2c) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:00 executing program 2: 09:43:00 executing program 2 (fault-call:2 fault-nth:0): syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)) 09:43:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:43:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x3, @local, 0x80000000}, @in={0x2, 0x4e23, @loopback}], 0x2c) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:00 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000001b000000000000000000000000000120a1070071756575"], 0x38) 09:43:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x2, &(0x7f00000002c0)) 09:43:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:43:00 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)) 09:43:00 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) 09:43:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x3, @local, 0x80000000}, @in={0x2, 0x4e23, @loopback}], 0x2c) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:00 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000007d000000000000000000000000000120a1070071756575"], 0x38) 09:43:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:43:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x10, &(0x7f00000002c0)) 09:43:00 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x2}) 09:43:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)) 09:43:01 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000bf000000000000000000000000000120a1070071756575"], 0x38) 09:43:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x3, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/165, 0xa5}, {&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000180)=""/187, 0xbb}], 0x3) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) 09:43:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4c01, &(0x7f00000002c0)) 09:43:01 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)) 09:43:01 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x3}) 09:43:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)) 09:43:01 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000f4010000000000000000000000000120a1070071756575"], 0x38) 09:43:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5206, &(0x7f00000002c0)) 09:43:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)) 09:43:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r2, 0x4) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r3}) 09:43:01 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)) 09:43:01 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000001b0000000000000000000000000120a1070071756575"], 0x38) 09:43:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, 0x0) 09:43:01 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x4}) 09:43:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5421, &(0x7f00000002c0)) 09:43:01 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)) 09:43:01 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000001f0000000000000000000000000120a1070071756575"], 0x38) 09:43:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000040)='bpq0\x00') 09:43:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, 0x0) 09:43:01 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000140)={0x0, r0}) 09:43:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5429, &(0x7f00000002c0)) 09:43:01 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x5}) 09:43:02 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000400000000000000000000000000120a1070071756575"], 0x38) 09:43:02 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000140)={0x0, r0}) 09:43:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, 0x0) 09:43:02 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RAUTH(r1, &(0x7f0000000080)={0x14, 0x67, 0x2, {0x20, 0x2, 0x7}}, 0x14) r2 = eventfd(0xffffffffffff053f) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) r3 = dup2(r0, r1) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f00000000c0)=""/101) 09:43:02 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000140)={0x0, r0}) 09:43:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x542e, &(0x7f00000002c0)) 09:43:02 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000007d0000000000000000000000000120a1070071756575"], 0x38) 09:43:02 executing program 4 (fault-call:2 fault-nth:0): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:43:02 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x6}) 09:43:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5450, &(0x7f00000002c0)) 09:43:02 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000bf0000000000000000000000000120a1070071756575"], 0x38) [ 1199.620359][T13741] FAULT_INJECTION: forcing a failure. [ 1199.620359][T13741] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.724163][T13741] CPU: 0 PID: 13741 Comm: syz-executor.4 Not tainted 5.2.0+ #90 [ 1199.731854][T13741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1199.741915][T13741] Call Trace: [ 1199.745221][T13741] dump_stack+0x172/0x1f0 [ 1199.749574][T13741] should_fail.cold+0xa/0x15 [ 1199.754186][T13741] ? fault_create_debugfs_attr+0x180/0x180 [ 1199.760008][T13741] ? ___might_sleep+0x163/0x280 [ 1199.764962][T13741] __should_failslab+0x121/0x190 [ 1199.769912][T13741] should_failslab+0x9/0x14 09:43:02 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000001f40000000000000000000000000120a1070071756575"], 0x38) 09:43:02 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000001000000000000000000000120a1070071756575"], 0x38) [ 1199.774423][T13741] __kmalloc+0x2e0/0x770 [ 1199.778682][T13741] ? tomoyo_realpath_from_path+0xc0/0x7b0 [ 1199.784604][T13741] ? rcu_read_lock_sched_held+0x110/0x130 [ 1199.790328][T13741] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1199.796061][T13741] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1199.801615][T13741] ? tomoyo_path_number_perm+0x193/0x520 [ 1199.807260][T13741] tomoyo_path_number_perm+0x1dd/0x520 [ 1199.812726][T13741] ? tomoyo_path_number_perm+0x193/0x520 [ 1199.818372][T13741] ? tomoyo_execute_permission+0x4a0/0x4a0 09:43:02 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x7}) [ 1199.824181][T13741] ? __f_unlock_pos+0x19/0x20 [ 1199.828893][T13741] ? __fget+0x384/0x560 [ 1199.833061][T13741] ? ksys_dup3+0x3e0/0x3e0 [ 1199.837484][T13741] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1199.843738][T13741] ? fput_many+0x12c/0x1a0 [ 1199.848173][T13741] tomoyo_file_ioctl+0x23/0x30 [ 1199.852943][T13741] security_file_ioctl+0x77/0xc0 [ 1199.857878][T13741] ksys_ioctl+0x57/0xd0 [ 1199.862038][T13741] __x64_sys_ioctl+0x73/0xb0 [ 1199.866640][T13741] do_syscall_64+0xfd/0x6a0 [ 1199.871152][T13741] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1199.877041][T13741] RIP: 0033:0x459829 [ 1199.880938][T13741] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1199.900721][T13741] RSP: 002b:00007fefe570ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1199.909143][T13741] RAX: ffffffffffffffda RBX: 00007fefe570ac90 RCX: 0000000000459829 [ 1199.917123][T13741] RDX: 00000000200002c0 RSI: 000000004004af61 RDI: 0000000000000003 09:43:02 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5, 0x200000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = eventfd(0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) 09:43:02 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000004000000000000000000000120a1070071756575"], 0x38) 09:43:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) [ 1199.925101][T13741] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1199.933079][T13741] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fefe570b6d4 [ 1199.941056][T13741] R13: 00000000004c47aa R14: 00000000004d8860 R15: 0000000000000004 [ 1199.951611][T13741] ERROR: Out of memory at tomoyo_realpath_from_path. 09:43:02 executing program 4 (fault-call:2 fault-nth:1): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:43:02 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000008000000000000000000000120a1070071756575"], 0x38) 09:43:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5451, &(0x7f00000002c0)) 09:43:03 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:03 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x6f}) [ 1200.134285][T14070] FAULT_INJECTION: forcing a failure. [ 1200.134285][T14070] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.193366][T14070] CPU: 0 PID: 14070 Comm: syz-executor.4 Not tainted 5.2.0+ #90 [ 1200.205665][T14070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1200.217301][T14070] Call Trace: [ 1200.220614][T14070] dump_stack+0x172/0x1f0 [ 1200.224968][T14070] should_fail.cold+0xa/0x15 [ 1200.229580][T14070] ? fault_create_debugfs_attr+0x180/0x180 [ 1200.235407][T14070] ? ___might_sleep+0x163/0x280 [ 1200.240272][T14070] __should_failslab+0x121/0x190 [ 1200.245224][T14070] should_failslab+0x9/0x14 [ 1200.249736][T14070] __kmalloc+0x2e0/0x770 [ 1200.253987][T14070] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1200.260235][T14070] ? d_absolute_path+0x11b/0x170 [ 1200.265183][T14070] ? __d_path+0x140/0x140 [ 1200.269583][T14070] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1200.274955][T14070] tomoyo_encode2.part.0+0xf5/0x400 [ 1200.280153][T14070] tomoyo_encode+0x2b/0x50 [ 1200.284563][T14070] tomoyo_realpath_from_path+0x1d3/0x7b0 09:43:03 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000001b000000000000000000000120a1070071756575"], 0x38) [ 1200.290201][T14070] tomoyo_path_number_perm+0x1dd/0x520 [ 1200.290215][T14070] ? tomoyo_path_number_perm+0x193/0x520 [ 1200.290234][T14070] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1200.290247][T14070] ? __f_unlock_pos+0x19/0x20 [ 1200.290295][T14070] ? __fget+0x384/0x560 [ 1200.290315][T14070] ? ksys_dup3+0x3e0/0x3e0 [ 1200.320366][T14070] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1200.326619][T14070] ? fput_many+0x12c/0x1a0 [ 1200.331052][T14070] tomoyo_file_ioctl+0x23/0x30 [ 1200.335830][T14070] security_file_ioctl+0x77/0xc0 [ 1200.340777][T14070] ksys_ioctl+0x57/0xd0 [ 1200.344941][T14070] __x64_sys_ioctl+0x73/0xb0 [ 1200.349547][T14070] do_syscall_64+0xfd/0x6a0 [ 1200.354068][T14070] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1200.359964][T14070] RIP: 0033:0x459829 [ 1200.363861][T14070] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1200.384764][T14070] RSP: 002b:00007fefe570ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:43:03 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000001f000000000000000000000120a1070071756575"], 0x38) 09:43:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) write$FUSE_WRITE(r2, &(0x7f00000000c0)={0xb, 0x0, 0x1, {0x803}}, 0x18) [ 1200.393183][T14070] RAX: ffffffffffffffda RBX: 00007fefe570ac90 RCX: 0000000000459829 [ 1200.401178][T14070] RDX: 00000000200002c0 RSI: 000000004004af61 RDI: 0000000000000003 [ 1200.409160][T14070] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1200.417139][T14070] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fefe570b6d4 [ 1200.425116][T14070] R13: 00000000004c47aa R14: 00000000004d8860 R15: 0000000000000004 09:43:03 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5452, &(0x7f00000002c0)) [ 1200.478094][T14070] ERROR: Out of memory at tomoyo_realpath_from_path. 09:43:03 executing program 4 (fault-call:2 fault-nth:2): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:43:03 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000040000000000000000000000120a1070071756575"], 0x38) 09:43:03 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x300}) 09:43:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5460, &(0x7f00000002c0)) 09:43:03 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) [ 1200.773065][T14372] FAULT_INJECTION: forcing a failure. [ 1200.773065][T14372] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.811820][T14372] CPU: 1 PID: 14372 Comm: syz-executor.4 Not tainted 5.2.0+ #90 [ 1200.819508][T14372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1200.829575][T14372] Call Trace: [ 1200.832885][T14372] dump_stack+0x172/0x1f0 [ 1200.837223][T14372] should_fail.cold+0xa/0x15 [ 1200.841823][T14372] ? fault_create_debugfs_attr+0x180/0x180 [ 1200.847650][T14372] ? ___might_sleep+0x163/0x280 [ 1200.852517][T14372] __should_failslab+0x121/0x190 [ 1200.857463][T14372] should_failslab+0x9/0x14 [ 1200.861983][T14372] __kmalloc+0x2e0/0x770 [ 1200.866249][T14372] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1200.872500][T14372] ? d_absolute_path+0x11b/0x170 [ 1200.877446][T14372] ? __d_path+0x140/0x140 [ 1200.881792][T14372] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1200.887182][T14372] tomoyo_encode2.part.0+0xf5/0x400 [ 1200.892401][T14372] tomoyo_encode+0x2b/0x50 [ 1200.896847][T14372] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 1200.902502][T14372] tomoyo_path_number_perm+0x1dd/0x520 [ 1200.907974][T14372] ? tomoyo_path_number_perm+0x193/0x520 [ 1200.913628][T14372] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1200.919448][T14372] ? __f_unlock_pos+0x19/0x20 [ 1200.924179][T14372] ? __fget+0x384/0x560 [ 1200.928362][T14372] ? ksys_dup3+0x3e0/0x3e0 [ 1200.932793][T14372] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1200.939050][T14372] ? fput_many+0x12c/0x1a0 [ 1200.943487][T14372] tomoyo_file_ioctl+0x23/0x30 [ 1200.948269][T14372] security_file_ioctl+0x77/0xc0 [ 1200.953225][T14372] ksys_ioctl+0x57/0xd0 [ 1200.957398][T14372] __x64_sys_ioctl+0x73/0xb0 [ 1200.962001][T14372] do_syscall_64+0xfd/0x6a0 [ 1200.966522][T14372] entry_SYSCALL_64_after_hwframe+0x49/0xbe 09:43:03 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000007d000000000000000000000120a1070071756575"], 0x38) 09:43:03 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000bf000000000000000000000120a1070071756575"], 0x38) 09:43:03 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000001f4000000000000000000000120a1070071756575"], 0x38) [ 1200.972423][T14372] RIP: 0033:0x459829 [ 1200.976324][T14372] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1200.995944][T14372] RSP: 002b:00007fefe570ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.004370][T14372] RAX: ffffffffffffffda RBX: 00007fefe570ac90 RCX: 0000000000459829 [ 1201.012354][T14372] RDX: 00000000200002c0 RSI: 000000004004af61 RDI: 0000000000000003 09:43:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x2e, 0x61, 0x7f, 0x61]}}, &(0x7f0000000080)=""/45, 0x1e, 0x2d, 0x1}, 0x20) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) [ 1201.020337][T14372] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1201.028312][T14372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fefe570b6d4 [ 1201.036287][T14372] R13: 00000000004c47aa R14: 00000000004d8860 R15: 0000000000000004 [ 1201.052252][T14372] ERROR: Out of memory at tomoyo_realpath_from_path. 09:43:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5601, &(0x7f00000002c0)) 09:43:03 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:04 executing program 4 (fault-call:2 fault-nth:3): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:43:04 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000fffffffd000000000000000000000120a1070071756575"], 0x38) 09:43:04 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x3a0}) 09:43:04 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:04 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000fffffffe000000000000000000000120a1070071756575"], 0x38) 09:43:04 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5603, &(0x7f00000002c0)) 09:43:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:43:04 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xeb00000000000000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x220280, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x76, &(0x7f00000000c0)=""/32, &(0x7f0000000100)=0x20) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1, r1}) 09:43:04 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000fdffffff000000000000000000000120a1070071756575"], 0x38) 09:43:04 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:04 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x500}) 09:43:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x2, &(0x7f00000002c0)) 09:43:04 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x6364, &(0x7f00000002c0)) 09:43:04 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000feffffff000000000000000000000120a1070071756575"], 0x38) 09:43:04 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x10, &(0x7f00000002c0)) 09:43:04 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x400) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xd472, 0x400080) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={r3, @in={{0x2, 0x4e24, @rand_addr=0x20}}, 0x1, 0x80000000}, 0x90) 09:43:04 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8912, &(0x7f00000002c0)) 09:43:04 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x600}) 09:43:04 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000000010000000000000120a1070071756575"], 0x38) 09:43:04 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:04 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000000040000000000000120a1070071756575"], 0x38) 09:43:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4b70, &(0x7f00000002c0)) 09:43:05 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8914, &(0x7f00000002c0)) 09:43:05 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x700}) 09:43:05 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x80000001, 0x20000) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r2 = eventfd(0x0) r3 = semget$private(0x0, 0x0, 0x20) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000080)) semctl$GETNCNT(r3, 0x4, 0xe, &(0x7f0000000300)=""/4096) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x3ffffffffffffffc, r2}) 09:43:05 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000000080000000000000120a1070071756575"], 0x38) 09:43:05 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:05 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4c01, &(0x7f00000002c0)) 09:43:05 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8924, &(0x7f00000002c0)) 09:43:05 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000000000001b0000000000000120a1070071756575"], 0x38) 09:43:05 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:05 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x3f00}) 09:43:05 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5385, &(0x7f00000002c0)) 09:43:05 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000000000001f0000000000000120a1070071756575"], 0x38) 09:43:05 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8933, &(0x7f00000002c0)) 09:43:05 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffffffffff9d) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:43:05 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:05 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000000400000000000000120a1070071756575"], 0x38) 09:43:05 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:05 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5421, &(0x7f00000002c0)) 09:43:05 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x894b, &(0x7f00000002c0)) 09:43:05 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x4000}) 09:43:06 executing program 1: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TIOCCONS(r0, 0x541d) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000000)=0xfffffffeffffffff) 09:43:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000000000007d0000000000000120a1070071756575"], 0x38) 09:43:06 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8954, &(0x7f00000002c0)) 09:43:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5429, &(0x7f00000002c0)) 09:43:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000000bf0000000000000120a1070071756575"], 0x38) 09:43:06 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) 09:43:06 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x8040452f, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) 09:43:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x542e, &(0x7f00000002c0)) 09:43:06 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x6f00}) 09:43:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000001f40000000000000120a1070071756575"], 0x38) 09:43:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x89a0, &(0x7f00000002c0)) 09:43:06 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) 09:43:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000fffffffd0000000000000120a1070071756575"], 0x38) 09:43:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5450, &(0x7f00000002c0)) 09:43:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x89a1, &(0x7f00000002c0)) 09:43:06 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0xa003}) 09:43:06 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) 09:43:06 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0x100) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x200, {{0x2, 0x4e21, @loopback}}}, 0x88) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r2) r3 = eventfd(0x0) sendfile(r0, r1, &(0x7f0000000200), 0xfffffffffffffff7) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r3}) 09:43:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000fffffffe0000000000000120a1070071756575"], 0x38) 09:43:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5451, &(0x7f00000002c0)) 09:43:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000040000000000000000000000000120a1070071756575"], 0x38) 09:43:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae01, &(0x7f00000002c0)) 09:43:06 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)) 09:43:07 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x3b5f5}) 09:43:07 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xdb5f1c87802d495b, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:43:07 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000080000000000000000000000000120a1070071756575"], 0x38) 09:43:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5452, &(0x7f00000002c0)) 09:43:07 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae41, &(0x7f00000002c0)) 09:43:07 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)) 09:43:07 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000001b0000000000000000000000000120a1070071756575"], 0x38) 09:43:07 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x3b5ff}) 09:43:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5460, &(0x7f00000002c0)) 09:43:07 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae60, &(0x7f00000002c0)) 09:43:07 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)) 09:43:07 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000007d0000000000000000000000000120a1070071756575"], 0x38) 09:43:07 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x8cb9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x2, r1}) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xbe2, 0x8040) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000180)={0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r3 = dup2(r0, r0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000040)=""/138) 09:43:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5462, &(0x7f00000002c0)) 09:43:07 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae80, &(0x7f00000002c0)) 09:43:07 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x3b609}) 09:43:07 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:07 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000bf0000000000000000000000000120a1070071756575"], 0x38) [ 1204.976669][T17034] FAULT_INJECTION: forcing a failure. [ 1204.976669][T17034] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.021643][T17034] CPU: 0 PID: 17034 Comm: syz-executor.3 Not tainted 5.2.0+ #90 [ 1205.029336][T17034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.039403][T17034] Call Trace: [ 1205.042712][T17034] dump_stack+0x172/0x1f0 [ 1205.047063][T17034] should_fail.cold+0xa/0x15 [ 1205.051678][T17034] ? fault_create_debugfs_attr+0x180/0x180 [ 1205.057507][T17034] ? ___might_sleep+0x163/0x280 [ 1205.062377][T17034] __should_failslab+0x121/0x190 [ 1205.067328][T17034] should_failslab+0x9/0x14 [ 1205.071840][T17034] __kmalloc+0x2e0/0x770 [ 1205.076087][T17034] ? tomoyo_realpath_from_path+0xc0/0x7b0 [ 1205.081802][T17034] ? rcu_read_lock_sched_held+0x110/0x130 [ 1205.081814][T17034] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1205.081831][T17034] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1205.081848][T17034] ? tomoyo_path_number_perm+0x193/0x520 [ 1205.081871][T17034] tomoyo_path_number_perm+0x1dd/0x520 [ 1205.081886][T17034] ? tomoyo_path_number_perm+0x193/0x520 [ 1205.081906][T17034] ? tomoyo_execute_permission+0x4a0/0x4a0 09:43:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5501, &(0x7f00000002c0)) [ 1205.081919][T17034] ? __f_unlock_pos+0x19/0x20 [ 1205.081964][T17034] ? __fget+0x384/0x560 [ 1205.130149][T17034] ? ksys_dup3+0x3e0/0x3e0 [ 1205.134564][T17034] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1205.140810][T17034] ? fput_many+0x12c/0x1a0 [ 1205.145243][T17034] tomoyo_file_ioctl+0x23/0x30 [ 1205.150028][T17034] security_file_ioctl+0x77/0xc0 [ 1205.155058][T17034] ksys_ioctl+0x57/0xd0 [ 1205.159242][T17034] __x64_sys_ioctl+0x73/0xb0 [ 1205.163839][T17034] do_syscall_64+0xfd/0x6a0 [ 1205.168358][T17034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1205.174253][T17034] RIP: 0033:0x459829 [ 1205.178152][T17034] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1205.197764][T17034] RSP: 002b:00007f0a182c5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1205.206189][T17034] RAX: ffffffffffffffda RBX: 00007f0a182c5c90 RCX: 0000000000459829 [ 1205.214185][T17034] RDX: 0000000020000140 RSI: 000000004008af20 RDI: 0000000000000003 09:43:08 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x108, r2, 0x304, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc237}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffb}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x93f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x25}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x28040000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x108}}, 0x40) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0x3fd) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x10401, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r3}) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) mlockall(0x7) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000100)='em0{vmnet1wlan0md5sumeth1^selinux-^selinux\x00', &(0x7f0000000140)) 09:43:08 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000f40100000000000000000000000120a1070071756575"], 0x38) [ 1205.222166][T17034] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1205.230138][T17034] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a182c66d4 [ 1205.238093][T17034] R13: 00000000004c47aa R14: 00000000004d8860 R15: 0000000000000005 09:43:08 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x6364, &(0x7f00000002c0)) 09:43:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xaf01, &(0x7f00000002c0)) 09:43:08 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x1000000}) 09:43:08 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000001b00000000000000000000000120a1070071756575"], 0x38) 09:43:08 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x6685, &(0x7f00000002c0)) 09:43:08 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x0, 0x8}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x0, r2}) 09:43:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40045201, &(0x7f00000002c0)) [ 1205.525028][T17034] ERROR: Out of memory at tomoyo_realpath_from_path. 09:43:08 executing program 3 (fault-call:3 fault-nth:1): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:08 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000001f00000000000000000000000120a1070071756575"], 0x38) 09:43:08 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x2000000}) [ 1205.793199][T17557] FAULT_INJECTION: forcing a failure. [ 1205.793199][T17557] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1205.806452][T17557] CPU: 0 PID: 17557 Comm: syz-executor.3 Not tainted 5.2.0+ #90 [ 1205.814089][T17557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.824158][T17557] Call Trace: [ 1205.827469][T17557] dump_stack+0x172/0x1f0 [ 1205.831812][T17557] should_fail.cold+0xa/0x15 [ 1205.836407][T17557] ? fault_create_debugfs_attr+0x180/0x180 09:43:08 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000080)={0x1, 0x6000}) 09:43:08 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000004000000000000000000000000120a1070071756575"], 0x38) [ 1205.842243][T17557] ? lock_downgrade+0x920/0x920 [ 1205.847122][T17557] should_fail_alloc_page+0x50/0x60 [ 1205.852332][T17557] __alloc_pages_nodemask+0x1a1/0x8f0 [ 1205.857714][T17557] ? __kasan_check_read+0x11/0x20 [ 1205.862755][T17557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1205.869010][T17557] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1205.874732][T17557] ? __kasan_check_read+0x11/0x20 [ 1205.879759][T17557] ? fault_create_debugfs_attr+0x180/0x180 [ 1205.885578][T17557] cache_grow_begin+0x90/0xd20 [ 1205.890345][T17557] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1205.896066][T17557] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1205.902314][T17557] __kmalloc+0x6b2/0x770 [ 1205.906577][T17557] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1205.912315][T17557] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1205.917873][T17557] ? tomoyo_path_number_perm+0x193/0x520 [ 1205.923529][T17557] tomoyo_path_number_perm+0x1dd/0x520 [ 1205.928997][T17557] ? tomoyo_path_number_perm+0x193/0x520 [ 1205.934645][T17557] ? tomoyo_execute_permission+0x4a0/0x4a0 09:43:08 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000007d00000000000000000000000120a1070071756575"], 0x38) [ 1205.940458][T17557] ? __f_unlock_pos+0x19/0x20 [ 1205.945189][T17557] ? __fget+0x384/0x560 [ 1205.949363][T17557] ? ksys_dup3+0x3e0/0x3e0 [ 1205.953787][T17557] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1205.960033][T17557] ? fput_many+0x12c/0x1a0 [ 1205.964467][T17557] tomoyo_file_ioctl+0x23/0x30 [ 1205.969238][T17557] security_file_ioctl+0x77/0xc0 [ 1205.974194][T17557] ksys_ioctl+0x57/0xd0 [ 1205.978368][T17557] __x64_sys_ioctl+0x73/0xb0 [ 1205.982975][T17557] do_syscall_64+0xfd/0x6a0 [ 1205.987490][T17557] entry_SYSCALL_64_after_hwframe+0x49/0xbe 09:43:08 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000bf00000000000000000000000120a1070071756575"], 0x38) [ 1205.993391][T17557] RIP: 0033:0x459829 [ 1205.997302][T17557] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1206.016918][T17557] RSP: 002b:00007f0a182c5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1206.025349][T17557] RAX: ffffffffffffffda RBX: 00007f0a182c5c90 RCX: 0000000000459829 [ 1206.033338][T17557] RDX: 0000000020000140 RSI: 000000004008af20 RDI: 0000000000000003 09:43:08 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000001f400000000000000000000000120a1070071756575"], 0x38) 09:43:08 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x890b, &(0x7f00000002c0)) [ 1206.041321][T17557] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1206.049303][T17557] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a182c66d4 [ 1206.057284][T17557] R13: 00000000004c47aa R14: 00000000004d8860 R15: 0000000000000005 09:43:09 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000010000000000000000000120a1070071756575"], 0x38) 09:43:09 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f00000000c0)={0x6, 0x5}) r2 = eventfd(0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x1d02, 0x8001, 0xe0000000000}, &(0x7f0000000200)=0x10) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2}) 09:43:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x400454ca, &(0x7f00000002c0)) 09:43:09 executing program 3 (fault-call:3 fault-nth:2): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:09 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x3000000}) 09:43:09 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000040000000000000000000120a1070071756575"], 0x38) [ 1206.360587][T17821] FAULT_INJECTION: forcing a failure. [ 1206.360587][T17821] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.393072][T17821] CPU: 0 PID: 17821 Comm: syz-executor.3 Not tainted 5.2.0+ #90 [ 1206.400762][T17821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1206.410828][T17821] Call Trace: [ 1206.414137][T17821] dump_stack+0x172/0x1f0 [ 1206.418487][T17821] should_fail.cold+0xa/0x15 [ 1206.423097][T17821] ? fault_create_debugfs_attr+0x180/0x180 [ 1206.428932][T17821] ? ___might_sleep+0x163/0x280 [ 1206.433804][T17821] __should_failslab+0x121/0x190 [ 1206.438742][T17821] should_failslab+0x9/0x14 [ 1206.438756][T17821] __kmalloc+0x2e0/0x770 [ 1206.438774][T17821] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1206.438789][T17821] ? d_absolute_path+0x11b/0x170 [ 1206.438806][T17821] ? __d_path+0x140/0x140 [ 1206.453745][T17821] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1206.453767][T17821] tomoyo_encode2.part.0+0xf5/0x400 [ 1206.453786][T17821] tomoyo_encode+0x2b/0x50 [ 1206.453803][T17821] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 1206.483605][T17821] tomoyo_path_number_perm+0x1dd/0x520 [ 1206.489077][T17821] ? tomoyo_path_number_perm+0x193/0x520 [ 1206.494740][T17821] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1206.500557][T17821] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1206.505886][T17821] ? __fget+0x384/0x560 09:43:09 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000080000000000000000000120a1070071756575"], 0x38) 09:43:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x400454cd, &(0x7f00000002c0)) [ 1206.510057][T17821] ? ksys_dup3+0x3e0/0x3e0 [ 1206.514480][T17821] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1206.520738][T17821] ? fput_many+0x12c/0x1a0 [ 1206.525151][T17821] tomoyo_file_ioctl+0x23/0x30 [ 1206.529912][T17821] security_file_ioctl+0x77/0xc0 [ 1206.534855][T17821] ksys_ioctl+0x57/0xd0 [ 1206.539021][T17821] __x64_sys_ioctl+0x73/0xb0 [ 1206.543623][T17821] do_syscall_64+0xfd/0x6a0 [ 1206.548139][T17821] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1206.554033][T17821] RIP: 0033:0x459829 09:43:09 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000001b0000000000000000000120a1070071756575"], 0x38) [ 1206.557931][T17821] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1206.577543][T17821] RSP: 002b:00007f0a182c5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1206.585967][T17821] RAX: ffffffffffffffda RBX: 00007f0a182c5c90 RCX: 0000000000459829 [ 1206.593950][T17821] RDX: 0000000020000140 RSI: 000000004008af20 RDI: 0000000000000003 [ 1206.601935][T17821] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:43:09 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000001f0000000000000000000120a1070071756575"], 0x38) 09:43:09 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8912, &(0x7f00000002c0)) [ 1206.609913][T17821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0a182c66d4 [ 1206.617888][T17821] R13: 00000000004c47aa R14: 00000000004d8860 R15: 0000000000000005 [ 1206.668906][T17821] ERROR: Out of memory at tomoyo_realpath_from_path. 09:43:09 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x1d) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x0, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x40) 09:43:09 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000400000000000000000000120a1070071756575"], 0x38) 09:43:09 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x4000000}) 09:43:09 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8933, &(0x7f00000002c0)) 09:43:09 executing program 3 (fault-call:3 fault-nth:3): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40045542, &(0x7f00000002c0)) 09:43:09 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e40000000000000000000000000000000000002300000000000000007d0000000000000000000120a1070071756575"], 0x38) 09:43:09 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x894c, &(0x7f00000002c0)) 09:43:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004560e, &(0x7f00000002c0)) 09:43:09 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x5000000}) 09:43:09 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) 09:43:10 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000bf0000000000000000000120a1070071756575"], 0x38) 09:43:10 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40049409, &(0x7f00000002c0)) 09:43:10 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x89a1, &(0x7f00000002c0)) 09:43:10 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) 09:43:10 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000001f40000000000000000000120a1070071756575"], 0x38) 09:43:10 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x6000000}) 09:43:10 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae01, &(0x7f00000002c0)) 09:43:10 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) 09:43:10 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004ae86, &(0x7f00000002c0)) 09:43:10 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000fffffffd0000000000000000000120a1070071756575"], 0x38) 09:43:10 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae41, &(0x7f00000002c0)) 09:43:10 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000fffffffe0000000000000000000120a1070071756575"], 0x38) 09:43:10 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x7000000}) 09:43:10 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x2, &(0x7f0000000140)={0x0, r1}) 09:43:10 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af07, &(0x7f00000002c0)) 09:43:10 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000fdffffff0000000000000000000120a1070071756575"], 0x38) 09:43:10 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x440, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x31, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r3}) 09:43:10 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae80, &(0x7f00000002c0)) 09:43:10 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f00000002c0)) 09:43:10 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x9b60300}) 09:43:10 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000feffffff0000000000000000000120a1070071756575"], 0x38) 09:43:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x10, &(0x7f0000000140)={0x0, r1}) 09:43:11 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xae9a, &(0x7f00000002c0)) 09:43:11 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getown(r0, 0x9) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x8000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x79, 0x90000) 09:43:11 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008240b, &(0x7f00000002c0)) 09:43:11 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000000000100000000000120a1070071756575"], 0x38) 09:43:11 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x3f000000}) 09:43:11 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000000000400000000000120a1070071756575"], 0x38) 09:43:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x2288, &(0x7f0000000140)={0x0, r1}) 09:43:11 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40085618, &(0x7f00000002c0)) 09:43:11 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40044900, &(0x7f00000002c0)) 09:43:11 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0xbc6aab30903975a2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0x80000000fffc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3, r3}) keyctl$set_reqkey_keyring(0xe, 0x0) 09:43:11 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000000000800000000000120a1070071756575"], 0x38) 09:43:11 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x40000000}) 09:43:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x2405, &(0x7f0000000140)={0x0, r1}) 09:43:11 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008ae73, &(0x7f00000002c0)) 09:43:11 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000000001b00000000000120a1070071756575"], 0x38) 09:43:11 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x400454ca, &(0x7f00000002c0)) 09:43:11 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x5, 0x1000, 0x7, 0x8, 0x9edd}) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) 09:43:11 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af00, &(0x7f00000002c0)) 09:43:11 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40045542, &(0x7f00000002c0)) 09:43:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4b65, &(0x7f0000000140)={0x0, r1}) 09:43:11 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0x6f000000}) 09:43:12 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000000001f00000000000120a1070071756575"], 0x38) 09:43:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af02, &(0x7f00000002c0)) 09:43:12 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004743d, &(0x7f00000002c0)) 09:43:12 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000000004000000000000120a1070071756575"], 0x38) 09:43:12 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x4, r1}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000040)=0x6) 09:43:12 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0xa0030000}) 09:43:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4c01, &(0x7f0000000140)={0x0, r1}) 09:43:12 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000000000000007d00000000000120a1070071756575"], 0x38) 09:43:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af03, &(0x7f00000002c0)) 09:43:12 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40047451, &(0x7f00000002c0)) 09:43:12 executing program 1 (fault-call:2 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="3101"], 0x2) 09:43:12 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0xf5b50300}) 09:43:12 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000000000000000bf00000000000120a1070071756575"], 0x38) [ 1209.825586][T20613] FAULT_INJECTION: forcing a failure. [ 1209.825586][T20613] name failslab, interval 1, probability 0, space 0, times 0 09:43:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af05, &(0x7f00000002c0)) 09:43:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5421, &(0x7f0000000140)={0x0, r1}) 09:43:12 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40049409, &(0x7f00000002c0)) [ 1209.915786][T20613] CPU: 1 PID: 20613 Comm: syz-executor.1 Not tainted 5.2.0+ #90 [ 1209.923469][T20613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1209.933527][T20613] Call Trace: [ 1209.936832][T20613] dump_stack+0x172/0x1f0 [ 1209.941175][T20613] should_fail.cold+0xa/0x15 [ 1209.945775][T20613] ? fault_create_debugfs_attr+0x180/0x180 [ 1209.951577][T20613] ? ___might_sleep+0x163/0x280 [ 1209.951621][T20613] __should_failslab+0x121/0x190 [ 1209.961389][T20613] should_failslab+0x9/0x14 [ 1209.965912][T20613] __kmalloc+0x2e0/0x770 [ 1209.970173][T20613] ? kernfs_fop_write+0x33b/0x480 [ 1209.975207][T20613] kernfs_fop_write+0x33b/0x480 [ 1209.980072][T20613] __vfs_write+0x8a/0x110 [ 1209.984405][T20613] ? kernfs_fop_open+0xd80/0xd80 [ 1209.989347][T20613] vfs_write+0x268/0x5d0 [ 1209.993604][T20613] ksys_write+0x14f/0x290 [ 1209.997940][T20613] ? __ia32_sys_read+0xb0/0xb0 [ 1210.002710][T20613] ? do_syscall_64+0x26/0x6a0 [ 1210.007389][T20613] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1210.013451][T20613] ? do_syscall_64+0x26/0x6a0 [ 1210.013473][T20613] __x64_sys_write+0x73/0xb0 [ 1210.013492][T20613] do_syscall_64+0xfd/0x6a0 [ 1210.022729][T20613] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1210.022742][T20613] RIP: 0033:0x459829 [ 1210.022756][T20613] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1210.022768][T20613] RSP: 002b:00007fdf702d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 09:43:12 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000000000000001f400000000000120a1070071756575"], 0x38) [ 1210.065013][T20613] RAX: ffffffffffffffda RBX: 00007fdf702d4c90 RCX: 0000000000459829 [ 1210.072992][T20613] RDX: 0000000000000002 RSI: 0000000020000100 RDI: 0000000000000004 [ 1210.080973][T20613] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1210.088955][T20613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdf702d56d4 [ 1210.096937][T20613] R13: 00000000004c9796 R14: 00000000004e0ba0 R15: 0000000000000005 09:43:13 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af00, &(0x7f00000002c0)) 09:43:13 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000000000fffffffd00000000000120a1070071756575"], 0x38) 09:43:13 executing program 1 (fault-call:2 fault-nth:1): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="3101"], 0x2) 09:43:13 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5450, &(0x7f0000000140)={0x0, r1}) 09:43:13 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af06, &(0x7f00000002c0)) 09:43:13 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000000000fffffffe00000000000120a1070071756575"], 0x38) 09:43:13 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0xfeffffff}) 09:43:13 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af60, &(0x7f00000002c0)) [ 1210.375218][T20855] FAULT_INJECTION: forcing a failure. [ 1210.375218][T20855] name failslab, interval 1, probability 0, space 0, times 0 09:43:13 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000400000000000000000000000120a1070071756575"], 0x38) [ 1210.438991][T20855] CPU: 0 PID: 20855 Comm: syz-executor.1 Not tainted 5.2.0+ #90 [ 1210.446683][T20855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1210.456745][T20855] Call Trace: [ 1210.460051][T20855] dump_stack+0x172/0x1f0 [ 1210.464396][T20855] should_fail.cold+0xa/0x15 [ 1210.468999][T20855] ? fault_create_debugfs_attr+0x180/0x180 [ 1210.474808][T20855] ? ___might_sleep+0x163/0x280 [ 1210.479667][T20855] __should_failslab+0x121/0x190 [ 1210.484611][T20855] should_failslab+0x9/0x14 [ 1210.489118][T20855] __kmalloc_track_caller+0x2dc/0x760 [ 1210.494483][T20855] ? lock_downgrade+0x920/0x920 [ 1210.499337][T20855] ? alloc_trial_cpuset+0x27/0x250 [ 1210.504451][T20855] kmemdup+0x27/0x60 [ 1210.508351][T20855] alloc_trial_cpuset+0x27/0x250 [ 1210.513278][T20855] cpuset_write_resmask+0x1c7/0x2020 [ 1210.518547][T20855] ? cpuset_css_offline+0x220/0x220 [ 1210.523736][T20855] ? kernfs_fop_write+0x204/0x480 [ 1210.528771][T20855] ? __might_fault+0x12b/0x1e0 [ 1210.533525][T20855] ? lock_acquire+0x190/0x410 [ 1210.538180][T20855] ? kernfs_fop_write+0x227/0x480 [ 1210.543210][T20855] cgroup_file_write+0x241/0x790 [ 1210.548142][T20855] ? cpuset_css_offline+0x220/0x220 [ 1210.553321][T20855] ? cgroup_migrate_add_task+0x890/0x890 [ 1210.558944][T20855] ? cgroup_migrate_add_task+0x890/0x890 [ 1210.564576][T20855] kernfs_fop_write+0x2b8/0x480 [ 1210.569423][T20855] __vfs_write+0x8a/0x110 [ 1210.573747][T20855] ? kernfs_fop_open+0xd80/0xd80 [ 1210.578721][T20855] vfs_write+0x268/0x5d0 [ 1210.582975][T20855] ksys_write+0x14f/0x290 [ 1210.587312][T20855] ? __ia32_sys_read+0xb0/0xb0 [ 1210.592072][T20855] ? do_syscall_64+0x26/0x6a0 [ 1210.596725][T20855] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1210.602791][T20855] ? do_syscall_64+0x26/0x6a0 [ 1210.607465][T20855] __x64_sys_write+0x73/0xb0 [ 1210.612040][T20855] do_syscall_64+0xfd/0x6a0 [ 1210.616523][T20855] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1210.622403][T20855] RIP: 0033:0x459829 [ 1210.626305][T20855] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1210.645889][T20855] RSP: 002b:00007fdf702d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1210.654277][T20855] RAX: ffffffffffffffda RBX: 00007fdf702d4c90 RCX: 0000000000459829 [ 1210.662236][T20855] RDX: 0000000000000002 RSI: 0000000020000100 RDI: 0000000000000004 [ 1210.670200][T20855] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1210.678156][T20855] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdf702d56d4 [ 1210.686128][T20855] R13: 00000000004c9796 R14: 00000000004e0ba0 R15: 0000000000000005 09:43:13 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af07, &(0x7f00000002c0)) 09:43:13 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0xffb50300}) 09:43:13 executing program 1 (fault-call:2 fault-nth:2): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="3101"], 0x2) 09:43:13 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000000800000000000000000000000120a1070071756575"], 0x38) 09:43:13 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5451, &(0x7f0000000140)={0x0, r1}) 09:43:13 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40106614, &(0x7f00000002c0)) 09:43:13 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000001b00000000000000000000000120a1070071756575"], 0x38) 09:43:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="3101"], 0x2) 09:43:13 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af08, &(0x7f00000002c0)) 09:43:13 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0xffffff7f}) 09:43:13 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40107446, &(0x7f00000002c0)) 09:43:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5452, &(0x7f0000000140)={0x0, r1}) 09:43:14 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af10, &(0x7f00000002c0)) 09:43:14 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e4000000000000000000000000000000000000230000000000007d00000000000000000000000120a1070071756575"], 0x38) 09:43:14 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x401845ff, &(0x7f00000002c0)) [ 1211.420036][T21309] BUG: Bad rss-counter state mm:00000000af0bce3e idx:0 val:8946 [ 1211.427759][T21309] BUG: Bad rss-counter state mm:00000000af0bce3e idx:1 val:552 [ 1211.435385][T21309] BUG: non-zero pgtables_bytes on freeing mm: 143360 [ 1211.442482][T21367] ================================================================== [ 1211.451066][T21367] BUG: KASAN: use-after-free in exit_mmap+0xb2/0x530 [ 1211.457741][T21367] Read of size 8 at addr ffff88805e1a98a8 by task syz-executor.5/21367 [ 1211.465967][T21367] 09:43:14 executing program 2: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) setrlimit(0x1000000000000007, &(0x7f0000000080)) io_uring_setup(0x68, &(0x7f0000000080)={0xfffffffe}) [ 1211.468299][T21367] CPU: 0 PID: 21367 Comm: syz-executor.5 Not tainted 5.2.0+ #90 [ 1211.475930][T21367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1211.485986][T21367] Call Trace: [ 1211.489282][T21367] dump_stack+0x172/0x1f0 [ 1211.493616][T21367] ? exit_mmap+0xb2/0x530 [ 1211.497955][T21367] print_address_description.cold+0xd4/0x306 [ 1211.503934][T21367] ? exit_mmap+0xb2/0x530 [ 1211.508263][T21367] ? exit_mmap+0xb2/0x530 [ 1211.512592][T21367] __kasan_report.cold+0x1b/0x36 09:43:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0a01"], 0x2) [ 1211.517520][T21367] ? synchronize_srcu+0x180/0x3e8 [ 1211.522542][T21367] ? exit_mmap+0xb2/0x530 [ 1211.526879][T21367] kasan_report+0x12/0x17 [ 1211.531213][T21367] check_memory_region+0x134/0x1a0 [ 1211.536332][T21367] __kasan_check_read+0x11/0x20 [ 1211.541180][T21367] exit_mmap+0xb2/0x530 [ 1211.545335][T21367] ? __ia32_sys_munmap+0x80/0x80 [ 1211.550275][T21367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1211.556517][T21367] ? __khugepaged_exit+0x2eb/0x410 [ 1211.561633][T21367] ? __khugepaged_exit+0x2eb/0x410 [ 1211.566751][T21367] ? rcu_read_lock_sched_held+0x110/0x130 [ 1211.572484][T21367] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1211.578732][T21367] ? __khugepaged_exit+0xcf/0x410 [ 1211.583763][T21367] mmput+0x179/0x4d0 [ 1211.587672][T21367] do_exit+0x84e/0x2ea0 [ 1211.591840][T21367] ? mm_update_next_owner+0x640/0x640 [ 1211.597223][T21367] ? lock_downgrade+0x920/0x920 [ 1211.602079][T21367] ? _raw_spin_unlock_irq+0x28/0x90 [ 1211.607283][T21367] ? get_signal+0x392/0x2500 [ 1211.611865][T21367] ? _raw_spin_unlock_irq+0x28/0x90 [ 1211.617071][T21367] do_group_exit+0x135/0x360 [ 1211.621670][T21367] get_signal+0x47c/0x2500 [ 1211.626100][T21367] ? do_vfs_ioctl+0x120/0x13e0 [ 1211.630875][T21367] do_signal+0x87/0x1700 [ 1211.635117][T21367] ? __fget+0x384/0x560 [ 1211.639278][T21367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1211.645519][T21367] ? setup_sigcontext+0x7d0/0x7d0 [ 1211.650547][T21367] ? kick_process+0xef/0x180 [ 1211.655150][T21367] ? exit_to_usermode_loop+0x43/0x380 [ 1211.660520][T21367] ? do_syscall_64+0x5a9/0x6a0 [ 1211.665283][T21367] ? exit_to_usermode_loop+0x43/0x380 [ 1211.670669][T21367] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1211.675957][T21367] ? trace_hardirqs_on+0x67/0x240 [ 1211.681077][T21367] exit_to_usermode_loop+0x286/0x380 [ 1211.686370][T21367] do_syscall_64+0x5a9/0x6a0 [ 1211.690944][T21367] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1211.696816][T21367] RIP: 0033:0x459829 [ 1211.700701][T21367] Code: Bad RIP value. [ 1211.704746][T21367] RSP: 002b:00007f6e5bd12c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1211.713137][T21367] RAX: ffffffffffffffea RBX: 0000000000000003 RCX: 0000000000459829 [ 1211.721090][T21367] RDX: 00000000200002c0 RSI: 000000004008af10 RDI: 0000000000000003 [ 1211.729042][T21367] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1211.736995][T21367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e5bd136d4 [ 1211.744946][T21367] R13: 00000000004c47aa R14: 00000000004d8860 R15: 00000000ffffffff [ 1211.752906][T21367] [ 1211.755212][T21367] Allocated by task 8647: [ 1211.759526][T21367] save_stack+0x23/0x90 [ 1211.763664][T21367] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1211.769275][T21367] kasan_slab_alloc+0xf/0x20 [ 1211.773844][T21367] kmem_cache_alloc+0x121/0x710 [ 1211.778677][T21367] dup_mm+0x8a/0x1430 [ 1211.782649][T21367] copy_process+0x28b7/0x6b00 [ 1211.787305][T21367] _do_fork+0x146/0xfa0 [ 1211.791443][T21367] __x64_sys_clone+0x18d/0x250 [ 1211.796189][T21367] do_syscall_64+0xfd/0x6a0 [ 1211.800671][T21367] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1211.806538][T21367] [ 1211.808847][T21367] Freed by task 21309: [ 1211.812894][T21367] save_stack+0x23/0x90 [ 1211.817031][T21367] __kasan_slab_free+0x102/0x150 [ 1211.821948][T21367] kasan_slab_free+0xe/0x10 [ 1211.826431][T21367] kmem_cache_free+0x86/0x320 [ 1211.831089][T21367] __mmdrop+0x238/0x320 [ 1211.835223][T21367] finish_task_switch+0x457/0x720 [ 1211.840233][T21367] __schedule+0x75d/0x1580 [ 1211.844628][T21367] schedule+0xa8/0x270 [ 1211.848684][T21367] do_nanosleep+0x201/0x6a0 [ 1211.853167][T21367] hrtimer_nanosleep+0x2a6/0x570 [ 1211.858094][T21367] __x64_sys_nanosleep+0x1a6/0x220 [ 1211.863185][T21367] do_syscall_64+0xfd/0x6a0 [ 1211.867664][T21367] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1211.873617][T21367] [ 1211.875934][T21367] The buggy address belongs to the object at ffff88805e1a93c0 [ 1211.875934][T21367] which belongs to the cache mm_struct(65:syz5) of size 1496 [ 1211.890682][T21367] The buggy address is located 1256 bytes inside of [ 1211.890682][T21367] 1496-byte region [ffff88805e1a93c0, ffff88805e1a9998) [ 1211.904102][T21367] The buggy address belongs to the page: [ 1211.909714][T21367] page:ffffea0001786a00 refcount:1 mapcount:0 mapping:ffff888093200a80 index:0xffff88805e1a86c0 compound_mapcount: 0 [ 1211.921924][T21367] flags: 0x1fffc0000010200(slab|head) [ 1211.927282][T21367] raw: 01fffc0000010200 ffffea0002656588 ffffea0002632e88 ffff888093200a80 [ 1211.935846][T21367] raw: ffff88805e1a86c0 ffff88805e1a8040 0000000100000003 0000000000000000 [ 1211.944405][T21367] page dumped because: kasan: bad access detected [ 1211.950792][T21367] [ 1211.953099][T21367] Memory state around the buggy address: [ 1211.958710][T21367] ffff88805e1a9780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 09:43:14 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000bf00000000000000000000000120a1070071756575"], 0x38) [ 1211.966754][T21367] ffff88805e1a9800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1211.974795][T21367] >ffff88805e1a9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1211.982835][T21367] ^ [ 1211.988183][T21367] ffff88805e1a9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1211.996221][T21367] ffff88805e1a9980: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1212.004259][T21367] ================================================================== [ 1212.012296][T21367] Disabling lock debugging due to kernel taint [ 1212.038741][T21367] Kernel panic - not syncing: panic_on_warn set ... [ 1212.045376][T21367] CPU: 1 PID: 21367 Comm: syz-executor.5 Tainted: G B 5.2.0+ #90 [ 1212.054388][T21367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1212.064611][T21367] Call Trace: [ 1212.067906][T21367] dump_stack+0x172/0x1f0 [ 1212.072239][T21367] panic+0x2dc/0x755 [ 1212.076144][T21367] ? add_taint.cold+0x16/0x16 [ 1212.080821][T21367] ? exit_mmap+0xb2/0x530 [ 1212.085157][T21367] ? preempt_schedule+0x4b/0x60 [ 1212.090007][T21367] ? ___preempt_schedule+0x16/0x18 [ 1212.095124][T21367] ? trace_hardirqs_on+0x5e/0x240 [ 1212.100152][T21367] ? exit_mmap+0xb2/0x530 [ 1212.104479][T21367] end_report+0x47/0x4f [ 1212.108628][T21367] ? exit_mmap+0xb2/0x530 [ 1212.112957][T21367] __kasan_report.cold+0xe/0x36 [ 1212.117804][T21367] ? synchronize_srcu+0x180/0x3e8 [ 1212.122825][T21367] ? exit_mmap+0xb2/0x530 [ 1212.127152][T21367] kasan_report+0x12/0x17 [ 1212.131477][T21367] check_memory_region+0x134/0x1a0 [ 1212.136582][T21367] __kasan_check_read+0x11/0x20 [ 1212.141425][T21367] exit_mmap+0xb2/0x530 [ 1212.145577][T21367] ? __ia32_sys_munmap+0x80/0x80 [ 1212.150517][T21367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1212.156753][T21367] ? __khugepaged_exit+0x2eb/0x410 [ 1212.161857][T21367] ? __khugepaged_exit+0x2eb/0x410 [ 1212.166969][T21367] ? rcu_read_lock_sched_held+0x110/0x130 [ 1212.172690][T21367] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1212.178931][T21367] ? __khugepaged_exit+0xcf/0x410 [ 1212.183961][T21367] mmput+0x179/0x4d0 [ 1212.187859][T21367] do_exit+0x84e/0x2ea0 [ 1212.192028][T21367] ? mm_update_next_owner+0x640/0x640 [ 1212.197407][T21367] ? lock_downgrade+0x920/0x920 [ 1212.202267][T21367] ? _raw_spin_unlock_irq+0x28/0x90 [ 1212.207478][T21367] ? get_signal+0x392/0x2500 [ 1212.213163][T21367] ? _raw_spin_unlock_irq+0x28/0x90 [ 1212.218365][T21367] do_group_exit+0x135/0x360 [ 1212.222954][T21367] get_signal+0x47c/0x2500 [ 1212.227370][T21367] ? do_vfs_ioctl+0x120/0x13e0 [ 1212.232137][T21367] do_signal+0x87/0x1700 [ 1212.236381][T21367] ? __fget+0x384/0x560 [ 1212.240540][T21367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1212.246782][T21367] ? setup_sigcontext+0x7d0/0x7d0 [ 1212.251806][T21367] ? kick_process+0xef/0x180 [ 1212.256398][T21367] ? exit_to_usermode_loop+0x43/0x380 [ 1212.261769][T21367] ? do_syscall_64+0x5a9/0x6a0 [ 1212.266532][T21367] ? exit_to_usermode_loop+0x43/0x380 [ 1212.271902][T21367] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1212.277190][T21367] ? trace_hardirqs_on+0x67/0x240 [ 1212.282218][T21367] exit_to_usermode_loop+0x286/0x380 09:43:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2c01"], 0x2) 09:43:14 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000f401000000000000000000000120a1070071756575"], 0x38) 09:43:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="3102"], 0x2) 09:43:15 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000001b000000000000000000000120a1070071756575"], 0x38) 09:43:15 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100000000001001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xfa\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00'}) write$P9_RSTATu(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="020100007d00000000e400000000000000000000000000000000000023000000000000001f000000000000000000000120a1070071756575"], 0x38) [ 1212.287507][T21367] do_syscall_64+0x5a9/0x6a0 [ 1212.292110][T21367] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1212.297995][T21367] RIP: 0033:0x459829 [ 1212.301866][T21367] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1212.321446][T21367] RSP: 002b:00007f6e5bd12c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1212.329833][T21367] RAX: ffffffffffffffea RBX: 0000000000000003 RCX: 0000000000459829 [ 1212.337780][T21367] RDX: 00000000200002c0 RSI: 000000004008af10 RDI: 0000000000000003 [ 1212.345814][T21367] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1212.353848][T21367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e5bd136d4 [ 1212.361801][T21367] R13: 00000000004c47aa R14: 00000000004d8860 R15: 00000000ffffffff [ 1212.370979][T21367] Kernel Offset: disabled [ 1212.375301][T21367] Rebooting in 86400 seconds..